Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
File: H0guXkEsHeu3dt7fr0XDMXTnZC4.mft (raw, json)
Hash identifier: 9JUDqpqrt+tSzQoz2G2wXqbfrloQvFMHoB/T2Yuzu7U=
Subject key identifier: BD:D0:1F:99:0D:83:3C:00:36:57:03:51:EA:94:3F:96:ED:95:5E:8C
Authority key identifier: 1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E
Certificate issuer: /CN=1f482e5e412c1debb776dedfaf45c33174e7642e
Certificate serial: 019E1EDA03661112B8D3451E9F6B7A7AF7AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
Manifest number: 0752
Signing time: Wed 13 May 2026 01:01:04 +0000
Manifest this update: Wed 13 May 2026 01:01:04 +0000
Manifest next update: Thu 14 May 2026 01:01:04 +0000
Files and hashes: 1: 7F5MFPLGX7n9kqmK4iPr3DwuhNU.roa (hash: sUozPnCyk9y8i1GS+PfFGedUQX43402xLyKa/GCV0HY=)
2: H0guXkEsHeu3dt7fr0XDMXTnZC4.crl (hash: h/XtQg0u059ipQy8XPYVH+8MFhMKt8CKDbrJ6uZpwjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:03:66:11:12:b8:d3:45:1e:9f:6b:7a:7a:f7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f482e5e412c1debb776dedfaf45c33174e7642e
Validity
Not Before: May 13 01:01:04 2026 GMT
Not After : May 14 01:01:04 2026 GMT
Subject: CN=bdd01f990d833c0036570351ea943f96ed955e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b9:29:2b:5d:f0:db:8d:d7:65:1b:ba:95:ce:
66:72:eb:b1:41:0d:51:33:21:81:84:c4:c3:32:22:
23:07:77:16:dd:40:d5:76:74:27:ac:14:bf:58:b9:
2b:33:62:67:24:49:68:2d:32:a7:f9:f3:a1:25:c0:
73:f2:c0:5d:f3:15:2f:00:33:34:aa:91:0a:d2:e2:
9b:3c:8c:7b:f9:2a:a0:7a:ae:76:8d:d9:0e:87:2c:
c1:49:b3:31:98:fd:e2:1a:20:8c:da:5e:1c:56:ec:
d0:e0:98:d3:ee:89:36:ec:7c:7a:13:f2:3e:86:83:
ec:f3:58:2c:23:26:eb:17:ff:59:cc:a8:60:ea:67:
5e:45:22:52:91:da:55:fa:75:60:89:4c:e6:77:12:
2f:d2:87:23:04:3f:f4:f4:6a:09:b4:bf:bf:4b:bc:
fe:0c:4a:5b:2d:a5:de:6a:d6:88:ba:26:e9:05:80:
85:89:1e:88:d0:6a:4b:fd:46:bd:11:3f:36:e2:63:
31:24:d2:4d:ff:87:cd:b0:a8:06:22:e4:b7:90:b6:
4c:e2:8a:f9:0d:f5:1a:37:10:ca:44:0d:fd:01:d7:
c4:2e:6d:d0:6b:d2:28:a7:d3:5e:39:55:c1:d4:2d:
4c:ff:49:25:77:f1:b9:38:ec:9d:66:ac:30:2c:e3:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D0:1F:99:0D:83:3C:00:36:57:03:51:EA:94:3F:96:ED:95:5E:8C
X509v3 Authority Key Identifier:
keyid:1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9c:d9:e2:3f:69:85:28:3a:eb:31:46:52:18:5d:dd:c7:4c:
a9:a8:ec:a6:a9:e1:29:7b:db:81:9b:fc:57:e8:61:a0:b2:a8:
82:cc:61:30:ed:71:ca:c1:f5:38:71:63:9d:de:f7:b5:40:2d:
59:7d:2a:fd:d9:5d:31:3e:34:7b:3d:f3:0a:a2:07:c1:83:aa:
2a:2d:21:72:11:8b:b6:0e:bb:b1:54:35:b0:bb:0d:5e:7c:92:
ba:96:bd:5b:a5:a3:82:cf:38:ee:6b:2e:24:71:b5:7d:fd:4a:
32:4e:c5:a7:28:a7:7f:54:3b:53:73:bc:76:66:4f:a2:c6:0f:
f9:73:0f:bc:e5:fa:eb:83:eb:c0:96:3b:19:6a:92:10:9a:a9:
70:9d:40:5d:d5:c6:e2:96:8c:aa:1b:f4:61:06:88:b3:8e:17:
89:7b:95:17:95:88:03:90:36:9c:1e:66:47:7f:2b:79:5a:76:
31:d0:40:9f:77:49:b1:83:be:44:e6:e4:3f:46:c2:e1:2b:33:
62:46:d9:df:a3:59:61:31:2b:88:51:89:4e:d3:9d:e3:b0:11:
ce:9b:32:ae:28:aa:ce:45:76:11:ea:15:ef:d7:88:40:03:2d:
8c:a7:cb:84:50:61:69:17:2a:97:64:b4:f8:86:24:06:e7:1e:
0e:13:99:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:02:23 2026 by rpki-client