Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
File: hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft (raw, json)
Hash identifier: JbPR3ELeYzKsNYPGadjyhqxIPcvUfJAw4lUrP+vrKxM=
Subject key identifier: 53:10:7C:A8:42:E6:75:33:2C:CA:E0:B1:8C:08:68:60:0C:D0:64:F1
Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
Certificate issuer: /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Certificate serial: 019E1D59BD80150E0627B35B648977805CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
Manifest number: 18DB
Signing time: Tue 12 May 2026 18:01:20 +0000
Manifest this update: Tue 12 May 2026 18:01:20 +0000
Manifest next update: Wed 13 May 2026 18:01:20 +0000
Files and hashes: 1: gI4tnW4kPKjRONzlu_6zH8MeB9U.roa (hash: SAYaSp1GRG2E/ye85MqnahXwttShXyHtUuRf8N0xnmI=)
2: hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl (hash: 1jpd9N4VICt5+faoAv4Skulnp1M4IiagzIAyL3+WH7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:bd:80:15:0e:06:27:b3:5b:64:89:77:80:5c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Validity
Not Before: May 12 18:01:20 2026 GMT
Not After : May 13 18:01:20 2026 GMT
Subject: CN=53107ca842e675332ccae0b18c0868600cd064f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:65:96:8a:b9:ce:83:dc:d4:ed:3c:30:d7:
fa:7f:58:07:bb:e6:0c:53:a8:b3:a4:09:a1:52:af:
a9:60:54:c3:4b:b5:b0:4d:55:a4:12:4d:89:fc:1e:
7c:90:4e:49:23:1c:5f:5c:af:68:7b:bd:ab:b0:69:
e6:41:5b:3e:e7:48:ca:66:66:ee:86:db:5f:2b:5a:
3f:35:e8:44:d4:36:e0:0d:ec:b2:f3:16:e3:18:b4:
74:ae:51:13:13:e1:30:a2:cd:80:15:49:5c:31:bd:
c4:42:7e:7c:a7:83:22:a2:13:04:e6:15:de:f8:75:
58:00:a3:af:7e:91:44:09:2e:94:e1:b1:21:14:83:
1b:f2:12:88:c6:d6:ee:1b:e2:91:88:d9:33:b3:b2:
ef:57:b8:c8:f8:2e:ab:b8:3d:a2:6a:95:61:60:92:
7e:ce:3a:9b:22:09:14:c1:56:cd:6d:93:c2:7c:03:
7a:23:b7:69:0c:8b:73:e2:d0:0a:c7:9a:27:a2:7e:
3a:b2:56:fd:3c:f1:c9:9b:88:3b:a5:2c:7c:23:b0:
6d:29:d6:3d:22:10:0d:79:99:84:09:61:b0:18:50:
60:84:09:99:2e:4a:eb:c8:f3:0f:53:ed:7b:0e:2a:
81:81:b5:57:5f:b7:c7:41:23:61:08:d1:99:ad:33:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:10:7C:A8:42:E6:75:33:2C:CA:E0:B1:8C:08:68:60:0C:D0:64:F1
X509v3 Authority Key Identifier:
keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d6:94:b6:82:d5:8e:13:05:df:16:46:c3:a6:26:db:ff:c3:
ac:1c:02:34:ce:cc:1e:c4:36:ac:7d:24:ef:4f:19:7e:b5:e7:
66:57:f5:e7:1b:74:e5:41:4f:45:3f:be:ec:3b:9e:82:34:f0:
8c:48:42:c3:57:a9:c3:9b:43:69:08:07:cb:45:84:5b:6c:44:
b1:ad:2e:5f:88:30:6b:7a:ab:9a:94:2f:ed:28:bf:f3:2f:5f:
c6:17:e9:49:3e:dc:55:99:2b:1d:f8:2e:d0:bf:f6:30:31:f1:
a2:b2:ae:62:ae:b8:78:48:b5:27:16:5c:bf:5d:5e:fa:6c:32:
74:02:5a:35:73:fd:81:11:00:a6:25:f3:80:22:93:44:44:20:
8e:8c:cd:fa:3b:c0:6d:7a:26:09:dd:b8:fd:a7:60:fd:41:c9:
89:d6:2c:ce:c8:b6:38:5d:2e:8f:3a:44:e5:5c:71:f2:f0:86:
3e:ed:01:ff:69:74:c2:ee:e8:c7:79:0b:af:26:14:dd:2d:c1:
4b:31:ca:8f:19:ff:a6:4f:fb:00:09:c1:0c:7c:70:f0:22:54:
f6:df:d7:b6:b2:1d:6d:03:b4:02:05:42:8f:7d:c5:14:a3:c5:
be:23:20:ed:a6:62:b7:c4:b6:df:20:50:e8:e8:b3:03:2f:38:
78:67:91:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:31:24 2026 by rpki-client