Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
File: hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft (raw, json)
Hash identifier: qnELV9HnUqJ5yLD9A71Q2ilkJbWRsI6v7QGXhkz/9Dg=
Subject key identifier: 87:16:96:ED:FC:35:E0:3F:B1:E1:B7:03:DF:37:AC:AB:53:CB:03:2D
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial: 019E1DC769F45AEF32B71BC0E61867381379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
Manifest number: 15BC
Signing time: Tue 12 May 2026 20:01:08 +0000
Manifest this update: Tue 12 May 2026 20:01:08 +0000
Manifest next update: Wed 13 May 2026 20:01:08 +0000
Files and hashes: 1: AskFBvRE4tY5tlit_Gy114m2J0A.roa (hash: J6ljvruIBCWnrpJURNZnlPx/uNcMw2gcnFDVYqRVqz0=)
2: hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl (hash: 70RTpXViL9BdfDrRsndsEWjOt1yWVVu7eGmaX+KhmMo=)
3: mMleahkhBsxzGvTuhDg0yXEwF_w.roa (hash: qQecQrTvSIfunD3zEv/rPkBZ+0gt71EWgnmmdmDO4Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:69:f4:5a:ef:32:b7:1b:c0:e6:18:67:38:13:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Validity
Not Before: May 12 20:01:08 2026 GMT
Not After : May 13 20:01:08 2026 GMT
Subject: CN=871696edfc35e03fb1e1b703df37acab53cb032d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:55:d7:65:c6:45:77:d9:e1:5b:8b:bc:19:32:
e8:96:59:91:b9:42:cc:a4:eb:7f:57:18:9d:5c:34:
10:93:5a:90:95:a8:1b:f9:7a:0a:b7:a7:dc:54:68:
0a:8b:7a:a9:38:87:67:f9:60:0c:e6:dc:6e:05:4f:
96:59:3f:09:2b:f8:6b:e0:97:fc:45:39:bc:fd:73:
83:0d:6f:0d:c4:9e:e1:44:17:c4:fa:27:61:4f:4d:
dd:35:ad:dc:e8:09:3d:7a:cb:f1:b9:b7:4e:36:22:
f5:e0:f4:0b:27:55:05:6b:6e:be:fd:48:5a:43:44:
59:5f:2a:51:7b:2e:3b:31:d2:a1:f0:74:3d:be:52:
67:e5:16:b3:17:40:43:e5:be:df:9e:e4:7c:36:2c:
b3:c0:8e:6b:d5:ae:e3:dd:2c:20:1e:74:e9:1d:bd:
6c:3c:e4:59:41:8d:4c:91:68:0b:a7:24:fa:7c:5b:
6f:15:6f:28:b7:1f:f4:f9:86:59:54:39:b6:9b:d8:
bb:5d:f9:86:fa:bb:53:75:25:2c:7d:b4:74:a1:ce:
4f:0d:c1:cd:33:48:1e:9a:6b:f8:38:58:92:43:09:
fe:73:4a:c0:37:9f:f2:9c:99:1f:bc:dd:2a:f1:80:
75:77:04:d2:01:bc:39:aa:e6:78:b7:ed:38:9c:6a:
1d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:16:96:ED:FC:35:E0:3F:B1:E1:B7:03:DF:37:AC:AB:53:CB:03:2D
X509v3 Authority Key Identifier:
keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:15:d6:c2:c8:ea:7d:70:a6:fa:3e:74:7f:48:82:ec:0e:41:
d5:af:4b:f7:6d:64:4c:c0:bf:32:22:1d:36:90:4e:c4:e2:e7:
e8:aa:e5:ca:d2:2a:30:92:b7:0e:b7:0e:bb:a0:84:08:99:28:
a2:90:d3:39:01:1b:7d:1e:b0:34:5b:55:36:59:b2:96:15:63:
7e:d1:ea:b9:39:cf:95:32:69:30:09:8a:d6:30:3f:e8:63:51:
ff:2f:f6:61:a4:41:b4:6c:52:c3:e4:dc:3f:9b:2a:6f:ba:ab:
b6:73:a5:1d:a7:c3:82:6a:2a:52:d5:d5:05:30:63:9e:4d:8c:
3a:83:8f:5d:f5:f3:69:b0:77:b5:e3:14:ba:80:d7:b9:c8:88:
6d:c3:8d:b9:86:03:a4:0e:a6:ad:5a:53:6d:c0:84:de:93:81:
11:ff:48:a5:76:d8:0e:a1:0a:08:4d:fa:47:35:4d:12:45:f1:
a2:63:9b:d3:0a:ee:3a:75:dc:26:b9:db:95:a5:20:0e:63:10:
13:2c:02:87:ef:8f:1d:07:41:4a:9a:7b:f7:74:c1:6d:56:f9:
3a:cf:2d:56:7f:39:7d:7c:1c:63:ab:67:8c:5b:69:4b:25:9b:
b8:0d:72:3c:4c:82:e7:cd:cb:8e:91:47:4a:0e:2c:b9:01:dd:
54:ef:d5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:44:13 2026 by rpki-client