Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
File: h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft (raw, json)
Hash identifier: 3sVO3iKO0ow6tlrJ7fAKvoZBgDnRngQ1/wCmSJGwwtE=
Subject key identifier: 06:C3:5F:26:E6:3F:78:73:77:49:B1:CC:81:7A:90:1C:0A:B7:01:41
Authority key identifier: 87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
Certificate issuer: /CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Certificate serial: 019E1F479E610C936FEAA6CAC62E12298430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
Manifest number: 127B
Signing time: Wed 13 May 2026 03:00:47 +0000
Manifest this update: Wed 13 May 2026 03:00:47 +0000
Manifest next update: Thu 14 May 2026 03:00:47 +0000
Files and hashes: 1: 4fVpw4jDmLgLlVEJ14HcYjkhURc.roa (hash: OgxhauoTFqD32kP7fqq3sMCVlZur9FHQRJ/kNIVIhFQ=)
2: h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl (hash: gq3tew8VIxjltphxlNTmXiL3zRxwXLQHtw8TyZRW2dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:9e:61:0c:93:6f:ea:a6:ca:c6:2e:12:29:84:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Validity
Not Before: May 13 03:00:47 2026 GMT
Not After : May 14 03:00:47 2026 GMT
Subject: CN=06c35f26e63f78737749b1cc817a901c0ab70141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9a:66:2f:6b:3a:9b:e0:eb:0b:dd:47:27:83:
00:97:8d:a3:e9:ef:d0:f2:8e:48:ed:88:8d:af:07:
91:01:60:fa:61:b9:48:be:be:e6:1a:2e:cb:eb:56:
b1:75:3d:d2:21:e1:b3:7f:d0:78:fe:1d:0e:be:dc:
fd:ab:12:dd:2a:e5:dd:20:c6:e6:7d:af:ee:d0:d1:
c8:67:c3:75:ea:c3:6a:ad:28:6c:5f:ce:6c:9e:76:
4f:f7:39:15:0a:26:46:ea:d8:be:95:16:21:6f:38:
ce:b6:77:bb:8b:e5:98:5f:8d:d4:d8:26:2e:f5:80:
15:ea:54:b5:82:05:ff:db:a7:5e:97:1d:79:04:b9:
ff:80:c2:c9:32:5b:63:89:80:30:87:ac:70:4e:c5:
c1:f1:4a:65:1d:ad:ba:e4:05:23:b9:84:d4:28:5f:
9c:fb:d6:9c:c2:d6:fc:6f:33:49:d2:31:7b:85:30:
4c:6b:16:ea:6a:58:83:ba:b6:7f:70:9b:08:b9:8d:
d1:75:d5:1b:59:1a:3c:ec:d3:70:ab:ff:a3:04:5e:
41:5e:cd:85:ef:ac:82:f2:12:78:35:ff:52:27:eb:
5b:f3:e0:04:0a:75:63:c7:ae:55:be:65:39:20:f5:
23:ef:5e:6c:f1:a8:89:9b:0e:2d:8f:54:a9:6e:37:
86:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C3:5F:26:E6:3F:78:73:77:49:B1:CC:81:7A:90:1C:0A:B7:01:41
X509v3 Authority Key Identifier:
keyid:87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:19:fe:5b:aa:0e:60:70:85:95:4f:17:85:e0:fa:40:68:8e:
7e:96:c8:96:63:2a:04:de:df:65:6a:81:4b:47:7a:41:21:a1:
38:60:80:69:29:3a:b9:54:d9:1d:23:14:83:f9:46:a2:15:ec:
0d:95:47:11:3c:24:6e:89:57:50:30:df:5e:30:10:64:3a:9b:
6c:3d:0e:61:f4:84:b8:70:ac:2a:60:61:c3:e5:5b:71:be:24:
d4:89:14:11:8d:55:10:ec:63:e4:86:11:3a:c3:d9:11:5e:24:
ae:5b:b8:08:0a:d9:67:66:e0:fa:d9:f3:7a:8d:42:3f:9d:54:
65:29:1d:c5:fe:e7:ec:8f:01:0e:34:29:56:50:6a:df:0d:38:
14:7d:7b:d3:84:94:9e:d7:c4:17:fd:ef:f5:c9:2a:26:2b:58:
6f:4d:02:5e:c9:70:b0:27:0a:0e:41:26:14:8f:22:fc:98:17:
4c:5d:0e:28:97:26:76:4a:cf:e2:fd:7b:01:67:33:3d:5b:7a:
48:49:e8:b4:4b:56:86:df:fa:90:d1:20:68:1d:48:ab:a7:0e:
36:dd:cc:d2:fb:e5:d0:f3:fa:4b:ef:99:0c:15:c6:32:c8:95:
29:4a:82:7b:6b:5b:40:ec:18:52:ae:7e:e4:94:06:6b:ca:03:
62:1e:8c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:02:23 2026 by rpki-client