Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
File: hD0a_PE70hF9R99oPkCmMocATP4.mft (raw, json)
Hash identifier: u+hYgB+ayLiH5lZ/P5IpH/h8KWLAaDl/bST2lL4BmuA=
Subject key identifier: 12:AD:9D:0C:E8:16:F7:6B:C3:50:EF:76:2E:39:5C:A8:E0:68:6F:64
Authority key identifier: 84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
Certificate issuer: /CN=843d1afcf13bd2117d47df683e40a63287004cfe
Certificate serial: 019E1EA2F92CB34910DDBD72EF28F8E81442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
Manifest number: 15B0
Signing time: Wed 13 May 2026 00:00:57 +0000
Manifest this update: Wed 13 May 2026 00:00:57 +0000
Manifest next update: Thu 14 May 2026 00:00:57 +0000
Files and hashes: 1: blJ-TZh-82zY8BmhlGXDYcWlXEM.roa (hash: Fd7qkgfgnAB5yGlcwTOLNMtcHfXu1EK11nyoGzaI4T8=)
2: hD0a_PE70hF9R99oPkCmMocATP4.crl (hash: ILVKHKrms/wBGTs3+oFCfBBSoGr5RwHltncmZZ8bGIE=)
3: uGcdeOeH2FGE8oSm_emFftbBDBI.roa (hash: K6Jsrsz0fx7XMWqDVYW8cVOMG7U2AmGR+nHljnd4RYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:f9:2c:b3:49:10:dd:bd:72:ef:28:f8:e8:14:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843d1afcf13bd2117d47df683e40a63287004cfe
Validity
Not Before: May 13 00:00:57 2026 GMT
Not After : May 14 00:00:57 2026 GMT
Subject: CN=12ad9d0ce816f76bc350ef762e395ca8e0686f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:95:08:fe:eb:cc:e3:86:57:89:e4:c2:4e:02:
e2:ec:44:7d:e5:5f:c1:73:d8:a4:c5:40:fc:ef:f3:
f5:2d:15:a8:66:0c:dc:c0:57:c4:9a:08:06:97:c5:
ce:32:03:93:2d:b8:a8:40:6f:2a:03:5d:61:4c:c4:
bf:f8:52:24:c7:00:03:fc:18:89:de:67:19:18:c3:
c9:92:31:68:e9:8e:d3:d6:72:2a:58:a8:91:82:c2:
8e:c3:fc:dd:44:84:59:c7:1d:54:e0:df:23:39:24:
b0:f3:c5:f4:86:f8:5a:5b:0b:75:27:76:60:83:6d:
18:cf:24:3d:82:08:31:69:41:0e:a9:1e:ee:36:08:
bd:5e:a1:33:61:17:7a:33:79:e3:46:7e:11:e1:ef:
26:af:15:a2:3c:21:36:56:d5:db:ca:76:ae:3e:d3:
77:49:21:e2:90:d9:43:d2:dc:ee:70:08:bf:b1:60:
dd:d4:d2:77:82:10:4b:ef:1b:fc:d8:fe:05:b3:34:
ce:03:c7:53:d2:6d:ee:31:c7:21:9c:98:95:c0:bf:
b8:d0:1c:4c:76:f5:a3:11:03:c1:df:4c:ef:e1:37:
68:0b:03:26:bc:d6:7c:3f:9e:4f:9d:ef:63:8a:ee:
bd:22:97:91:c6:09:b0:e1:1b:70:ad:90:3b:4a:e1:
37:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AD:9D:0C:E8:16:F7:6B:C3:50:EF:76:2E:39:5C:A8:E0:68:6F:64
X509v3 Authority Key Identifier:
keyid:84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:82:e5:86:6c:9b:cf:bb:f6:b2:8f:06:36:f2:47:7c:12:83:
71:15:55:9e:d7:2b:e2:3f:e8:08:4d:5c:28:da:82:b5:1f:30:
5b:b7:f8:a3:91:c0:d4:94:7b:86:7c:ac:b0:24:35:a3:21:0e:
9c:74:56:d3:ee:a9:8f:90:bb:9d:c0:b7:56:54:1b:b0:1c:66:
f5:a8:f1:6f:d3:8d:b5:85:a1:91:0f:ba:de:8a:be:be:40:9b:
72:3a:88:35:5f:3c:57:e1:45:07:36:a3:4d:bd:96:fb:d1:72:
78:fa:73:e0:0a:5f:83:d4:cf:50:59:26:b1:85:9d:09:7b:90:
50:e2:64:0f:07:db:1d:c0:d6:84:01:fd:b8:4a:9e:8d:12:fe:
7c:d5:8d:c2:e7:2b:3e:f4:83:c3:0f:53:1e:80:02:fd:38:50:
bc:43:a9:94:ca:90:40:88:2e:25:23:0f:5c:e7:69:25:40:0b:
99:c4:33:98:4a:0c:26:e4:7c:67:1c:8d:c6:d4:ba:1e:16:32:
78:4d:e6:30:eb:16:df:15:5d:c8:e5:ac:95:cb:cc:ab:69:1d:
9f:86:89:69:eb:9a:ed:f0:ae:69:9a:fb:6e:0a:1c:6f:50:31:
c9:8f:40:87:1c:52:a8:ec:dd:c0:59:ad:87:6f:37:65:e0:a1:
70:32:59:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eovkss0kQ3b1y7yj46BRCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0M2QxYWZjZjEzYmQyMTE3ZDQ3ZGY2ODNlNDBhNjMyODcw
MDRjZmUwHhcNMjYwNTEzMDAwMDU3WhcNMjYwNTE0MDAwMDU3WjAzMTEwLwYDVQQD
EygxMmFkOWQwY2U4MTZmNzZiYzM1MGVmNzYyZTM5NWNhOGUwNjg2ZjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JUI/uvM44ZXieTCTgLi7ER95V/B
c9ikxUD87/P1LRWoZgzcwFfEmggGl8XOMgOTLbioQG8qA11hTMS/+FIkxwAD/BiJ
3mcZGMPJkjFo6Y7T1nIqWKiRgsKOw/zdRIRZxx1U4N8jOSSw88X0hvhaWwt1J3Zg
g20YzyQ9gggxaUEOqR7uNgi9XqEzYRd6M3njRn4R4e8mrxWiPCE2VtXbynauPtN3
SSHikNlD0tzucAi/sWDd1NJ3ghBL7xv82P4FszTOA8dT0m3uMcchnJiVwL+40BxM
dvWjEQPB30zv4TdoCwMmvNZ8P55Pne9jiu69IpeRxgmw4RtwrZA7SuE3qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKtnQzoFvdrw1Dvdi45XKjgaG9kMB8GA1UdIwQY
MBaAFIQ9GvzxO9IRfUffaD5ApjKHAEz+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8xNzMzMDYtMmRiZC00YWQ4LWJkNTEt
YjFmM2JjYzY3YWFlLzEvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8xNzMzMDYtMmRiZC00YWQ4LWJkNTEtYjFmM2JjYzY3YWFl
LzEvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtYLlhmyb
z7v2so8GNvJHfBKDcRVVntcr4j/oCE1cKNqCtR8wW7f4o5HA1JR7hnyssCQ1oyEO
nHRW0+6pj5C7ncC3VlQbsBxm9ajxb9ONtYWhkQ+63oq+vkCbcjqINV88V+FFBzaj
Tb2W+9FyePpz4Apfg9TPUFkmsYWdCXuQUOJkDwfbHcDWhAH9uEqejRL+fNWNwucr
PvSDww9THoAC/ThQvEOplMqQQIguJSMPXOdpJUALmcQzmEoMJuR8ZxyNxtS6HhYy
eE3mMOsW3xVdyOWslcvMq2kdn4aJaeua7fCuaZr7bgocb1AxyY9AhxxSqOzdwFmt
h283ZeChcDJZcQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:43:46 2026 by rpki-client