Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
File: hTYUYRmwRFOQguMmzKkDIAuNSxo.mft (raw, json)
Hash identifier: bq9SAa4FmErpL91mlNc7oVk/MSFOp5KTgpB5kAVtbDs=
Subject key identifier: AF:F3:D1:45:EC:96:08:44:97:E7:01:24:E1:90:A1:14:B5:1A:DA:83
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial: 019E205A1C420CAC83F6DAE39071F0860CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
Manifest number: 1252
Signing time: Wed 13 May 2026 08:00:36 +0000
Manifest this update: Wed 13 May 2026 08:00:36 +0000
Manifest next update: Thu 14 May 2026 08:00:36 +0000
Files and hashes: 1: 4IwzD6JWssSfDrS7OsowJYf8F3g.roa (hash: 3STzPQwFjgmuSyiPKC+VcXtn9kHY3QHNznY54Mamy30=)
2: SgMOoWz5gJhb0nyT-ZKsGgLzAOg.roa (hash: zgTRF9Sx7egnoTtrUbB6SPfcPU50038KU3DAntDwjks=)
3: hTYUYRmwRFOQguMmzKkDIAuNSxo.crl (hash: MjoJdAw+yu0UIs4Vxm159dJcWDH0FUYMMAD8io5JeuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:1c:42:0c:ac:83:f6:da:e3:90:71:f0:86:0c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
Validity
Not Before: May 13 08:00:36 2026 GMT
Not After : May 14 08:00:36 2026 GMT
Subject: CN=aff3d145ec96084497e70124e190a114b51ada83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:84:38:55:eb:1d:0a:64:aa:80:8f:84:0f:be:
c2:0b:54:85:28:26:ee:04:a4:0d:11:3f:aa:fb:69:
94:5c:51:4f:ce:07:2d:51:45:bd:ce:64:76:91:38:
d7:00:34:9b:e1:d2:4b:f4:de:bc:9a:27:d2:10:e0:
00:a8:f7:e3:3b:6d:de:82:29:91:1a:e0:c6:01:02:
22:49:40:be:83:2c:38:d3:80:a0:dc:e6:91:41:d4:
7d:40:a1:97:5c:15:38:5e:58:b4:f3:56:7a:73:b6:
d6:99:85:80:cb:65:b8:ac:23:46:72:14:34:e0:95:
15:cb:39:2e:c1:37:b9:0c:f4:f5:a6:0e:55:32:3b:
f0:5c:5d:ee:81:f9:07:31:0d:c4:5f:87:74:7c:67:
cb:93:72:0c:55:ee:36:e2:df:ab:b7:a5:5e:df:5b:
e7:a1:4a:a5:d9:1d:c1:45:ed:21:b9:5d:de:9b:1a:
09:3e:e5:42:e3:df:5f:62:30:62:92:b9:fe:84:4a:
dd:36:97:ce:9c:6f:fc:cf:c5:6e:7b:cd:ff:ad:67:
0e:3b:be:4f:9b:eb:1e:5f:e9:19:9d:24:71:19:86:
a7:1b:69:e0:68:df:9c:b4:b6:e7:2d:e1:d2:3a:c8:
77:95:c0:d1:cd:89:36:1c:41:c6:35:d2:cf:57:18:
fc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F3:D1:45:EC:96:08:44:97:E7:01:24:E1:90:A1:14:B5:1A:DA:83
X509v3 Authority Key Identifier:
keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:22:cb:25:71:c6:d1:8d:cf:ae:12:40:8e:33:a5:40:8a:b6:
1b:af:c0:0c:a2:1f:c4:4c:3f:d6:a4:2f:80:11:12:05:60:f6:
f8:7a:95:f2:ea:07:50:f8:4a:15:28:82:a0:11:1b:a2:d4:d0:
b4:84:f8:aa:a0:53:d3:09:bc:ff:74:23:51:d8:f1:4c:ce:64:
44:1e:01:65:cb:9e:8a:6b:ef:1d:5b:85:66:d2:cc:e4:52:63:
55:f5:ee:02:df:91:85:7d:03:62:da:b9:4c:f9:ed:99:0b:33:
1a:ca:28:36:c5:42:2b:95:b1:42:2a:19:96:28:e5:df:b7:64:
52:62:8e:0f:57:9a:28:17:d7:3c:10:c9:73:7d:25:00:89:d6:
e0:b8:c5:5c:db:70:ea:c4:33:56:17:f5:e0:61:b7:05:d3:47:
9e:fa:fc:a9:34:af:63:81:a9:2f:6f:fc:2d:d0:d0:fe:16:1e:
2e:ca:c7:88:78:2a:14:c3:0b:16:68:4a:c7:a4:3a:ba:ae:0e:
ea:76:43:4d:f9:2f:37:d9:97:ac:cc:47:a8:68:9b:88:17:84:
47:4e:97:c6:2d:0d:53:0f:5c:1b:ae:94:6e:da:eb:76:fb:eb:
5b:ae:d8:22:15:0f:f6:57:e4:64:8a:5a:58:02:8c:4f:2e:3c:
6b:2a:2a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:14:12 2026 by rpki-client