Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
File: Hrq0DWCBM83fdsO1pvgV34H7x90.mft (raw, json)
Hash identifier: 97Zylj2CurFsYMtxtPlIggJYVDaLXz4eAbXPUe0dsrQ=
Subject key identifier: D6:B1:A4:CC:B8:91:DE:DD:C5:42:DC:3F:F1:37:62:A6:71:E3:72:25
Authority key identifier: 1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
Certificate issuer: /CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Certificate serial: 019E1ED9E35FA9FB0D8132B587543E41F2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
Manifest number: 0452
Signing time: Wed 13 May 2026 01:00:56 +0000
Manifest this update: Wed 13 May 2026 01:00:56 +0000
Manifest next update: Thu 14 May 2026 01:00:56 +0000
Files and hashes: 1: 5Kagby_sStjMFhSw2G6-l1YpdBk.roa (hash: Noo2j7EiUwmhRo9X0f0rtLLladI+Ufm3DSaLlHlT9cg=)
2: Hrq0DWCBM83fdsO1pvgV34H7x90.crl (hash: Xe7CKac2tlWHgtJiv+6n3tYfPz3AIJdjp5pJcCMomuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:e3:5f:a9:fb:0d:81:32:b5:87:54:3e:41:f2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Validity
Not Before: May 13 01:00:56 2026 GMT
Not After : May 14 01:00:56 2026 GMT
Subject: CN=d6b1a4ccb891deddc542dc3ff13762a671e37225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:14:bd:81:d6:28:e3:d2:17:22:ff:49:e9:
db:7a:3a:28:52:24:2c:90:b3:15:1c:6e:8c:97:aa:
60:db:1a:9f:a6:80:bf:43:99:28:eb:f3:21:38:81:
ba:1c:03:4d:5f:08:c3:ca:a0:76:15:83:b8:9f:38:
80:bd:8a:49:1f:64:0c:b9:29:76:13:8e:2b:c0:53:
e7:5b:73:41:dc:19:f7:fd:31:76:37:b6:1c:45:60:
b7:ee:79:8f:da:75:dd:73:fa:4d:43:78:13:aa:cf:
70:28:89:50:86:aa:a5:f3:28:de:a8:f8:91:fc:e8:
05:89:48:43:ef:2a:c9:24:f3:ca:e1:be:23:33:64:
7b:13:53:8c:af:9f:30:c2:f9:a0:93:88:e9:43:75:
af:74:c1:91:29:d9:92:c0:2e:77:51:3f:ca:b3:ec:
b4:56:1e:1f:ba:90:f5:52:36:af:cc:62:2f:90:48:
16:1d:e1:b0:a7:1a:1d:3d:df:f4:48:88:1d:82:f3:
82:c3:7b:3d:5f:45:03:05:c1:68:58:26:f3:04:cf:
c5:94:3d:0d:fe:0b:78:9c:2e:d0:4d:66:63:33:fa:
b0:95:ca:f5:d7:e2:5e:03:fb:63:3d:78:d1:4a:4d:
de:a8:86:3c:66:38:64:94:26:28:5c:c5:e7:b3:15:
7f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B1:A4:CC:B8:91:DE:DD:C5:42:DC:3F:F1:37:62:A6:71:E3:72:25
X509v3 Authority Key Identifier:
keyid:1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b8:eb:0e:20:b8:f6:2a:6e:6f:42:5b:b2:11:79:e8:c5:32:
3a:d3:23:c0:67:20:10:8a:b6:a2:82:ad:76:14:ca:d8:38:03:
1b:50:8b:0c:d8:0b:81:03:5e:7e:e8:eb:0b:de:bd:e1:78:5d:
ec:81:e6:1d:f7:09:64:e9:a7:46:6a:3e:33:92:e6:97:f1:6c:
88:23:f3:81:97:29:6d:82:9a:47:e7:b2:ec:af:81:b0:b3:74:
94:33:ca:ad:ad:5a:a6:9b:f0:af:32:79:ca:11:81:03:5d:61:
0c:08:97:ef:93:1a:37:19:7d:d5:86:2b:62:d3:2e:82:02:71:
5a:c5:79:de:c4:c6:02:9f:e6:30:9c:ad:b1:a6:ae:38:fd:8f:
db:ec:6c:93:90:5b:8c:73:30:09:d6:73:af:59:65:f0:15:6a:
ee:e8:07:b3:9d:ac:19:7f:b8:bf:be:72:7a:07:6c:1b:01:d4:
e2:3f:01:9b:d3:86:db:f2:d1:e1:c8:4e:ff:72:45:f2:be:eb:
1e:51:b9:0b:2a:a0:83:fb:2b:6b:4f:fc:ea:55:d5:ff:e0:0f:
c7:0b:b8:6d:82:6c:3c:86:81:57:a8:ca:c9:30:fe:ae:8a:ad:
2b:2b:f3:e1:0f:c4:15:7b:b9:cd:7f:1a:7c:a0:a6:f9:e1:6b:
ee:64:1f:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2eNfqfsNgTK1h1Q+QfLKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYmFiNDBkNjA4MTMzY2RkZjc2YzNiNWE2ZjgxNWRmODFm
YmM3ZGQwHhcNMjYwNTEzMDEwMDU2WhcNMjYwNTE0MDEwMDU2WjAzMTEwLwYDVQQD
EyhkNmIxYTRjY2I4OTFkZWRkYzU0MmRjM2ZmMTM3NjJhNjcxZTM3MjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsycUvYHWKOPSFyL/SenbejooUiQs
kLMVHG6Ml6pg2xqfpoC/Q5ko6/MhOIG6HANNXwjDyqB2FYO4nziAvYpJH2QMuSl2
E44rwFPnW3NB3Bn3/TF2N7YcRWC37nmP2nXdc/pNQ3gTqs9wKIlQhqql8yjeqPiR
/OgFiUhD7yrJJPPK4b4jM2R7E1OMr58wwvmgk4jpQ3WvdMGRKdmSwC53UT/Ks+y0
Vh4fupD1UjavzGIvkEgWHeGwpxodPd/0SIgdgvOCw3s9X0UDBcFoWCbzBM/FlD0N
/gt4nC7QTWZjM/qwlcr11+JeA/tjPXjRSk3eqIY8ZjhklCYoXMXnsxV/xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaxpMy4kd7dxULcP/E3YqZx43IlMB8GA1UdIwQY
MBaAFB66tA1ggTPN33bDtab4Fd+B+8fdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHJxMERXQ0JNODNmZHNPMXB2Z1YzNEg3eDkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yYjI2YWYtZTc1NC00MDgwLTllYzkt
NTlmMGYxMGIxZDI5LzEvSHJxMERXQ0JNODNmZHNPMXB2Z1YzNEg3eDkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8yYjI2YWYtZTc1NC00MDgwLTllYzktNTlmMGYxMGIxZDI5
LzEvSHJxMERXQ0JNODNmZHNPMXB2Z1YzNEg3eDkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbjrDiC4
9ipub0JbshF56MUyOtMjwGcgEIq2ooKtdhTK2DgDG1CLDNgLgQNefujrC9694Xhd
7IHmHfcJZOmnRmo+M5Lml/FsiCPzgZcpbYKaR+ey7K+BsLN0lDPKra1appvwrzJ5
yhGBA11hDAiX75MaNxl91YYrYtMuggJxWsV53sTGAp/mMJytsaauOP2P2+xsk5Bb
jHMwCdZzr1ll8BVq7ugHs52sGX+4v75yegdsGwHU4j8Bm9OG2/LR4chO/3JF8r7r
HlG5Cyqgg/sra0/86lXV/+APxwu4bYJsPIaBV6jKyTD+roqtKyvz4Q/EFXu5zX8a
fKCm+eFr7mQfbQ==
-----END CERTIFICATE-----
Generated at Wed May 13 09:11:09 2026 by rpki-client