Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
File: 0haCh3tsivdeJ2DPhUDnhFLUvsA.mft (raw, json)
Hash identifier: 4NqKAGL5vn9DqfSALGW7Ky+QZbwkKr3nGlyBLOaTLYc=
Subject key identifier: 2D:BF:9F:38:66:5F:2A:8F:03:E7:A1:0E:DA:1C:9C:FE:11:7F:0C:46
Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Certificate serial: 019E1E34D8358B9C86945B3AD0DDB4C5C421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
Manifest number: 0E29
Signing time: Tue 12 May 2026 22:00:40 +0000
Manifest this update: Tue 12 May 2026 22:00:40 +0000
Manifest next update: Wed 13 May 2026 22:00:40 +0000
Files and hashes: 1: 0haCh3tsivdeJ2DPhUDnhFLUvsA.crl (hash: 67gIXLJcZR8Nk2pjfd7tWhMQBWVaRB0IkDwLy8lp5Jc=)
2: NiVW-1DlGr5hCTPyCnLWhfcQSJ0.roa (hash: P0xJoWIH1C9Cod99ksa8hxvCHok9B+UC8X73hnLeN0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:d8:35:8b:9c:86:94:5b:3a:d0:dd:b4:c5:c4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Validity
Not Before: May 12 22:00:40 2026 GMT
Not After : May 13 22:00:40 2026 GMT
Subject: CN=2dbf9f38665f2a8f03e7a10eda1c9cfe117f0c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:19:b3:8b:bf:ba:45:13:c7:15:70:a6:0b:f5:
e5:5d:83:26:9f:6e:95:56:ab:1c:b0:b4:d4:b8:94:
53:23:65:21:5f:2c:37:a1:dc:46:1a:4c:f6:6a:38:
75:ec:8b:49:9f:f3:19:96:23:c3:03:a4:39:c4:7a:
55:97:1a:a8:2d:7e:b3:be:52:1e:a2:9b:30:d9:d6:
a8:e4:16:53:c6:08:4e:bb:0f:15:0d:76:e4:14:39:
e5:be:a6:cf:7e:0b:ec:37:23:70:ce:30:a3:a5:1e:
cb:29:62:a0:c6:e8:c5:6f:13:b3:9b:ff:a5:e7:fc:
40:8c:29:a2:0b:80:6f:50:26:21:62:a7:79:6e:6e:
ed:7e:be:f7:d6:3d:81:92:e4:6d:10:a3:bd:14:17:
23:5d:5a:9e:bb:77:31:34:58:2d:2b:d1:ae:39:b5:
f6:05:aa:8f:40:d1:76:0e:5b:dd:12:0b:d6:1d:d0:
48:21:e3:10:30:e5:e3:77:f3:51:76:96:06:e5:0f:
02:98:2a:c8:d2:12:af:f8:6a:ab:5a:8f:0b:14:33:
58:14:ee:da:14:51:aa:1c:a1:b3:b3:02:c4:2a:4d:
b8:b5:51:3e:b6:40:7b:b3:81:da:20:b5:b3:f0:81:
9d:34:41:42:a9:1d:f1:70:c4:4b:82:41:b1:66:52:
9d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BF:9F:38:66:5F:2A:8F:03:E7:A1:0E:DA:1C:9C:FE:11:7F:0C:46
X509v3 Authority Key Identifier:
keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5c:eb:66:a7:70:2e:8d:0f:b8:f4:3a:57:ad:dd:75:44:17:
b7:c6:67:f2:6c:86:42:bf:6f:b3:cf:ad:f3:f2:11:37:4a:be:
d1:22:d9:2c:0e:20:f2:a3:d9:72:88:59:48:1e:79:3e:7e:75:
fd:4e:cc:e7:ba:90:01:04:a0:a7:8d:3b:55:1f:3e:5d:f4:1e:
77:10:d6:44:52:24:bc:05:2b:a9:fe:7b:2c:7a:ea:22:57:3f:
07:c7:1d:0a:d6:e7:9b:d8:9f:64:b0:43:8c:1a:c6:d4:e9:42:
68:3e:8c:65:37:94:6b:35:ec:a5:ca:dd:42:fc:2d:1a:82:d3:
e9:22:d3:ce:76:d4:0c:09:75:a2:41:ca:1e:9d:df:40:33:6e:
ec:2b:4d:ac:c8:4e:f2:fc:04:ac:8c:88:d6:b4:f6:ee:d6:24:
18:ab:41:4f:c4:70:2d:8d:5d:4a:ca:e2:b2:e6:a9:97:3e:86:
69:6a:c7:cd:39:db:b5:24:49:b7:f6:9d:fa:66:fc:96:21:29:
ca:64:22:91:e9:39:d6:90:1a:29:5a:6a:09:71:56:d3:ef:e2:
af:c9:16:d4:89:0a:b5:34:cf:4b:7e:6b:1e:6c:c1:da:18:b1:
9f:03:97:8a:49:ec:fe:3f:53:7b:c8:8b:86:0a:58:89:75:0b:
ee:78:71:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:23:27 2026 by rpki-client