
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
File: hJICE8sjC_5REhzl-03s4oAYvtA.mft (raw, json)
Hash identifier: CQW3sxGCnsWiAS6G/96qb64HiUgtsT73nHbvqjuRjMg=
Subject key identifier: 04:A2:0D:8F:59:FF:00:D1:50:81:4B:D9:DB:94:B3:48:AB:38:6E:8F
Authority key identifier: 84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
Certificate issuer: /CN=84920213cb230bfe51121ce5fb4dece28018bed0
Certificate serial: 019E1F7EE7FD4432FE5ED85894785CF39798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 04:01:10 +0000
Manifest this update: Wed 13 May 2026 04:01:10 +0000
Manifest next update: Thu 14 May 2026 04:01:10 +0000
Files and hashes: 1: hJICE8sjC_5REhzl-03s4oAYvtA.crl (hash: zKRSfcheKMsVEgI8dVvLiKu2XJJqJEYsmCqZHCmOzoU=)
2: z_fYCrrGSV54cj1knb3xBk4SK5U.roa (hash: EFlql6uKuI4YQL66OtBnNw+c0chssYW8DVC7ieJRlbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:e7:fd:44:32:fe:5e:d8:58:94:78:5c:f3:97:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84920213cb230bfe51121ce5fb4dece28018bed0
Validity
Not Before: May 13 04:01:10 2026 GMT
Not After : May 14 04:01:10 2026 GMT
Subject: CN=04a20d8f59ff00d150814bd9db94b348ab386e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:c6:b5:ad:d6:41:88:e0:11:bf:97:b0:0a:
01:2f:80:e1:7b:2f:2e:9e:13:d3:28:bb:05:a2:15:
52:69:c2:d6:9f:e7:34:de:56:3e:bc:d2:51:45:4a:
da:0d:54:3f:f5:e8:d3:d3:ce:2f:5b:13:8c:c5:3a:
02:db:bc:d3:40:c2:32:2d:06:a2:df:a3:b5:6e:c9:
30:65:50:83:8a:13:ce:eb:f6:2c:00:70:6c:bd:3b:
fd:f7:1e:01:01:61:09:d1:52:93:e5:85:93:1b:b4:
2c:67:2c:5e:89:51:ce:88:96:6c:73:cd:0b:f5:cd:
60:9e:8f:c5:e4:c2:1b:ec:ed:a5:1f:5b:c7:b1:b0:
a0:9f:4a:1a:4c:01:c3:d5:f9:cd:36:26:89:b3:72:
f9:70:41:39:31:fa:7a:a3:1a:a8:a9:03:2d:06:ed:
25:17:f9:b4:f7:92:85:7f:ff:4a:a0:05:52:80:cb:
ff:f2:a8:00:a0:20:6f:00:ac:41:3c:76:5a:04:6f:
b8:ba:7f:b0:08:a1:7b:58:f7:27:e3:42:74:1f:97:
e5:43:89:9c:79:d4:38:b5:f8:d5:46:a6:35:dd:7c:
5f:87:07:a5:e9:81:f6:2e:e0:eb:fe:c2:aa:64:3a:
91:6d:e5:5f:a8:3a:ed:e8:1c:c4:2a:63:cf:6e:d6:
02:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A2:0D:8F:59:FF:00:D1:50:81:4B:D9:DB:94:B3:48:AB:38:6E:8F
X509v3 Authority Key Identifier:
keyid:84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4f:50:d8:1c:41:6a:ce:1c:79:f0:6e:60:15:c4:14:05:a5:
82:6d:e1:23:19:b1:50:85:16:71:f8:47:96:f4:05:c4:bb:14:
21:95:34:d7:fe:6f:e3:1f:da:13:e7:7b:13:7f:04:fd:0c:17:
f7:33:d6:c2:ec:19:e2:f3:9e:a8:5e:26:30:66:f8:4d:70:b7:
06:b7:60:56:ef:50:1f:6f:63:50:4f:a1:4c:be:e3:2c:c8:ef:
05:73:a6:81:a2:79:a5:7a:3c:eb:76:ff:bc:70:81:37:00:3c:
9c:e9:7e:fe:56:d2:9a:98:76:98:77:03:dc:e4:f0:db:b0:af:
af:fc:6e:70:11:28:3d:da:61:e7:b1:d6:7d:68:36:92:3f:a5:
59:cc:b3:dd:a0:15:db:34:d8:bf:7d:f1:0c:1b:fb:81:af:d8:
77:dd:9f:bd:01:d0:f2:97:65:dc:55:ea:59:93:17:27:ba:27:
a3:59:5d:58:ba:0c:37:5e:7a:2a:91:0e:62:a3:18:d2:82:38:
5d:66:f3:91:3a:e4:7a:7e:c9:df:20:f5:20:23:b8:88:b2:7b:
5e:bb:80:28:d0:f7:ba:49:7c:13:1e:e2:8d:1e:ef:94:ec:0c:
63:4f:0d:97:ab:23:3a:f3:1d:fb:c3:96:0c:17:14:eb:d5:83:
a8:9e:ae:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffuf9RDL+XthYlHhc85eYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0OTIwMjEzY2IyMzBiZmU1MTEyMWNlNWZiNGRlY2UyODAx
OGJlZDAwHhcNMjYwNTEzMDQwMTEwWhcNMjYwNTE0MDQwMTEwWjAzMTEwLwYDVQQD
EygwNGEyMGQ4ZjU5ZmYwMGQxNTA4MTRiZDlkYjk0YjM0OGFiMzg2ZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDTGta3WQYjgEb+XsAoBL4Dhey8u
nhPTKLsFohVSacLWn+c03lY+vNJRRUraDVQ/9ejT084vWxOMxToC27zTQMIyLQai
36O1bskwZVCDihPO6/YsAHBsvTv99x4BAWEJ0VKT5YWTG7QsZyxeiVHOiJZsc80L
9c1gno/F5MIb7O2lH1vHsbCgn0oaTAHD1fnNNiaJs3L5cEE5Mfp6oxqoqQMtBu0l
F/m095KFf/9KoAVSgMv/8qgAoCBvAKxBPHZaBG+4un+wCKF7WPcn40J0H5flQ4mc
edQ4tfjVRqY13Xxfhwel6YH2LuDr/sKqZDqRbeVfqDrt6BzEKmPPbtYCoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASiDY9Z/wDRUIFL2duUs0irOG6PMB8GA1UdIwQY
MBaAFISSAhPLIwv+URIc5ftN7OKAGL7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEpJQ0U4c2pDXzVSRWh6bC0wM3M0b0FZdnRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9hOGEwOWMtMGY4NC00YTg5LThhMTYt
YjA0YjRkMDQzZjlmLzEvaEpJQ0U4c2pDXzVSRWh6bC0wM3M0b0FZdnRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9hOGEwOWMtMGY4NC00YTg5LThhMTYtYjA0YjRkMDQzZjlm
LzEvaEpJQ0U4c2pDXzVSRWh6bC0wM3M0b0FZdnRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOE9Q2BxB
as4cefBuYBXEFAWlgm3hIxmxUIUWcfhHlvQFxLsUIZU01/5v4x/aE+d7E38E/QwX
9zPWwuwZ4vOeqF4mMGb4TXC3BrdgVu9QH29jUE+hTL7jLMjvBXOmgaJ5pXo863b/
vHCBNwA8nOl+/lbSmph2mHcD3OTw27Cvr/xucBEoPdph57HWfWg2kj+lWcyz3aAV
2zTYv33xDBv7ga/Yd92fvQHQ8pdl3FXqWZMXJ7ono1ldWLoMN156KpEOYqMY0oI4
XWbzkTrken7J3yD1ICO4iLJ7XruAKND3ukl8Ex7ijR7vlOwMY08Nl6sjOvMd+8OW
DBcU69WDqJ6uwg==
-----END CERTIFICATE-----
Generated at Wed May 13 08:52:16 2026 by rpki-client