Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
File: hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft (raw, json)
Hash identifier: O7v4uFKNwthDsJIID2zPYNGFYDT9I9Ud2Am1DvrtHko=
Subject key identifier: 3B:89:90:F0:82:68:22:BB:52:9F:23:BE:C8:EF:DA:A4:3E:4E:ED:19
Authority key identifier: 84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
Certificate issuer: /CN=8405c07192a8106fedb0760b8945032ca1d3054b
Certificate serial: 019E1EDA0608D670BFBF3BBD0D3AD16E72F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
Manifest number: 14C9
Signing time: Wed 13 May 2026 01:01:05 +0000
Manifest this update: Wed 13 May 2026 01:01:05 +0000
Manifest next update: Thu 14 May 2026 01:01:05 +0000
Files and hashes: 1: HTwlYLS_ffwhQcdIe5ndzskreto.roa (hash: 2KCaWvsbTh5/gdngs8HmHbk57EMiFOhMngXsbQP11o0=)
2: a4zBtMFZYByhLbfrS1dLgNWkKck.roa (hash: dYhiBJ/AxN48Rl+cu3HQdPVxUF/dVcAsWXYAXFUPJcE=)
3: hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl (hash: X0/SDQthTHQtha+0aE72EP3m+pjxJiQcEoiG6y5vu6o=)
4: xSQW2sggbgbxw6ad1ltpXUi4AL0.roa (hash: TfP2oPkLUpfY+mHh6+HX4amHLmgM458P4qEzEj5WmsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:06:08:d6:70:bf:bf:3b:bd:0d:3a:d1:6e:72:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8405c07192a8106fedb0760b8945032ca1d3054b
Validity
Not Before: May 13 01:01:05 2026 GMT
Not After : May 14 01:01:05 2026 GMT
Subject: CN=3b8990f0826822bb529f23bec8efdaa43e4eed19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:44:c7:69:03:a6:92:51:f7:bc:88:04:0b:9b:
34:48:1e:d2:c0:09:89:51:8e:86:26:75:11:6c:bf:
a6:cd:11:1f:01:a7:cf:3f:4e:7f:aa:a5:01:82:18:
14:e2:28:66:3c:01:01:1e:9c:1a:35:75:2e:f5:64:
07:6d:c2:4f:fe:05:7d:3f:74:6b:f2:b1:e7:6b:28:
7d:13:c3:57:35:96:54:d5:1f:52:86:90:3b:19:7d:
aa:39:66:58:aa:f6:ac:db:69:bf:4b:74:ba:c8:6d:
0c:3e:c5:f3:08:c3:58:e5:a3:3f:26:01:39:c3:d1:
04:90:63:96:06:3f:de:f1:d4:54:76:a6:e6:28:30:
26:b9:1e:64:f3:fc:5f:63:01:9e:4a:60:e7:24:9a:
3d:59:92:49:f4:ee:2b:de:39:f3:07:72:da:18:64:
92:89:0d:1c:1b:08:d6:fa:85:c7:ac:93:80:21:0b:
e5:2f:f9:ab:c2:8f:73:63:2b:d3:83:5c:69:90:b0:
03:87:fc:f2:6a:12:7d:ef:2d:32:aa:97:4a:01:d4:
e3:c5:16:80:2c:e5:e8:95:7a:41:9e:53:f1:27:99:
b9:4d:d6:af:b5:f1:1b:fa:db:47:9c:dd:5b:cb:fb:
b5:84:4f:43:05:ee:aa:51:38:4f:c8:b5:92:28:75:
98:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:89:90:F0:82:68:22:BB:52:9F:23:BE:C8:EF:DA:A4:3E:4E:ED:19
X509v3 Authority Key Identifier:
keyid:84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c0:1a:9f:94:b2:76:d3:96:f8:1b:a4:5b:d8:44:eb:cd:df:
e6:aa:38:54:ee:62:76:99:3a:f1:99:e9:61:67:bb:44:4f:87:
07:6e:42:98:37:e0:4c:d0:5d:2b:a2:d5:f0:0a:e7:eb:eb:38:
11:47:9f:11:b7:08:7c:3a:1c:78:14:aa:b1:aa:70:43:69:d5:
f1:b2:17:da:bd:1f:4f:78:da:82:9e:de:69:96:87:d4:fb:23:
a4:fd:22:0b:98:9b:75:2f:81:3b:bd:d1:a8:9b:ab:95:e4:7d:
64:f1:cb:0c:37:e4:4c:66:a9:54:48:2f:40:6a:8d:36:c3:4a:
af:e2:f9:51:b3:38:fc:08:cf:fc:2b:cc:c9:71:8c:cb:ec:e5:
bd:fa:bb:4d:b9:54:95:20:39:ce:ef:23:6a:fd:6e:62:44:7c:
5a:81:4e:06:5b:63:6c:58:f7:cc:8e:65:5a:94:ad:df:0f:a8:
1a:02:79:d0:f9:18:55:0e:30:98:19:fd:20:24:2b:bd:76:63:
a4:92:6e:ff:34:90:33:8e:3f:b7:18:bf:7c:ac:d9:97:d9:21:
11:a4:45:f5:bc:bf:f5:a1:48:3e:ad:26:84:1d:73:4f:30:2e:
e6:71:15:04:eb:ae:b1:b2:f9:10:34:c7:27:06:3e:24:2e:4a:
45:52:86:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:39:42 2026 by rpki-client