Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
File: H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json)
Hash identifier: 3cY1yKXB8jUXYK00uy1vohNc0wU1BHImrok9ZdE/g5A=
Subject key identifier: 80:3E:8D:0C:60:B7:0E:36:56:5A:FC:08:38:D6:C8:6D:48:26:A4:06
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 019E1EA3183C834FB6D0C38BB986FE5E3CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
Manifest number: 1390
Signing time: Wed 13 May 2026 00:01:05 +0000
Manifest this update: Wed 13 May 2026 00:01:05 +0000
Manifest next update: Thu 14 May 2026 00:01:05 +0000
Files and hashes: 1: 2sAFd_2T-QSzjwb2W27Kt8rE6fU.roa (hash: dj9SKHwvFkDv++RY82DTGyA13Fg+Qhu+MtqHoiJGTCM=)
2: BKvtDw_ImhwxFNI1ekkbNYkUXwk.roa (hash: /VZVAuv74zBcHkw4LlrMbR/O9CrhLBCzyGy9tiiwFV8=)
3: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: OnL0ttIpgm+n/EIQP68gn+sNoMtVv8dAL/FvhA31Eyo=)
4: L-HaZX9usmOHR6Pjk5otTPA1E78.roa (hash: /WFLFbwadanJe6aEYwFifcAD7b8Cq5KJxqbQIlZqM3E=)
5: UNn5xwOI4pjWBM6seGSkeIWT0Nc.roa (hash: t97vMIzTWrcDPs3sy3oo5iwIaLusws7qeRkc875GNOM=)
6: ftINbgTGX7o6dou2oYKs0I7El3k.roa (hash: jNNcSKLkF+5io94CcEYFYhsKdZJ9Jwyes5nzKJmJiP8=)
7: iyhjc5phndkfHPAS-mJffX2oKQ8.roa (hash: An3uftXXHdR16RwQ6iTIEtnf1eCcuaLyKpysOrsvtMU=)
8: rCmOJaiPm10i_Ntu2MdzaI9ze6U.roa (hash: swhB5WKc0D5wVrqnsiWG0FRIgd/l0/nxiZL6cviDAgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:18:3c:83:4f:b6:d0:c3:8b:b9:86:fe:5e:3c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: May 13 00:01:05 2026 GMT
Not After : May 14 00:01:05 2026 GMT
Subject: CN=803e8d0c60b70e36565afc0838d6c86d4826a406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2d:3f:46:e8:cd:04:6c:e6:71:d4:27:7d:d6:
3d:96:3a:e5:ef:01:cb:51:86:bf:17:58:20:23:69:
76:3f:7a:9e:9a:1d:cd:c1:e4:0f:8d:8d:dc:ff:8f:
3b:e5:50:3f:82:78:8f:8b:aa:44:cb:f0:69:23:46:
8d:f9:19:50:9a:c3:d3:09:cc:5a:7e:94:60:ee:52:
d0:3e:2a:0b:53:62:73:e9:49:70:e9:a4:66:fa:b9:
13:ed:9c:42:9d:e2:5f:62:b4:c8:c2:7d:2a:c6:a2:
8d:86:9e:c3:13:b7:3c:1e:71:1c:ca:7d:fa:26:fb:
2b:87:e6:4b:00:40:7f:33:60:cf:27:ed:1b:da:87:
a6:32:42:42:9a:56:cc:97:59:38:8e:e3:ca:df:cf:
c2:6a:4c:6b:ae:f9:af:d3:df:10:f1:6e:fb:2d:0b:
54:2c:10:5e:b9:5b:8f:8c:d4:09:0f:39:6f:02:56:
6a:28:d6:11:24:29:4c:88:70:ae:0b:46:21:f9:dd:
33:37:0d:e7:b6:c1:1f:83:2b:5b:ad:94:06:fc:1e:
af:8b:3f:c6:a7:04:39:84:d4:d1:06:c1:10:c3:a9:
82:0f:71:54:1e:40:a3:96:79:c3:a9:bf:79:04:28:
05:89:ea:d3:15:ac:f0:c4:c5:38:97:de:0b:85:fc:
de:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3E:8D:0C:60:B7:0E:36:56:5A:FC:08:38:D6:C8:6D:48:26:A4:06
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:dd:19:54:4a:6f:2d:91:68:17:b4:4a:f5:49:06:dc:d6:85:
c6:e8:50:60:01:ff:45:c3:f7:ba:26:f5:43:c0:96:46:b4:9e:
25:4e:2f:fc:11:39:15:97:98:f0:f3:14:54:d3:12:8f:0d:86:
e7:8b:d5:db:b7:11:51:9c:06:be:a3:fb:b0:e4:bd:db:c0:3c:
d3:b1:e4:cb:80:b9:4b:e0:4b:6b:88:c6:99:2e:1d:35:5f:df:
1a:b2:50:61:a4:e1:ce:f9:87:59:8e:8d:61:b3:1f:3c:d8:28:
7e:3c:7d:3c:50:6e:69:1b:76:9f:05:a4:65:3b:8f:0f:4f:65:
af:f1:ae:c7:15:1c:13:b7:ef:b3:ca:8a:87:73:b7:06:20:f7:
9f:47:96:d8:f4:d6:cd:c2:6b:a5:b9:35:61:c2:ef:54:15:d6:
f9:71:d4:4c:73:97:36:64:3c:d8:a6:e9:e3:ea:b1:4a:b2:84:
ec:ca:a1:97:78:19:3a:29:94:08:f5:51:42:a2:3d:2d:11:56:
99:af:7d:b2:ea:57:de:e2:1a:54:0a:bb:fd:4a:4e:bc:bd:35:
69:c8:e1:7d:48:cf:ac:44:4e:69:09:1e:a7:84:bf:43:bc:1c:
bc:54:3a:06:07:f8:1d:1f:4c:20:46:44:1f:05:c9:ea:13:67:
1d:58:9e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:34:20 2026 by rpki-client