Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
File: tHRnMbQxArluui3l04w9zShLj-Y.mft (raw, json)
Hash identifier: XG31XXZWmoSAJjiwjqmnvifZtD+/FjohIfLp48d7TJc=
Subject key identifier: 6A:58:EF:38:DC:5E:9D:5D:84:7E:21:12:EE:88:D9:59:2A:E0:EC:CC
Authority key identifier: B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
Certificate issuer: /CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Certificate serial: 019E1E6C3076F22DB0455497F1EEBFD1F0C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
Manifest number: 011E
Signing time: Tue 12 May 2026 23:01:07 +0000
Manifest this update: Tue 12 May 2026 23:01:07 +0000
Manifest next update: Wed 13 May 2026 23:01:07 +0000
Files and hashes: 1: fpHEmukzCf8sEZN1-1ROK3M58Hg.roa (hash: VqNpGMHhla64QbrRVajda2AOnqhRXGh5QpCi8IhSSCc=)
2: tHRnMbQxArluui3l04w9zShLj-Y.crl (hash: FadV7FAuEp+4FItybbRUepktQjmvtIOA8+b7CUb928g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:30:76:f2:2d:b0:45:54:97:f1:ee:bf:d1:f0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Validity
Not Before: May 12 23:01:07 2026 GMT
Not After : May 13 23:01:07 2026 GMT
Subject: CN=6a58ef38dc5e9d5d847e2112ee88d9592ae0eccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:cc:71:34:b8:b2:14:04:bb:df:97:90:79:
48:04:c3:61:9d:b0:3d:c1:b8:d8:ab:39:92:34:41:
9d:90:6f:f5:ca:08:79:13:b4:45:de:00:b3:c6:36:
8b:e8:85:3f:f2:c9:a0:4a:29:e9:58:c2:51:82:1c:
de:db:04:ca:a3:3e:ef:da:49:33:9d:b4:17:c9:8e:
1d:67:86:99:e2:20:90:76:a0:61:d0:82:29:34:c6:
2f:48:32:24:c1:32:2f:2d:9d:9c:0d:15:a6:7c:f6:
d6:3a:7b:55:82:cb:a4:86:bc:43:e6:31:ee:c7:f6:
d9:72:21:d5:69:8e:3a:74:b0:35:c3:b3:75:ce:55:
87:2f:d4:2a:a9:e7:fc:a3:81:7f:83:9c:15:4c:3e:
e9:08:38:af:98:b3:f5:2c:09:8f:44:80:11:6b:91:
4a:d1:a5:7b:78:67:3c:bb:b0:1a:c1:65:67:81:b4:
00:7e:20:b4:4d:0b:7e:85:cd:c9:79:ea:f2:dc:18:
10:68:88:23:8f:5c:ee:d3:fd:9e:38:bb:bd:ea:85:
65:7d:7b:2d:ed:78:17:c6:7e:73:f5:be:f7:72:0d:
ac:00:8d:f7:4d:88:af:fa:e1:f0:7c:e7:44:5c:de:
1a:b2:ad:b4:10:31:57:6d:1a:3f:d8:7f:44:5f:e4:
e6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:58:EF:38:DC:5E:9D:5D:84:7E:21:12:EE:88:D9:59:2A:E0:EC:CC
X509v3 Authority Key Identifier:
keyid:B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:12:f1:c5:b6:1e:b8:73:89:9a:46:fd:d4:a5:8d:f1:79:49:
d8:51:3d:50:64:d4:37:70:24:1c:8a:e3:12:7c:ce:2a:0b:09:
2a:5b:52:c3:a4:29:2f:5a:08:cc:b0:08:2b:a7:be:9f:bc:d7:
6a:3c:b7:cd:d2:0f:74:6e:06:fb:97:9b:67:78:1a:3c:47:55:
77:0e:b9:2f:c3:a0:a0:81:37:5f:5a:95:2d:38:6a:aa:04:93:
93:05:f2:45:19:1f:4f:74:ad:bb:97:86:0a:ca:a3:8f:e7:1e:
dd:b9:fd:06:5e:d1:73:17:9d:84:b9:f9:59:85:37:71:5b:0d:
eb:0a:0a:3f:8f:fe:e8:ae:40:ee:08:48:50:0d:9d:54:a3:41:
9d:17:b0:ba:f1:60:bf:a7:34:96:fb:2e:08:f9:c5:24:6f:c2:
5b:41:8d:09:d5:00:bb:ec:97:b9:74:0a:dc:b7:95:09:ef:94:
49:d8:76:91:72:6e:4b:d1:94:ee:74:c0:a8:0d:5f:1d:52:ef:
e8:3c:f8:d3:38:3b:f1:db:78:cc:60:3b:30:d5:b5:69:17:1b:
a8:5d:41:64:f6:fb:8f:5c:13:fa:1d:2a:a9:ae:bf:a7:96:34:
00:dd:7b:15:fc:1c:39:2b:22:f2:c3:e2:1f:b5:1a:f7:9d:ad:
ee:aa:43:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebDB28i2wRVSX8e6/0fDIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NzQ2NzMxYjQzMTAyYjk2ZWJhMmRlNWQzOGMzZGNkMjg0
YjhmZTYwHhcNMjYwNTEyMjMwMTA3WhcNMjYwNTEzMjMwMTA3WjAzMTEwLwYDVQQD
Eyg2YTU4ZWYzOGRjNWU5ZDVkODQ3ZTIxMTJlZTg4ZDk1OTJhZTBlY2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaTMcTS4shQEu9+XkHlIBMNhnbA9
wbjYqzmSNEGdkG/1ygh5E7RF3gCzxjaL6IU/8smgSinpWMJRghze2wTKoz7v2kkz
nbQXyY4dZ4aZ4iCQdqBh0IIpNMYvSDIkwTIvLZ2cDRWmfPbWOntVgsukhrxD5jHu
x/bZciHVaY46dLA1w7N1zlWHL9Qqqef8o4F/g5wVTD7pCDivmLP1LAmPRIARa5FK
0aV7eGc8u7AawWVngbQAfiC0TQt+hc3Jeery3BgQaIgjj1zu0/2eOLu96oVlfXst
7XgXxn5z9b73cg2sAI33TYiv+uHwfOdEXN4asq20EDFXbRo/2H9EX+TmowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpY7zjcXp1dhH4hEu6I2Vkq4OzMMB8GA1UdIwQY
MBaAFLR0ZzG0MQK5brot5dOMPc0oS4/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEhSbk1iUXhBcmx1dWkzbDA0dzl6U2hMai1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jNGY0MzctZGVmNy00OWM3LWJmMGIt
YmEwNjQyOWY0MmY1LzEvdEhSbk1iUXhBcmx1dWkzbDA0dzl6U2hMai1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jNGY0MzctZGVmNy00OWM3LWJmMGItYmEwNjQyOWY0MmY1
LzEvdEhSbk1iUXhBcmx1dWkzbDA0dzl6U2hMai1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBLxxbYe
uHOJmkb91KWN8XlJ2FE9UGTUN3AkHIrjEnzOKgsJKltSw6QpL1oIzLAIK6e+n7zX
ajy3zdIPdG4G+5ebZ3gaPEdVdw65L8OgoIE3X1qVLThqqgSTkwXyRRkfT3Stu5eG
Csqjj+ce3bn9Bl7RcxedhLn5WYU3cVsN6woKP4/+6K5A7ghIUA2dVKNBnRewuvFg
v6c0lvsuCPnFJG/CW0GNCdUAu+yXuXQK3LeVCe+USdh2kXJuS9GU7nTAqA1fHVLv
6Dz40zg78dt4zGA7MNW1aRcbqF1BZPb7j1wT+h0qqa6/p5Y0AN17FfwcOSsi8sPi
H7Ua952t7qpDrA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:30:52 2026 by rpki-client