Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
File: HnsuJD-KqVRZeTK83NmvZWDc5RY.mft (raw, json)
Hash identifier: ohQEarxbMx6x4So5csDsJNAgR0RDO3fhkw3X45K6nvg=
Subject key identifier: B1:12:34:5F:72:25:19:91:57:84:7D:83:44:A1:15:B8:17:F5:AB:BC
Authority key identifier: 1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
Certificate issuer: /CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Certificate serial: 019E1DC7278E41FD338C3A334EB851CC1318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
Manifest number: 0DCA
Signing time: Tue 12 May 2026 20:00:51 +0000
Manifest this update: Tue 12 May 2026 20:00:51 +0000
Manifest next update: Wed 13 May 2026 20:00:51 +0000
Files and hashes: 1: 1-z-hX5qlCf8aH8nr2X0zpJdE1hg.roa (hash: 9rLZMVrt7BCmTVumDwvgzgKKJKdaVIZCBXEilPyFZ4c=)
2: HnsuJD-KqVRZeTK83NmvZWDc5RY.crl (hash: JkJDVxdNCo5qyXmKZqwbCbY6qJ02MNc8CsGuOC6HtFU=)
3: XI8CVY8sYwhzkz3YLD7pkxjD3Zk.roa (hash: 25+wg4lixvrKpaIcYJueXb9oNmVKiR9L4SbDtXfdAjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:27:8e:41:fd:33:8c:3a:33:4e:b8:51:cc:13:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Validity
Not Before: May 12 20:00:51 2026 GMT
Not After : May 13 20:00:51 2026 GMT
Subject: CN=b112345f7225199157847d8344a115b817f5abbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:00:b8:ac:68:e1:0b:36:17:2f:dc:f0:70:a0:
17:3c:97:0e:90:c2:14:02:ca:f4:f5:51:b5:dd:ea:
99:ce:a1:e8:f8:00:a2:52:10:e7:37:e6:44:a7:e9:
62:b1:72:b3:47:b7:8a:85:59:41:26:bc:9a:f7:44:
eb:92:39:53:2d:e2:c5:79:12:8a:4c:8e:36:dd:7d:
39:58:32:9b:94:8f:23:15:81:40:f4:d1:62:a9:13:
a3:3c:69:21:be:bd:e2:5f:58:be:33:87:31:f8:b7:
d3:1b:20:e9:c6:33:5a:cd:4d:eb:79:34:7e:26:71:
0d:18:3b:de:be:0f:c7:e9:10:7c:77:fa:78:ba:05:
f1:5b:36:8b:1b:22:13:a1:26:86:a7:ae:f0:62:74:
f1:a8:ea:fd:eb:35:2e:57:1e:84:10:2e:31:94:57:
31:38:33:a5:43:9d:4f:a6:a2:05:93:d2:fb:e6:be:
58:e6:88:3a:23:29:32:76:3d:f1:61:a4:29:2f:24:
75:8b:a8:8a:24:d6:d0:b1:06:3a:74:f2:fb:1c:21:
22:ee:7b:08:d0:3a:f8:f1:0f:a8:08:48:df:e1:aa:
92:02:c2:d3:e9:3e:21:7d:98:1d:63:02:ed:8b:37:
8d:a4:24:80:5d:b3:d4:0c:55:96:f9:a0:6a:ef:6f:
21:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:12:34:5F:72:25:19:91:57:84:7D:83:44:A1:15:B8:17:F5:AB:BC
X509v3 Authority Key Identifier:
keyid:1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b8:6b:82:46:66:0a:6b:0f:d6:7e:ef:83:1e:e1:14:11:6a:
a3:7e:d4:37:c4:af:4b:12:c3:b7:f2:56:cd:90:b5:db:df:20:
0f:11:24:9e:29:7c:69:bc:bd:51:89:6d:c8:c6:d1:30:79:64:
76:10:77:e3:48:36:f0:21:a5:0d:92:69:b2:24:bc:15:fe:47:
c8:bb:a3:65:b9:26:0d:5b:66:21:ef:9e:95:6c:6b:11:6e:b5:
64:18:37:4a:c3:21:83:d2:62:f0:3b:a0:f6:94:2e:ea:8a:7b:
02:54:92:1f:69:d9:d5:9f:e5:b3:78:5a:17:87:77:6b:0b:d0:
cf:6e:fd:96:66:43:35:58:67:9d:8f:a7:f2:b1:a2:1b:9e:d5:
53:25:0e:b8:1f:ed:15:bd:d3:a1:71:1b:d2:80:70:e7:da:a9:
e3:1b:39:25:22:8c:72:e5:b0:49:40:fc:a4:da:b5:76:1d:86:
1e:ac:d3:0c:74:28:9d:45:7b:b5:c2:16:eb:08:48:ab:35:86:
61:b0:7e:0c:f9:8b:77:1f:47:14:7f:40:dc:75:b4:28:68:8b:
9d:2a:4c:dd:12:1d:49:52:00:9a:5a:10:95:81:72:ee:4c:ca:
25:20:1c:8a:75:5b:5c:df:e5:cb:dc:9c:4c:5a:0d:3d:e5:f9:
cb:f0:07:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:29 2026 by rpki-client