Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
File: hNHcYT105sMty5gUzhJr1htSqqc.mft (raw, json)
Hash identifier: my1gb6gB2J+g96M7lWvvFuIZUrtz45FrGNuSXnlNDEE=
Subject key identifier: F9:58:04:E2:2C:40:A4:A0:77:D7:E5:AA:03:EF:F6:0C:2D:45:91:43
Authority key identifier: 84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7
Certificate issuer: /CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
Certificate serial: 019E1EDA0F3F2407FC85E74D4F65138AB4C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 01:01:07 +0000
Manifest this update: Wed 13 May 2026 01:01:07 +0000
Manifest next update: Thu 14 May 2026 01:01:07 +0000
Files and hashes: 1: H6AvCEiySRywPqnoqPga4bVAQxg.roa (hash: nQJRt0EmcoJ2XDzeO3DLhVTm+C2u2iMFsb1catI5sW4=)
2: hNHcYT105sMty5gUzhJr1htSqqc.crl (hash: ObXaHEarnN88qgz64T/05XKWuVDNJtp/602az08qXjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:0f:3f:24:07:fc:85:e7:4d:4f:65:13:8a:b4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
Validity
Not Before: May 13 01:01:07 2026 GMT
Not After : May 14 01:01:07 2026 GMT
Subject: CN=f95804e22c40a4a077d7e5aa03eff60c2d459143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:66:2d:dc:94:79:56:4f:d9:2d:f2:12:26:
88:5f:df:97:a2:07:23:cc:4e:b0:b4:b1:7d:bc:b9:
f7:df:47:67:8b:9e:7b:e7:40:a7:b0:46:2c:f2:7f:
2b:1f:7a:17:a2:65:7a:d8:ac:5a:50:dc:8d:52:7f:
1a:13:a9:59:c9:dd:db:bd:60:22:42:08:66:89:f4:
05:f0:85:44:7c:04:f7:9f:9c:4f:b6:52:41:cd:cd:
4b:72:41:73:76:7f:4d:90:8e:8a:6e:a8:f1:72:a8:
08:29:f5:3a:63:7a:e6:8a:8e:f7:fc:71:36:6d:9b:
b8:82:c1:a7:4f:a2:76:e9:e4:88:76:9f:aa:52:4c:
2a:a3:2d:f4:24:52:7d:13:18:6b:13:d3:58:33:90:
85:93:5b:42:87:3a:93:06:b7:a1:95:69:f6:f6:c1:
78:59:58:27:97:72:cd:42:46:4b:d0:d2:82:45:9d:
e6:50:58:d4:9b:77:75:b6:18:00:65:bc:e5:e0:5b:
1f:f4:01:61:71:54:1f:f1:1f:f0:6c:3b:63:5b:eb:
87:9a:cb:63:9b:a7:d9:b5:3d:40:84:86:1e:c9:76:
b1:78:ca:2d:ef:cc:16:62:83:05:91:8d:42:97:dc:
ef:15:55:6c:c2:12:31:3e:65:50:80:67:f7:f9:7f:
d4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:58:04:E2:2C:40:A4:A0:77:D7:E5:AA:03:EF:F6:0C:2D:45:91:43
X509v3 Authority Key Identifier:
keyid:84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:2c:45:7f:46:1d:46:2e:af:d8:68:ad:ac:a1:eb:c8:4b:03:
95:8f:ea:b7:12:29:51:2c:37:b4:4b:d9:07:81:87:e6:8f:5f:
27:2c:71:ba:6e:71:0f:de:b8:ea:61:8b:b1:60:cf:b2:72:14:
f4:ae:2d:19:b3:f2:71:0b:5d:7a:51:4c:06:8b:05:38:52:f6:
d8:21:ed:da:da:e0:d8:b7:50:72:a5:ba:60:72:99:ca:0f:53:
72:78:0e:d5:28:9f:67:8a:2a:66:60:93:b0:46:79:f3:fe:13:
91:a8:dd:78:9e:be:8b:ec:c4:20:bd:cf:c3:85:65:12:33:b8:
d9:19:72:66:ca:f9:f4:9b:99:ef:a7:c0:95:97:85:e7:0e:1f:
e7:d5:a1:a8:fa:8f:81:71:02:24:d4:1c:61:e0:81:09:77:3f:
15:31:c5:db:d9:c7:28:ba:b5:7f:c4:4c:56:40:42:91:cb:f6:
11:32:70:b5:93:ea:ad:ee:0f:c9:a7:57:14:1b:d4:59:60:20:
23:ac:02:05:f7:12:97:43:53:e6:bc:1e:5b:e9:90:81:e4:f6:
65:61:3f:03:71:da:2d:9e:a8:5f:62:30:4c:23:b0:f8:86:ea:
df:6d:41:9b:d4:7f:97:aa:05:29:37:dd:f7:2a:ae:08:44:42:
d9:af:a1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:29 2026 by rpki-client