Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
File: mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft (raw, json)
Hash identifier: SGAUGhfBxsi4Gm8qbjYQt/gzj2LjRiVcrxcj1VjARmk=
Subject key identifier: F8:A5:A3:35:6A:25:BE:DA:44:61:31:06:DB:D1:2F:79:52:C0:48:79
Authority key identifier: 98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
Certificate issuer: /CN=987dccf5068829329cdac51d5d190fe1089cde9e
Certificate serial: 019E1F47DB5CE0EAB4C99EC5A78757149314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
Manifest number: 1222
Signing time: Wed 13 May 2026 03:01:03 +0000
Manifest this update: Wed 13 May 2026 03:01:03 +0000
Manifest next update: Thu 14 May 2026 03:01:03 +0000
Files and hashes: 1: 4NPNpEtggb71IQN4rfD17PgfnPM.roa (hash: Dw4w2HoXn5ATp16MhOhkA0aUdFXm+zKXZvSVq0b6J9o=)
2: mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl (hash: EUVAPv/9B8Miq5V1+cuy8lAHHc2K+fouj3o9JikM8Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:db:5c:e0:ea:b4:c9:9e:c5:a7:87:57:14:93:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987dccf5068829329cdac51d5d190fe1089cde9e
Validity
Not Before: May 13 03:01:03 2026 GMT
Not After : May 14 03:01:03 2026 GMT
Subject: CN=f8a5a3356a25beda44613106dbd12f7952c04879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:78:8c:bb:42:84:e2:07:8c:df:e4:88:3f:b0:
ae:e3:2d:9e:af:7d:48:7b:ed:b6:e1:14:2a:e0:45:
73:24:97:54:bc:54:43:f0:01:79:49:d9:ae:bc:21:
3d:35:23:b2:d9:f2:7a:2a:99:9a:9e:03:c3:2c:07:
ac:4b:3b:93:0a:81:dd:ed:cc:10:c2:6d:73:4d:df:
cc:ee:95:8c:ea:fb:47:00:cf:fd:d7:2c:77:9f:a3:
4f:29:f4:fe:99:cf:e1:1b:b6:18:23:3b:50:c3:a8:
3f:f8:5b:69:be:bb:e3:de:7d:3f:28:33:a7:e5:4a:
e0:1d:2a:e3:15:84:2d:a6:a2:79:4c:07:4b:81:8b:
fe:0d:0c:f3:e0:a6:90:6a:4a:a5:04:8d:1f:0e:66:
11:6a:e9:47:12:41:94:17:fa:b8:22:e3:88:49:31:
ed:78:03:ee:e2:d5:59:54:fb:2d:2f:86:6e:46:f4:
a5:3a:02:58:3e:f9:12:cc:ef:31:af:57:2d:e6:f7:
91:84:ae:5a:92:9d:85:5c:ca:a8:ae:f5:d9:0f:8f:
ad:31:cb:52:8e:01:b4:3b:cd:09:ea:c4:41:9d:42:
c3:e6:11:89:f9:86:39:70:fd:8d:53:06:74:d2:c8:
d1:0b:2f:5a:24:af:36:db:25:52:56:6d:c4:4c:c0:
4f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A5:A3:35:6A:25:BE:DA:44:61:31:06:DB:D1:2F:79:52:C0:48:79
X509v3 Authority Key Identifier:
keyid:98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:98:73:32:81:16:01:14:0b:23:36:f6:07:52:bc:16:4b:62:
a7:14:02:11:6b:dc:10:0b:43:79:4a:09:58:62:f6:e9:e8:4e:
31:4c:e8:3f:5a:7f:32:9c:c0:6c:ab:ac:b5:6d:5a:58:83:e0:
a1:a4:8e:ed:d5:f7:a3:ec:23:77:bd:e8:4d:cb:6e:c6:ae:f8:
0b:15:b7:ee:86:a7:19:d1:85:a6:6d:53:45:85:3f:5a:10:15:
10:d7:9e:4b:df:3b:bd:8c:fb:49:ce:71:07:d6:cd:e0:a2:bf:
61:1e:6c:d1:28:7e:cb:0e:c4:71:8d:ec:3f:1c:31:56:71:73:
6b:4c:01:59:cc:e2:41:15:60:89:5b:3b:fc:fe:6e:47:c3:20:
97:f1:4f:d7:44:7d:38:24:1e:f0:9a:6d:ce:15:b2:0e:e7:97:
53:39:c0:14:51:3a:77:83:d3:13:cc:6a:dd:19:a8:ae:b8:48:
64:35:52:94:7d:c6:03:7a:0c:87:c2:ab:51:86:03:a2:e8:b9:
e9:a2:58:88:a9:c2:bc:f3:30:33:0f:54:10:07:e7:4a:1a:ff:
25:e9:5b:ab:a7:2d:7e:70:dd:b7:23:16:ed:f4:16:04:07:41:
64:5f:80:51:72:90:55:f3:5a:e8:94:4c:af:09:69:94:da:b4:
bd:e9:b6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:59:47 2026 by rpki-client