Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
File: hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft (raw, json)
Hash identifier: Mtafv38qL3Z8Lip55cc2XIisGpJdWbuNT+7mHELbZAg=
Subject key identifier: 2B:59:1A:F5:EE:67:CC:A7:D7:74:62:3B:B8:5B:75:A6:EC:FA:19:9C
Authority key identifier: 84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A
Certificate issuer: /CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a
Certificate serial: 019E1F48210DFD344AFE012F17FBBBC2190F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 03:01:21 +0000
Manifest this update: Wed 13 May 2026 03:01:21 +0000
Manifest next update: Thu 14 May 2026 03:01:21 +0000
Files and hashes: 1: 8rQFycP0wCkWTOuHRSr62IO8dgE.roa (hash: MFuuptNilDQ2/pqjlNHx2pqwg9aDYbH9lFzucSAdE5E=)
2: hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl (hash: EnRUs46GQ9fdix1FcPlqgVqTI0bSTi/+EAkbqLsBHj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:21:0d:fd:34:4a:fe:01:2f:17:fb:bb:c2:19:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a
Validity
Not Before: May 13 03:01:21 2026 GMT
Not After : May 14 03:01:21 2026 GMT
Subject: CN=2b591af5ee67cca7d774623bb85b75a6ecfa199c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cb:55:72:ff:da:ea:e6:1a:ff:48:c0:ef:e9:
ab:60:0c:b9:7d:be:59:38:ae:51:54:d5:1d:7f:16:
84:a2:8c:1d:7f:61:fd:91:e2:e0:66:a5:66:67:98:
5a:e5:44:4b:48:1b:52:a9:07:2d:f6:77:30:35:71:
92:fb:eb:d3:57:b2:03:e7:88:4d:35:02:80:c5:d4:
87:29:54:7e:20:1e:ec:dd:88:7c:0f:d8:89:02:f9:
d1:18:e9:bb:b2:ad:15:b9:05:77:17:54:97:2b:bc:
48:d7:fb:9c:fd:84:96:f2:65:42:66:76:55:29:3d:
06:d9:dc:ed:85:35:a8:bc:e1:3d:9d:d5:3e:38:e8:
57:0b:b9:0e:84:ea:d5:14:e9:99:cf:ee:e7:20:3f:
49:68:79:99:77:79:aa:ce:ad:0f:48:ed:d6:c6:67:
ed:f0:3b:7b:0f:f8:a3:c0:ef:2c:27:78:10:b5:29:
9d:4e:ab:38:7b:2a:76:b6:81:be:e5:ce:24:cb:2b:
d6:a5:9e:35:c3:c6:2d:ce:57:59:8c:8a:1c:13:10:
d3:96:5d:f9:a7:17:cd:48:72:be:d6:5f:0b:50:be:
2d:0b:41:bc:a4:89:10:39:e9:68:dd:1d:25:12:4c:
40:d5:bd:a5:44:23:f6:e4:72:9f:3e:0f:ac:fa:9c:
5b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:59:1A:F5:EE:67:CC:A7:D7:74:62:3B:B8:5B:75:A6:EC:FA:19:9C
X509v3 Authority Key Identifier:
keyid:84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f8:ac:da:7c:ec:e1:c7:c8:d8:a3:5f:c2:8e:47:68:aa:aa:
54:0f:08:ff:09:b7:7d:e6:a7:16:d7:fe:e0:36:99:a2:88:88:
48:f1:1f:1a:39:56:be:78:b7:84:70:14:ce:5d:10:db:2d:73:
3b:0a:3e:cc:7a:0b:75:93:02:d2:45:b6:6d:5c:3d:10:51:7f:
84:68:93:9a:27:d8:85:fa:6b:22:0a:d5:e8:09:f6:ec:13:0f:
de:98:51:1e:c7:50:9d:49:cf:0a:a2:c2:1c:b8:45:00:fc:96:
8f:dd:87:ec:eb:9f:c0:95:6a:99:6a:19:fc:88:20:1b:a8:dc:
33:b1:26:48:1d:1c:55:52:a5:a2:bb:56:8e:79:ec:48:30:56:
95:fc:d1:95:a3:0f:95:5d:74:a3:2b:77:21:41:63:0c:8e:70:
ba:fd:12:c0:60:c4:db:86:20:ff:0b:bf:00:91:8d:c2:d1:e5:
c1:fd:35:ea:54:1e:e5:6b:c1:ed:9d:fe:11:33:af:28:b1:9c:
3e:a8:18:f4:c3:52:3e:b6:02:9c:03:5a:b6:4c:b3:a9:2a:4a:
6c:cb:c7:26:4f:79:de:49:9f:35:15:8d:1d:09:cf:98:a4:c8:
5c:52:11:98:50:0b:24:c3:d2:85:c2:c6:c4:71:0e:f5:29:80:
9d:cc:3a:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fSCEN/TRK/gEvF/u7whkPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0OWFjZTA2NmE0NGVkMmY5NWZlNmJjMmQwYTdkYTQxMjc2
M2JmMmEwHhcNMjYwNTEzMDMwMTIxWhcNMjYwNTE0MDMwMTIxWjAzMTEwLwYDVQQD
EygyYjU5MWFmNWVlNjdjY2E3ZDc3NDYyM2JiODViNzVhNmVjZmExOTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAistVcv/a6uYa/0jA7+mrYAy5fb5Z
OK5RVNUdfxaEoowdf2H9keLgZqVmZ5ha5URLSBtSqQct9ncwNXGS++vTV7ID54hN
NQKAxdSHKVR+IB7s3Yh8D9iJAvnRGOm7sq0VuQV3F1SXK7xI1/uc/YSW8mVCZnZV
KT0G2dzthTWovOE9ndU+OOhXC7kOhOrVFOmZz+7nID9JaHmZd3mqzq0PSO3Wxmft
8Dt7D/ijwO8sJ3gQtSmdTqs4eyp2toG+5c4kyyvWpZ41w8YtzldZjIocExDTll35
pxfNSHK+1l8LUL4tC0G8pIkQOelo3R0lEkxA1b2lRCP25HKfPg+s+pxboQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtZGvXuZ8yn13RiO7hbdabs+hmcMB8GA1UdIwQY
MBaAFISazgZqRO0vlf5rwtCn2kEnY78qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEpyT0JtcEU3Uy1WX212QzBLZmFRU2RqdnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wYTU4MTctYmE4NS00MjQ0LWEwNTIt
ZjdjNDY1N2I3YjhkLzEvaEpyT0JtcEU3Uy1WX212QzBLZmFRU2RqdnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8wYTU4MTctYmE4NS00MjQ0LWEwNTItZjdjNDY1N2I3Yjhk
LzEvaEpyT0JtcEU3Uy1WX212QzBLZmFRU2RqdnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/is2nzs
4cfI2KNfwo5HaKqqVA8I/wm3feanFtf+4DaZooiISPEfGjlWvni3hHAUzl0Q2y1z
Owo+zHoLdZMC0kW2bVw9EFF/hGiTmifYhfprIgrV6An27BMP3phRHsdQnUnPCqLC
HLhFAPyWj92H7OufwJVqmWoZ/IggG6jcM7EmSB0cVVKlortWjnnsSDBWlfzRlaMP
lV10oyt3IUFjDI5wuv0SwGDE24Yg/wu/AJGNwtHlwf016lQe5WvB7Z3+ETOvKLGc
PqgY9MNSPrYCnANatkyzqSpKbMvHJk953kmfNRWNHQnPmKTIXFIRmFALJMPShcLG
xHEO9SmAncw60g==
-----END CERTIFICATE-----
Generated at Wed May 13 09:34:46 2026 by rpki-client