Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
File: h5TVZDYKUh21mK7m5qL41mkhtsU.mft (raw, json)
Hash identifier: 7tGrnUVylG449NvZ3iyDKiN8jVN1CXrCsXSWceWx1VM=
Subject key identifier: C7:CF:52:FE:0D:00:23:90:C4:F0:5F:73:70:16:37:46:49:28:3B:A1
Authority key identifier: 87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
Certificate issuer: /CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Certificate serial: 019E1DFEAAB40C7699A423C81C02A452200D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
Manifest number: 0189
Signing time: Tue 12 May 2026 21:01:29 +0000
Manifest this update: Tue 12 May 2026 21:01:29 +0000
Manifest next update: Wed 13 May 2026 21:01:29 +0000
Files and hashes: 1: h5TVZDYKUh21mK7m5qL41mkhtsU.crl (hash: EiR/wrakxT/OAFl3pvjR4YL3Du8Q96fQFyhlHx7Pgn4=)
2: l_d_CxebXDc82wsd4U0BFVkGTh0.roa (hash: uFClusAny8IXHB2cwB2oabcg7BQ3SgYHOlNBk9mPDms=)
3: qGufgpnXsdA505UL9rLMl_XkECY.roa (hash: J3gwk0cVtFF6iJ602SqYnRybno+t/W1jMS3C5xgfXqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:aa:b4:0c:76:99:a4:23:c8:1c:02:a4:52:20:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Validity
Not Before: May 12 21:01:29 2026 GMT
Not After : May 13 21:01:29 2026 GMT
Subject: CN=c7cf52fe0d002390c4f05f737016374649283ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7b:b5:0e:d3:a6:01:48:40:48:2d:f4:e6:ed:
d1:7c:59:07:ba:19:f5:3b:f7:2c:39:48:ce:4e:3e:
a7:8d:5d:f0:e1:e9:67:f6:79:b2:54:10:60:1d:bf:
e6:6d:b9:97:90:45:12:b5:1d:1b:94:dd:3f:b6:3b:
da:35:ad:54:af:c8:a3:42:13:34:08:ed:e0:50:b3:
57:ac:c2:0c:9f:7f:20:38:e9:f4:2c:b1:5e:2f:fa:
a0:68:0b:da:db:ff:04:1f:80:8a:1c:a1:5a:1b:16:
78:bc:4d:c6:b1:41:16:ac:79:8d:ac:76:ae:0d:d6:
a9:3b:90:ad:58:6d:d9:3f:ea:d5:45:8a:86:1f:2f:
e2:ef:c7:0f:aa:50:6e:be:f4:61:b4:0d:ce:8f:9d:
59:d3:f9:3f:80:3a:b8:c3:21:da:bc:59:bd:13:db:
81:d7:d8:94:85:12:12:17:33:e9:1d:59:bc:63:a4:
55:78:10:e7:5c:a9:01:04:f6:c2:a6:eb:a0:bd:91:
ef:0c:ba:c4:fe:1d:a8:88:b7:59:cb:33:32:f1:10:
0e:2b:95:5f:57:db:64:a2:9c:ec:3d:52:13:c3:46:
01:3d:01:ea:8d:ed:c5:64:cc:15:5e:ea:87:68:d9:
5d:c3:c1:a0:ca:b6:d6:31:de:fc:1f:4f:22:f6:83:
70:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CF:52:FE:0D:00:23:90:C4:F0:5F:73:70:16:37:46:49:28:3B:A1
X509v3 Authority Key Identifier:
keyid:87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8a:d7:4c:70:3d:f7:8c:53:4d:fb:3d:97:94:48:5e:a6:b5:
ae:ab:cc:55:4f:31:e5:24:5d:91:df:47:8e:33:ab:a4:bf:62:
bf:b4:83:24:b8:9c:01:e2:5c:f1:d7:19:f1:8d:57:2f:72:a9:
47:4d:75:38:5b:b6:fa:5c:2b:44:ec:10:88:1f:ec:81:34:b3:
48:ed:1d:90:4b:7d:df:60:82:40:93:63:5a:5d:e2:bc:b9:2d:
11:e7:49:82:62:d6:59:d6:b6:27:40:3f:46:18:3c:94:34:20:
fb:a0:10:f2:01:2c:51:21:83:e8:51:e4:12:da:4c:63:a0:77:
d2:2a:e3:4a:4f:44:92:b6:96:a8:e9:12:62:13:fd:75:96:a4:
64:1b:23:fd:07:3b:7d:09:a9:90:49:01:dc:38:fd:20:96:ed:
31:9e:50:4c:0b:59:69:b4:b8:ad:bc:46:9a:b7:0d:6d:c9:fc:
12:bf:b0:61:d2:d9:9a:96:c6:fa:5b:3e:80:58:97:b2:2f:7a:
ab:5a:46:3f:b8:b9:ea:57:f3:93:c3:45:d3:99:d1:37:1b:6f:
85:38:01:59:ae:c7:f4:17:6a:45:71:03:59:7f:41:54:3c:2f:
ce:32:8b:5c:d1:1b:94:fa:7c:19:04:6f:09:f9:d7:91:33:2a:
6d:0f:ef:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:49:26 2026 by rpki-client