
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
File: R01HT5RpSoEE9eQTqyucCVWbefA.mft (raw, json)
Hash identifier: EzohbGHX+b5EB45l0f+b5AdwI2J1GU2ocp9HNmqb5aU=
Subject key identifier: EB:ED:63:F3:2A:1D:78:10:07:A1:AD:36:08:84:35:F0:6D:2D:A4:C2
Authority key identifier: 47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
Certificate issuer: /CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Certificate serial: 019E1CB4E8DAEB5FA8DAEDAF9C427C239025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
Manifest number: 0528
Signing time: Tue 12 May 2026 15:01:18 +0000
Manifest this update: Tue 12 May 2026 15:01:18 +0000
Manifest next update: Wed 13 May 2026 15:01:18 +0000
Files and hashes: 1: R01HT5RpSoEE9eQTqyucCVWbefA.crl (hash: WTMWSEiGBdOIpKDU3QERNSBlnTy+2KmbqrFTEhurfMU=)
2: SBUsospASb3EsMhP62NmTHT6SVw.roa (hash: 0+KXBZnA9I41d7SaRHS/S7In8wI7A6juxPzuhg0b63k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:e8:da:eb:5f:a8:da:ed:af:9c:42:7c:23:90:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Validity
Not Before: May 12 15:01:18 2026 GMT
Not After : May 13 15:01:18 2026 GMT
Subject: CN=ebed63f32a1d781007a1ad36088435f06d2da4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:db:b2:ea:bb:68:42:aa:57:d7:8f:03:c2:44:
9e:9f:d4:09:11:fd:87:27:b2:4e:ca:5a:b2:47:e6:
7c:af:fe:5d:ec:0b:8d:43:0d:ee:ed:60:c9:00:61:
96:39:5c:4b:55:80:5e:77:1d:a2:15:d5:9d:95:95:
ec:02:93:da:b0:39:ef:96:7a:bb:2e:80:e5:df:43:
8e:3c:f0:86:70:8e:f5:ab:f7:96:b9:79:ad:b8:79:
fd:73:d6:89:8d:13:c0:44:55:20:38:ae:ee:94:b0:
93:76:ee:95:e3:9e:00:9d:ab:fc:a1:a1:91:fc:76:
5c:9b:90:4d:40:67:f5:ae:0f:f0:c3:4c:fc:28:4e:
1f:ac:01:04:ea:d2:60:b8:bc:b6:aa:9f:06:65:8a:
56:83:25:d3:13:50:ef:35:d2:1c:0d:2d:08:29:74:
70:54:c5:b0:ae:c6:71:80:fd:7c:38:19:c3:35:c7:
3e:aa:ff:30:c7:97:08:5f:2a:33:80:50:a2:37:2f:
02:d8:bb:65:38:db:da:d9:39:1c:4e:f5:4a:3d:b8:
15:59:0f:ad:d8:05:36:53:26:7d:11:71:07:cf:0d:
7d:f7:f4:8d:fa:cd:3e:fd:28:56:07:23:41:3c:74:
7e:51:ab:61:fe:2a:5d:4f:ea:83:c0:d0:25:5f:fc:
6f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:ED:63:F3:2A:1D:78:10:07:A1:AD:36:08:84:35:F0:6D:2D:A4:C2
X509v3 Authority Key Identifier:
keyid:47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:69:48:29:05:53:54:81:f6:f4:f4:6a:69:d9:45:c1:3d:06:
4c:65:e4:ed:81:dd:71:0b:1b:16:e8:e7:b5:13:d0:82:8b:64:
76:fa:d9:3e:d1:50:53:ff:5d:0c:c4:2f:88:16:94:88:56:d4:
05:cf:cb:b6:8b:6a:ab:89:bd:69:0a:a6:01:03:3d:bf:97:ef:
2f:50:be:e9:00:f5:a2:97:fe:bd:d5:f6:2e:a0:a7:62:83:38:
82:52:19:3e:9d:88:98:43:23:70:28:15:be:fc:03:62:23:d7:
2c:60:d8:74:24:d5:c2:68:26:15:28:44:0c:f1:7e:f1:e8:1d:
f8:4a:95:72:43:d4:fe:62:35:a0:41:42:86:95:9b:16:19:0c:
23:7c:f2:2d:76:98:a4:93:b7:76:93:d1:e4:af:32:62:03:95:
99:a9:01:67:d2:c9:1c:39:b4:24:09:21:67:b4:d5:e5:7a:d3:
6c:7c:8b:ab:ea:5d:f7:6c:40:5f:dc:47:d2:1e:89:b4:dd:19:
a2:3b:5b:d5:cf:09:ad:65:71:7a:92:e2:9c:a4:2e:f1:eb:af:
e7:32:fa:5a:5a:1a:ac:be:f9:74:16:99:06:b8:c7:b8:61:03:
51:02:1f:83:72:f9:62:3e:81:e9:75:c5:f3:2a:ec:ac:2c:76:
59:25:7c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:32:43 2026 by rpki-client