Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
File: dT1Hbblt4eWGIxGacLnXsAtnbaA.mft (raw, json)
Hash identifier: WjYOPKdqIHGQ2shn9PtReP8z7ahr5tc+WGNDME85sik=
Subject key identifier: 53:9E:C1:17:C0:9E:15:84:9A:11:02:92:EF:EA:6F:9A:D4:F7:F8:B4
Authority key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
Certificate issuer: /CN=753d476db96de1e58623119a70b9d7b00b676da0
Certificate serial: 019E1F478F0952CCA6A036BC302D691C29E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 03:00:43 +0000
Manifest this update: Wed 13 May 2026 03:00:43 +0000
Manifest next update: Thu 14 May 2026 03:00:43 +0000
Files and hashes: 1: H7fYzgAywiwtcT8-20X5WOux6fs.roa (hash: h+Uh5Kz1qJdgzCKaZAX98ps/QJeCnLPBc45Zv+eXiYA=)
2: cHfaPvW5Vud_9pj79Xxvj7kuddE.roa (hash: bGFOgs4ZrshgcJyva0SGzm2fyOyJP6p6s4rmZXREF64=)
3: dT1Hbblt4eWGIxGacLnXsAtnbaA.crl (hash: 2AMzKpOpRuUj8enCtCfwKhbtgZpscGFQAaybrbne5xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:8f:09:52:cc:a6:a0:36:bc:30:2d:69:1c:29:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=753d476db96de1e58623119a70b9d7b00b676da0
Validity
Not Before: May 13 03:00:43 2026 GMT
Not After : May 14 03:00:43 2026 GMT
Subject: CN=539ec117c09e15849a110292efea6f9ad4f7f8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:39:d3:9c:b3:fa:9a:69:43:75:8a:49:e2:2d:
a2:d1:c8:5a:52:dd:e5:ee:88:4c:9a:09:54:09:db:
25:53:f5:a6:07:0f:69:2a:4b:5a:ef:8e:0d:66:de:
fe:fc:cb:01:7d:e3:6e:8d:ce:66:9f:7d:da:e9:1d:
01:72:7a:2d:7c:86:1a:13:2f:90:2c:57:1b:64:74:
73:13:c6:a0:a2:c1:5e:6c:b8:9c:a4:ee:7c:2b:ee:
08:cb:78:f4:d1:5a:ad:d4:65:21:45:50:58:41:dc:
94:57:38:24:7b:1a:85:ab:7a:e4:f9:90:e8:0b:f2:
ce:33:d2:9e:be:43:9e:76:16:72:f5:13:9b:b3:dc:
51:2a:46:61:47:5b:70:9b:89:55:e5:f7:b4:2a:60:
24:9f:31:f8:a9:50:b6:0c:ae:8e:e5:af:9c:52:93:
ad:73:b2:88:5a:af:ae:5b:ac:0a:a6:48:bb:b6:5c:
e4:1d:24:fb:41:7b:af:7d:cf:da:9a:30:78:7f:b4:
06:bb:be:91:0f:2e:68:e3:1e:5a:0c:b0:75:19:9d:
d3:28:8f:c6:ca:00:e5:bb:5d:ca:f3:3e:cf:cd:8f:
dc:2f:17:e3:ac:cf:01:fe:8c:f1:c5:08:07:a9:04:
1b:cd:13:1e:92:4b:c6:32:a1:1e:ba:76:7a:32:be:
dc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9E:C1:17:C0:9E:15:84:9A:11:02:92:EF:EA:6F:9A:D4:F7:F8:B4
X509v3 Authority Key Identifier:
keyid:75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c0:73:41:50:22:53:3e:b3:5a:5c:d9:06:97:cb:fd:89:b7:
30:cc:78:a5:6e:f2:2a:4b:fa:9b:e9:16:2d:4b:93:52:b3:c7:
39:cc:30:7d:0e:1c:9d:25:8e:c1:55:cf:ba:f4:96:6f:02:4f:
9b:0e:37:02:1e:93:86:2a:44:4a:ca:ad:b3:f5:31:e5:41:76:
31:c5:91:79:81:17:d0:fa:6d:c0:06:62:9e:88:85:bf:ff:6e:
7a:c0:82:24:91:4e:84:e1:59:8c:70:10:46:5b:d8:8c:cc:4f:
a1:c0:f6:04:bb:2a:e3:b1:5f:55:4f:0b:a4:b4:53:3f:fe:17:
b1:64:f5:87:ee:45:2c:04:ff:de:49:32:95:b8:b3:5c:df:29:
96:99:e1:a1:26:b5:1d:ea:a3:bf:57:ce:85:e8:f7:66:02:55:
f5:35:40:08:ed:1d:df:cd:a8:2a:cc:74:c7:91:27:ab:9e:00:
03:6f:23:7a:ca:84:c7:9b:92:1f:c1:cc:79:a4:36:3f:8c:26:
d6:14:ce:4d:73:3e:d0:ca:5b:5d:59:e8:76:8e:74:8d:c3:a5:
f9:85:75:7f:dc:c8:66:92:91:52:21:a7:b4:0c:ef:30:60:02:
cc:83:76:5b:e3:2f:c3:83:28:77:73:29:64:20:71:8d:f0:7f:
b3:0b:49:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fR48JUsymoDa8MC1pHCniMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1M2Q0NzZkYjk2ZGUxZTU4NjIzMTE5YTcwYjlkN2IwMGI2
NzZkYTAwHhcNMjYwNTEzMDMwMDQzWhcNMjYwNTE0MDMwMDQzWjAzMTEwLwYDVQQD
Eyg1MzllYzExN2MwOWUxNTg0OWExMTAyOTJlZmVhNmY5YWQ0ZjdmOGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijnTnLP6mmlDdYpJ4i2i0chaUt3l
7ohMmglUCdslU/WmBw9pKkta744NZt7+/MsBfeNujc5mn33a6R0BcnotfIYaEy+Q
LFcbZHRzE8agosFebLicpO58K+4Iy3j00Vqt1GUhRVBYQdyUVzgkexqFq3rk+ZDo
C/LOM9KevkOedhZy9RObs9xRKkZhR1twm4lV5fe0KmAknzH4qVC2DK6O5a+cUpOt
c7KIWq+uW6wKpki7tlzkHST7QXuvfc/amjB4f7QGu76RDy5o4x5aDLB1GZ3TKI/G
ygDlu13K8z7PzY/cLxfjrM8B/ozxxQgHqQQbzRMekkvGMqEeunZ6Mr7cFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOewRfAnhWEmhECku/qb5rU9/i0MB8GA1UdIwQY
MBaAFHU9R225beHlhiMRmnC517ALZ22gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82YTljZjktYzBjYy00MDExLTg2MGUt
NDY4NTc4MmFjMmMzLzEvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi82YTljZjktYzBjYy00MDExLTg2MGUtNDY4NTc4MmFjMmMz
LzEvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsBzQVAi
Uz6zWlzZBpfL/Ym3MMx4pW7yKkv6m+kWLUuTUrPHOcwwfQ4cnSWOwVXPuvSWbwJP
mw43Ah6ThipESsqts/Ux5UF2McWReYEX0PptwAZinoiFv/9uesCCJJFOhOFZjHAQ
RlvYjMxPocD2BLsq47FfVU8LpLRTP/4XsWT1h+5FLAT/3kkylbizXN8plpnhoSa1
Heqjv1fOhej3ZgJV9TVACO0d382oKsx0x5Enq54AA28jesqEx5uSH8HMeaQ2P4wm
1hTOTXM+0MpbXVnodo50jcOl+YV1f9zIZpKRUiGntAzvMGACzIN2W+Mvw4Mod3Mp
ZCBxjfB/swtJnA==
-----END CERTIFICATE-----
Generated at Wed May 13 12:31:56 2026 by rpki-client