Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
File: HhH4prKDtSYE2TKiWJO4ZAQSHos.mft (raw, json)
Hash identifier: bkehH77cylt8PD6QeORGmYcF0Dr7x8QC32FOFazl2+M=
Subject key identifier: C9:AF:4B:7C:9D:0C:27:69:CA:95:42:4B:96:43:54:36:87:1B:3A:34
Authority key identifier: 1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
Certificate issuer: /CN=1e11f8a6b283b52604d932a25893b86404121e8b
Certificate serial: 019E1EA3150E9B3B7DAD2AB5961CE2362424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
Manifest number: 0F0F
Signing time: Wed 13 May 2026 00:01:04 +0000
Manifest this update: Wed 13 May 2026 00:01:04 +0000
Manifest next update: Thu 14 May 2026 00:01:04 +0000
Files and hashes: 1: 4n7f8hSe_-4Wy2bDVW-WXjUIx0g.roa (hash: 5C3gCij/JOO8iJfKMKfHtP05aLMSh42RFLgeNEwUl6g=)
2: HhH4prKDtSYE2TKiWJO4ZAQSHos.crl (hash: lSWR2VRhexcpv8oihZGFT12YpmUCC0MwjLEfAWNoPi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:15:0e:9b:3b:7d:ad:2a:b5:96:1c:e2:36:24:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e11f8a6b283b52604d932a25893b86404121e8b
Validity
Not Before: May 13 00:01:04 2026 GMT
Not After : May 14 00:01:04 2026 GMT
Subject: CN=c9af4b7c9d0c2769ca95424b96435436871b3a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:09:f4:d6:a7:67:9f:f4:52:1d:b2:8b:b0:3d:
ab:20:87:ae:ed:bd:a1:08:21:ff:0a:d1:72:23:de:
f2:e6:74:a8:9f:0d:0a:cb:b9:94:2c:cc:2d:8b:1d:
92:59:8f:f4:2c:85:14:df:af:af:2c:67:a3:b8:f6:
45:df:1e:09:3a:01:f9:e1:87:80:56:48:c9:8c:76:
63:90:f4:99:b6:f6:0b:eb:fa:4a:84:35:88:2d:69:
7c:d5:3f:28:8c:6a:70:ba:f6:ab:5c:d4:b6:04:5d:
1c:89:0e:5d:54:6e:88:ba:52:46:ea:49:57:8c:c7:
c3:fe:90:61:20:8f:51:f5:68:7c:f0:ea:e2:b6:1b:
63:c6:d6:df:a3:2e:08:59:5e:b2:25:8e:81:94:e4:
49:19:99:f7:ec:cf:5e:66:9c:64:30:4b:c6:98:37:
f7:81:53:dd:3c:73:54:eb:41:b8:2b:15:27:79:4c:
d7:6a:f6:d5:04:93:e6:90:f9:f1:7a:56:b4:1c:d4:
35:a5:34:41:52:c6:06:8d:e7:77:fe:3f:f9:5d:da:
88:36:2b:47:78:09:eb:d0:91:2b:94:60:46:03:37:
d3:38:1d:e4:35:a6:d3:68:f8:20:09:dd:1a:8b:54:
aa:e0:1e:a4:11:55:5d:57:5b:0a:15:42:d5:cb:18:
8c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AF:4B:7C:9D:0C:27:69:CA:95:42:4B:96:43:54:36:87:1B:3A:34
X509v3 Authority Key Identifier:
keyid:1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:eb:35:61:a2:81:87:80:97:7c:02:d2:b2:24:80:8d:11:31:
2b:a0:80:c7:ba:37:83:f2:de:22:2a:6d:a0:00:24:0b:8d:50:
35:3b:10:df:a2:8f:69:7c:87:87:2e:ee:6f:45:b0:af:c2:79:
dd:74:c3:f4:aa:fb:84:03:f8:aa:8a:d1:9b:6c:54:cb:3d:a4:
69:2b:e0:91:98:c0:8e:4f:1a:3d:48:05:2e:d5:90:af:ea:53:
12:29:a2:a5:8a:20:56:cc:a0:49:5d:6e:4c:52:92:1f:f6:40:
99:9d:0d:34:9d:8d:93:03:1d:60:90:85:6b:47:7e:5d:b9:5e:
ca:a9:1f:78:46:f4:e7:cf:43:38:0c:35:77:29:c6:b0:fb:94:
67:d6:31:71:5e:59:b8:bc:e6:84:3a:96:ff:f4:01:f7:f3:e8:
68:a4:6f:63:29:94:5a:67:52:9d:fd:a9:15:70:59:83:7e:1c:
21:36:0f:6b:be:fb:24:f3:c0:b0:fa:a7:16:3c:ac:67:c7:d0:
ca:66:b9:cd:81:10:33:7f:91:ab:3a:3f:c3:31:6b:99:c6:aa:
20:49:e0:88:6e:8c:18:e8:7e:d9:e6:9b:7f:a0:ee:4d:f2:c0:
f7:74:f0:8d:62:17:12:85:6b:fc:e5:c0:30:a0:0f:01:72:c1:
32:42:8d:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eoxUOmzt9rSq1lhziNiQkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMTFmOGE2YjI4M2I1MjYwNGQ5MzJhMjU4OTNiODY0MDQx
MjFlOGIwHhcNMjYwNTEzMDAwMTA0WhcNMjYwNTE0MDAwMTA0WjAzMTEwLwYDVQQD
EyhjOWFmNGI3YzlkMGMyNzY5Y2E5NTQyNGI5NjQzNTQzNjg3MWIzYTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAn01qdnn/RSHbKLsD2rIIeu7b2h
CCH/CtFyI97y5nSonw0Ky7mULMwtix2SWY/0LIUU36+vLGejuPZF3x4JOgH54YeA
VkjJjHZjkPSZtvYL6/pKhDWILWl81T8ojGpwuvarXNS2BF0ciQ5dVG6IulJG6klX
jMfD/pBhII9R9Wh88Orithtjxtbfoy4IWV6yJY6BlORJGZn37M9eZpxkMEvGmDf3
gVPdPHNU60G4KxUneUzXavbVBJPmkPnxela0HNQ1pTRBUsYGjed3/j/5XdqINitH
eAnr0JErlGBGAzfTOB3kNabTaPggCd0ai1Sq4B6kEVVdV1sKFULVyxiM/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmvS3ydDCdpypVCS5ZDVDaHGzo0MB8GA1UdIwQY
MBaAFB4R+Kayg7UmBNkyoliTuGQEEh6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGhINHByS0R0U1lFMlRLaVdKTzRaQVFTSG9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jOWViNTUtZTU5My00Y2Q3LTg3MTQt
MWE1OTMxOTRjNzk4LzEvSGhINHByS0R0U1lFMlRLaVdKTzRaQVFTSG9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9jOWViNTUtZTU5My00Y2Q3LTg3MTQtMWE1OTMxOTRjNzk4
LzEvSGhINHByS0R0U1lFMlRLaVdKTzRaQVFTSG9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAus1YaKB
h4CXfALSsiSAjRExK6CAx7o3g/LeIiptoAAkC41QNTsQ36KPaXyHhy7ub0Wwr8J5
3XTD9Kr7hAP4qorRm2xUyz2kaSvgkZjAjk8aPUgFLtWQr+pTEimipYogVsygSV1u
TFKSH/ZAmZ0NNJ2NkwMdYJCFa0d+XbleyqkfeEb0589DOAw1dynGsPuUZ9YxcV5Z
uLzmhDqW//QB9/PoaKRvYymUWmdSnf2pFXBZg34cITYPa777JPPAsPqnFjysZ8fQ
yma5zYEQM3+Rqzo/wzFrmcaqIEngiG6MGOh+2eabf6DuTfLA93TwjWIXEoVr/OXA
MKAPAXLBMkKNSQ==
-----END CERTIFICATE-----
Generated at Wed May 13 11:07:15 2026 by rpki-client