Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
File: h5axwx_d4r1emPj7t3mKvEdJPPI.mft (raw, json)
Hash identifier: zVWwrVf2vueqi4L26jv/dZsVk5vgBj3DWiDjRwZXM20=
Subject key identifier: E6:01:20:0A:E6:5F:9D:6A:A8:A4:51:76:AA:F4:17:86:4E:0E:5C:8B
Authority key identifier: 87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2
Certificate issuer: /CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
Certificate serial: 019D29613AC2712689DEB0BF6956712DAC62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
Manifest number: 151A
Signing time: Thu 26 Mar 2026 09:02:11 +0000
Manifest this update: Thu 26 Mar 2026 09:02:11 +0000
Manifest next update: Fri 27 Mar 2026 09:02:11 +0000
Files and hashes: 1: NejKy8jZv7LHCtY85OZ0XTQsrYw.roa (hash: 6i32lnkgvTEvsNHdmqz1vGOoJv3YKsgonD5vJZrkPQ0=)
2: h5axwx_d4r1emPj7t3mKvEdJPPI.crl (hash: 8Zy7VhB8S6eAPtl08VPNg/lrW6k5/Om28CQ5NwuwOBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:3a:c2:71:26:89:de:b0:bf:69:56:71:2d:ac:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
Validity
Not Before: Mar 26 09:02:11 2026 GMT
Not After : Mar 27 09:02:11 2026 GMT
Subject: CN=e601200ae65f9d6aa8a45176aaf417864e0e5c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:01:75:24:5f:32:08:53:76:65:8d:bc:05:b7:
78:2e:53:07:4e:6b:58:b1:cf:99:9d:ea:4b:90:bb:
fd:48:13:1d:a7:b7:9d:d1:25:c6:78:0e:49:67:38:
7b:80:06:e4:15:1a:a4:77:54:63:99:8e:da:79:3f:
13:a5:c2:57:96:3f:bb:11:81:3c:82:29:ed:f8:d0:
55:03:08:f3:e9:35:64:91:f5:29:bb:af:34:f8:4a:
b3:b0:b0:0d:7f:bb:ec:0e:9d:0f:6a:5a:ae:84:8b:
7a:b8:c0:a9:c0:07:a8:e1:e1:fa:ce:da:75:44:7d:
da:dc:be:3a:d6:04:db:2e:3e:1b:75:e4:6a:31:d6:
08:e5:65:8a:95:63:65:c5:ce:8e:29:15:fc:43:f5:
c7:19:ac:70:a6:24:78:29:b7:15:54:d9:f6:bc:3a:
01:21:ec:4a:69:ed:da:db:b4:fe:97:4b:7f:42:7d:
1a:b4:1e:7d:c8:09:ee:5c:9e:7f:3b:2d:93:5e:a6:
6f:ca:5d:a1:c1:ef:08:29:6c:45:4e:05:ce:8d:c8:
55:81:ba:b0:72:a1:8e:58:10:4b:de:91:62:90:78:
95:0c:08:9a:a6:29:49:28:1d:93:09:20:c9:09:81:
d6:ad:08:34:1a:8c:46:eb:c7:44:4b:9d:eb:96:db:
9a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:01:20:0A:E6:5F:9D:6A:A8:A4:51:76:AA:F4:17:86:4E:0E:5C:8B
X509v3 Authority Key Identifier:
keyid:87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7b:9c:1a:e8:8e:49:7d:86:db:d8:ad:88:09:53:a7:1a:97:
d8:3e:4f:d6:17:a8:fd:dd:73:1b:6d:e7:46:1e:f1:28:93:67:
fc:6b:4c:c9:1f:55:04:5d:e0:b7:3c:c0:e0:a6:f5:43:f7:e3:
14:e2:b3:e6:9a:03:4c:12:0a:16:d8:6c:6a:20:e2:ce:a5:2a:
2f:51:a0:d2:1e:fa:17:fe:2d:48:44:d4:a7:1a:92:96:9f:4d:
f1:41:5c:26:97:b1:de:4f:03:38:e1:c9:c7:03:59:ea:a9:30:
36:1d:c7:9e:38:59:62:44:44:7b:cd:f5:7b:2d:88:c2:a7:29:
2a:82:d9:2b:2d:a4:51:77:64:14:6a:11:8e:2c:5b:c3:88:51:
a1:45:4a:ac:0e:37:03:4f:44:74:67:f9:55:dc:c6:4f:4e:fa:
d9:8a:75:3f:61:31:77:8b:cc:5d:50:b5:6c:80:56:51:74:9b:
6e:cc:ee:95:f4:48:16:de:58:53:83:99:d5:19:a3:6d:84:0d:
7f:b1:64:16:22:d1:21:bd:87:88:e5:bd:a3:f1:59:73:0b:d4:
67:84:62:f8:62:44:43:15:7a:1d:47:82:02:f6:5d:3c:3c:bf:
10:66:1b:38:51:da:b2:08:19:90:83:c3:9c:50:ba:42:0c:b1:
e3:62:01:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:14 2026 by rpki-client