Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
File: h5axwx_d4r1emPj7t3mKvEdJPPI.mft (raw, json)
Hash identifier: dPRpE6noPe1OdOxboUa99zm+HdVGXB2t1W0hMF7G05o=
Subject key identifier: 21:6E:A6:7E:41:0E:36:02:C8:45:CD:77:8E:30:51:CB:89:13:4F:B4
Authority key identifier: 87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2
Certificate issuer: /CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
Certificate serial: 019E1EA3DAE331E3CD7386CB87928D295E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
Manifest number: 1599
Signing time: Wed 13 May 2026 00:01:55 +0000
Manifest this update: Wed 13 May 2026 00:01:55 +0000
Manifest next update: Thu 14 May 2026 00:01:55 +0000
Files and hashes: 1: NejKy8jZv7LHCtY85OZ0XTQsrYw.roa (hash: 6i32lnkgvTEvsNHdmqz1vGOoJv3YKsgonD5vJZrkPQ0=)
2: h5axwx_d4r1emPj7t3mKvEdJPPI.crl (hash: 2fHFggscb08J/E4D6yx8SUKjBvXLapuNqRahjRBM/LI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:da:e3:31:e3:cd:73:86:cb:87:92:8d:29:5e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
Validity
Not Before: May 13 00:01:55 2026 GMT
Not After : May 14 00:01:55 2026 GMT
Subject: CN=216ea67e410e3602c845cd778e3051cb89134fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:5d:c5:44:17:36:28:0a:cb:60:2f:3a:42:d9:
4d:44:8f:00:50:ff:d6:89:85:aa:07:9d:80:84:ff:
85:37:01:ce:38:a9:bc:c9:74:bd:58:78:bd:eb:2c:
85:fa:16:e1:5b:f9:55:e9:77:c9:1a:94:e8:2e:3c:
29:e0:4b:57:14:e1:d0:47:fb:a1:47:fe:77:6c:fb:
37:1c:42:ac:29:1c:1e:a7:96:30:be:61:71:ec:e0:
b2:8a:30:b0:bd:3a:47:1c:80:03:d9:ec:cd:f8:61:
98:9c:c6:fa:0b:8f:46:fe:e9:d7:71:fd:3e:ce:63:
51:4d:4f:f2:ce:03:55:5b:20:e6:39:4c:f4:4a:ff:
f5:13:74:d0:b5:27:7e:de:80:fc:c6:3c:d6:53:f3:
5c:49:a9:cc:8c:3a:36:f3:58:03:98:9c:c7:7b:b6:
f8:4c:cc:e5:16:5c:43:92:8b:c6:f9:6e:42:b2:87:
23:a0:02:45:8e:86:2b:08:43:f3:6b:83:9f:e0:cb:
c7:21:05:3a:05:9f:6a:b8:36:c1:7e:85:8a:2e:74:
da:72:a0:80:83:b9:a9:eb:17:f5:5d:89:d5:cc:67:
b2:92:de:44:4f:41:2f:35:4a:b2:ae:73:db:93:59:
b7:c3:2e:f7:5d:39:bf:71:00:90:c0:01:22:64:a6:
e6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6E:A6:7E:41:0E:36:02:C8:45:CD:77:8E:30:51:CB:89:13:4F:B4
X509v3 Authority Key Identifier:
keyid:87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:bd:27:81:c6:58:f8:37:5c:66:f1:94:77:84:12:a9:06:7a:
90:2a:a9:76:1a:e6:0f:0c:39:00:6e:e4:cc:e2:b8:94:70:bd:
80:28:d2:d3:9f:09:9f:e6:ad:45:56:82:69:31:e3:0e:5b:cb:
00:aa:dc:de:48:58:e9:a3:90:c5:66:80:a7:ed:3c:6d:e3:99:
84:9b:9e:0a:14:ba:1c:ed:39:14:51:74:6e:44:96:58:6e:a9:
b5:8f:72:e0:39:47:bf:e2:ec:94:f7:19:6a:d4:ec:05:7b:26:
a3:a9:9e:82:e8:03:ee:ce:ef:07:89:00:be:c5:51:bc:14:cc:
6c:73:df:7f:97:70:e8:f1:cf:ac:53:5a:6c:0d:8e:f3:ca:c6:
10:c1:d7:84:c0:cb:bf:9b:94:19:14:53:fe:6c:64:c4:00:99:
fb:00:d8:45:de:b1:ce:65:f6:88:dc:31:4d:9a:d2:fd:f4:0d:
01:87:0b:60:aa:ae:fc:6f:a1:f4:96:28:d0:53:5a:5a:f0:46:
2c:f7:1d:a2:8d:19:7c:70:f8:51:54:e1:5f:8b:08:e4:76:f1:
b4:46:d0:9c:c0:b2:22:59:cb:24:86:2d:cd:2a:65:e6:11:b8:
27:6c:91:e5:fe:2b:69:0d:f9:55:26:86:4c:a7:41:48:de:6a:
42:f0:c6:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo9rjMePNc4bLh5KNKV6IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OTZiMWMzMWZkZGUyYmQ1ZTk4ZjhmYmI3Nzk4YWJjNDc0
OTNjZjIwHhcNMjYwNTEzMDAwMTU1WhcNMjYwNTE0MDAwMTU1WjAzMTEwLwYDVQQD
EygyMTZlYTY3ZTQxMGUzNjAyYzg0NWNkNzc4ZTMwNTFjYjg5MTM0ZmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9l3FRBc2KArLYC86QtlNRI8AUP/W
iYWqB52AhP+FNwHOOKm8yXS9WHi96yyF+hbhW/lV6XfJGpToLjwp4EtXFOHQR/uh
R/53bPs3HEKsKRwep5YwvmFx7OCyijCwvTpHHIAD2ezN+GGYnMb6C49G/unXcf0+
zmNRTU/yzgNVWyDmOUz0Sv/1E3TQtSd+3oD8xjzWU/NcSanMjDo281gDmJzHe7b4
TMzlFlxDkovG+W5CsocjoAJFjoYrCEPza4Of4MvHIQU6BZ9quDbBfoWKLnTacqCA
g7mp6xf1XYnVzGeykt5ET0EvNUqyrnPbk1m3wy73XTm/cQCQwAEiZKbmJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFupn5BDjYCyEXNd44wUcuJE0+0MB8GA1UdIwQY
MBaAFIeWscMf3eK9Xpj4+7d5irxHSTzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDVheHd4X2Q0cjFlbVBqN3QzbUt2RWRKUFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8yMzQzYTMtZDBmMi00ZThhLTg3ZDQt
NGFlMzMwNmRhNzkzLzEvaDVheHd4X2Q0cjFlbVBqN3QzbUt2RWRKUFBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8yMzQzYTMtZDBmMi00ZThhLTg3ZDQtNGFlMzMwNmRhNzkz
LzEvaDVheHd4X2Q0cjFlbVBqN3QzbUt2RWRKUFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlr0ngcZY
+DdcZvGUd4QSqQZ6kCqpdhrmDww5AG7kzOK4lHC9gCjS058Jn+atRVaCaTHjDlvL
AKrc3khY6aOQxWaAp+08beOZhJueChS6HO05FFF0bkSWWG6ptY9y4DlHv+LslPcZ
atTsBXsmo6megugD7s7vB4kAvsVRvBTMbHPff5dw6PHPrFNabA2O88rGEMHXhMDL
v5uUGRRT/mxkxACZ+wDYRd6xzmX2iNwxTZrS/fQNAYcLYKqu/G+h9JYo0FNaWvBG
LPcdoo0ZfHD4UVThX4sI5HbxtEbQnMCyIlnLJIYtzSpl5hG4J2yR5f4raQ35VSaG
TKdBSN5qQvDGtA==
-----END CERTIFICATE-----
Generated at Wed May 13 08:16:21 2026 by rpki-client