Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
File: hmuOBdk45F1lrjFNxnUjfeyDEaE.mft (raw, json)
Hash identifier: LNNfYe3BhQe8TlUMSvMDzpOIDK8ik1uQ5On91Xl2f80=
Subject key identifier: F0:B4:7C:95:D8:99:5F:44:FB:B7:34:D8:02:4F:B8:7F:F3:48:D1:88
Authority key identifier: 86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
Certificate issuer: /CN=866b8e05d938e45d65ae314dc675237dec8311a1
Certificate serial: 019E1E3532EA6B9CC340E7D8040003D51BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
Manifest number: 1521
Signing time: Tue 12 May 2026 22:01:03 +0000
Manifest this update: Tue 12 May 2026 22:01:03 +0000
Manifest next update: Wed 13 May 2026 22:01:03 +0000
Files and hashes: 1: AXw1fMN4QVwh_fCCHDmmZdyjQ0M.roa (hash: 2a2VYvYjD+SKO9HMwLyzgAvBrGoGV8DCs63xNBs37UA=)
2: hmuOBdk45F1lrjFNxnUjfeyDEaE.crl (hash: MABHAqWaOdBrFeB99e2yGj+ieqrXGtqfu3DiKFuGpXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:32:ea:6b:9c:c3:40:e7:d8:04:00:03:d5:1b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866b8e05d938e45d65ae314dc675237dec8311a1
Validity
Not Before: May 12 22:01:03 2026 GMT
Not After : May 13 22:01:03 2026 GMT
Subject: CN=f0b47c95d8995f44fbb734d8024fb87ff348d188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:df:c9:83:dc:da:0d:0a:99:43:75:ff:7b:
0a:d2:ab:ab:53:79:c8:f1:d2:64:c2:b2:c8:87:5d:
a9:0a:8b:88:89:ab:3b:a9:bd:9f:fe:a9:2a:76:a6:
f6:66:bc:80:e4:bd:fa:5b:ca:e3:41:43:54:df:49:
ca:9f:c1:00:7f:02:45:5b:b3:d8:44:51:0b:c5:da:
83:f4:7b:b6:bb:3e:b8:43:24:d2:24:fa:37:12:8d:
1b:92:78:d0:e3:c3:13:ce:ce:b3:59:b1:2e:a4:45:
ca:82:8e:13:5d:46:aa:ba:64:0c:2b:54:ae:bd:95:
53:49:58:bd:bb:49:f1:b9:d8:29:f9:2b:4f:72:42:
e0:a4:5d:9b:04:72:05:03:f8:49:07:2f:c8:1f:e4:
5e:e9:70:83:82:35:4b:31:d4:73:c9:30:be:0a:c1:
08:02:95:6f:7f:c7:2c:d1:72:8e:8b:c0:b4:eb:e4:
2d:e9:63:3f:84:6a:5d:35:05:cf:1e:24:21:df:00:
a5:bb:c8:ad:76:0d:ab:93:45:54:14:8d:1a:01:57:
54:7e:f1:ef:80:2a:8c:a9:d7:3a:f3:ab:7b:0a:57:
c4:17:e9:7d:a5:ad:ba:c0:67:be:52:fb:b7:01:c5:
22:82:af:25:df:f3:3f:00:b7:62:cb:df:1c:90:d5:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B4:7C:95:D8:99:5F:44:FB:B7:34:D8:02:4F:B8:7F:F3:48:D1:88
X509v3 Authority Key Identifier:
keyid:86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:81:e1:98:20:f2:17:e2:c6:21:62:6b:d1:37:70:16:ba:a8:
d0:c3:e5:96:15:a1:7e:22:a5:b7:93:87:e4:95:17:80:45:19:
37:41:3a:1a:73:ef:0c:ec:93:c0:90:21:9d:c0:4b:e1:42:99:
f4:30:dc:cf:97:66:32:0a:4e:e4:99:bf:43:fb:d8:b8:b6:6d:
b3:6a:44:06:e8:05:0e:1b:ad:60:eb:72:a3:ff:67:23:77:6a:
43:89:e0:e5:63:b4:61:d7:c7:9c:e7:d5:4b:ce:ed:38:82:fe:
bf:de:3f:71:52:70:b1:cb:e3:5d:50:3d:ed:3f:e8:b6:ac:a6:
b8:47:29:f6:8d:cf:9c:02:90:eb:6c:c7:2e:3c:9a:e8:b8:6d:
80:78:c1:95:22:16:56:1e:5a:2e:f5:4a:ce:fa:c2:53:89:32:
b3:88:7d:1c:94:c4:27:a4:2d:4f:68:84:dc:fd:a8:d7:28:0e:
1c:04:e2:05:ef:6e:51:ff:48:66:4d:c2:0e:19:9f:74:bc:35:
99:d3:0c:b3:0c:b4:ba:9f:a0:0b:78:7b:ec:fd:3a:46:0c:58:
40:b6:c3:7a:74:5c:82:f4:ca:23:38:41:77:b0:d3:e0:cb:ad:
21:57:40:14:f0:3f:86:5d:2a:38:f2:b0:04:a2:6a:37:97:83:
ce:a2:5e:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNTLqa5zDQOfYBAAD1RvRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NmI4ZTA1ZDkzOGU0NWQ2NWFlMzE0ZGM2NzUyMzdkZWM4
MzExYTEwHhcNMjYwNTEyMjIwMTAzWhcNMjYwNTEzMjIwMTAzWjAzMTEwLwYDVQQD
EyhmMGI0N2M5NWQ4OTk1ZjQ0ZmJiNzM0ZDgwMjRmYjg3ZmYzNDhkMTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcffyYPc2g0KmUN1/3sK0qurU3nI
8dJkwrLIh12pCouIias7qb2f/qkqdqb2ZryA5L36W8rjQUNU30nKn8EAfwJFW7PY
RFELxdqD9Hu2uz64QyTSJPo3Eo0bknjQ48MTzs6zWbEupEXKgo4TXUaqumQMK1Su
vZVTSVi9u0nxudgp+StPckLgpF2bBHIFA/hJBy/IH+Re6XCDgjVLMdRzyTC+CsEI
ApVvf8cs0XKOi8C06+Qt6WM/hGpdNQXPHiQh3wClu8itdg2rk0VUFI0aAVdUfvHv
gCqMqdc686t7ClfEF+l9pa26wGe+Uvu3AcUigq8l3/M/ALdiy98ckNVS3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPC0fJXYmV9E+7c02AJPuH/zSNGIMB8GA1UdIwQY
MBaAFIZrjgXZOORdZa4xTcZ1I33sgxGhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG11T0JkazQ1RjFscmpGTnhuVWpmZXlERWFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kNWJjZTItYTkyZi00NDJhLWEyMzUt
YWE4OGE0YmE1OGVmLzEvaG11T0JkazQ1RjFscmpGTnhuVWpmZXlERWFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kNWJjZTItYTkyZi00NDJhLWEyMzUtYWE4OGE0YmE1OGVm
LzEvaG11T0JkazQ1RjFscmpGTnhuVWpmZXlERWFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4HhmCDy
F+LGIWJr0TdwFrqo0MPllhWhfiKlt5OH5JUXgEUZN0E6GnPvDOyTwJAhncBL4UKZ
9DDcz5dmMgpO5Jm/Q/vYuLZts2pEBugFDhutYOtyo/9nI3dqQ4ng5WO0YdfHnOfV
S87tOIL+v94/cVJwscvjXVA97T/otqymuEcp9o3PnAKQ62zHLjya6LhtgHjBlSIW
Vh5aLvVKzvrCU4kys4h9HJTEJ6QtT2iE3P2o1ygOHATiBe9uUf9IZk3CDhmfdLw1
mdMMswy0up+gC3h77P06RgxYQLbDenRcgvTKIzhBd7DT4MutIVdAFPA/hl0qOPKw
BKJqN5eDzqJedg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:34:37 2026 by rpki-client