Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
File: D_HA6RHM5MRT_sKxaPbBPTbg34U.mft (raw, json)
Hash identifier: 8hPs6kLp2ATCzusEwKcLgE5k6wNv5zsHYwo5pjMabrQ=
Subject key identifier: B1:9A:5E:26:7B:35:A9:DF:62:BB:75:90:3B:88:BD:05:98:6F:79:1B
Authority key identifier: 0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85
Certificate issuer: /CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85
Certificate serial: 019E1CB4C0913A2929114A36284E44977178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
Manifest number: 011D
Signing time: Tue 12 May 2026 15:01:08 +0000
Manifest this update: Tue 12 May 2026 15:01:08 +0000
Manifest next update: Wed 13 May 2026 15:01:08 +0000
Files and hashes: 1: A2gg-MX124Lpmk4q6amGH364pI8.roa (hash: vW20LJAGKrZU5294D/w3GbyCDoxlRHd2AtS8gCcCOJ4=)
2: D_HA6RHM5MRT_sKxaPbBPTbg34U.crl (hash: fPqxPLq6bOxn2FVCA4WyMzDkFhRZ51M5qeVYxJjtRkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:c0:91:3a:29:29:11:4a:36:28:4e:44:97:71:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85
Validity
Not Before: May 12 15:01:08 2026 GMT
Not After : May 13 15:01:08 2026 GMT
Subject: CN=b19a5e267b35a9df62bb75903b88bd05986f791b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:41:ad:1a:a5:d0:26:aa:13:bd:2e:8e:dd:bc:
d5:ae:d1:e8:2a:7d:ba:e0:53:0d:45:f3:b4:38:56:
b1:50:8e:c4:3f:c4:e6:b9:29:c3:ce:6c:a7:a8:f3:
06:39:d3:9a:e1:11:45:cb:52:74:b4:f1:a2:4b:c8:
a4:45:b1:54:bd:6a:00:4d:a7:4f:65:87:b9:e3:cb:
fe:d5:05:1b:b9:2a:f0:03:e6:b1:8a:81:aa:b1:e3:
38:36:2b:5f:0a:21:e4:b8:80:2f:f8:2a:95:9b:2a:
54:df:72:c1:99:9a:47:ec:5d:7d:d6:ad:62:0a:dd:
1a:08:5c:1f:7e:b6:c6:db:69:1d:09:64:71:cb:e4:
15:b6:fa:b1:0e:d0:cf:23:92:06:10:cd:a2:a8:4e:
76:0c:22:f0:e9:f7:8f:39:59:aa:eb:d0:e0:73:a6:
59:17:c8:69:0a:2f:4a:f3:6f:36:4f:e6:93:91:03:
70:a3:27:42:bd:c8:0f:13:a5:b7:ef:59:95:fc:b6:
9c:07:1d:43:9e:95:73:c3:d4:71:dc:e4:91:9b:be:
4b:b6:30:d9:81:6b:5c:fb:9d:67:78:7e:29:c0:04:
05:75:34:fa:a1:cb:19:21:4b:67:da:ae:df:c7:da:
ca:a8:75:5d:1a:69:a8:94:46:7c:44:bb:90:a2:af:
22:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9A:5E:26:7B:35:A9:DF:62:BB:75:90:3B:88:BD:05:98:6F:79:1B
X509v3 Authority Key Identifier:
keyid:0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1e:07:72:19:5f:23:d0:ed:5c:71:ea:fd:42:9b:ec:cc:c1:
56:4e:50:36:47:37:9c:d7:d1:0d:3b:11:b6:7f:fa:28:da:d4:
d7:af:bf:a9:6b:b4:70:32:7c:9b:92:38:36:a7:63:de:be:a8:
fd:32:7b:2c:38:f9:fd:f3:60:31:54:3e:3c:3d:66:29:57:22:
db:64:d8:20:f7:81:82:54:a8:fe:d9:de:04:73:5a:43:29:45:
53:28:aa:26:93:cb:87:00:06:1c:3f:f7:db:d5:ea:c4:54:17:
4e:0c:1b:bc:eb:ce:ef:e5:21:64:59:b9:d0:b9:36:6b:b1:8d:
2c:85:07:c4:86:38:51:fa:4a:a9:fd:52:19:6a:d8:cd:48:80:
02:51:92:90:17:34:05:6d:ba:43:cb:46:e6:fe:0a:13:f9:52:
ff:92:05:62:76:41:b9:0b:43:d9:64:1e:c9:bf:e0:f5:d3:14:
5a:86:ac:7d:ef:4b:13:ab:79:5a:17:70:01:93:76:5c:81:2f:
e3:df:c8:0f:39:c2:47:57:83:1a:7e:25:38:d6:59:80:46:bd:
8b:12:e7:fb:56:54:03:fc:b4:77:fc:73:8a:37:b3:a8:29:54:
bb:f8:9d:11:64:66:3f:62:29:40:71:37:4d:c7:70:57:73:a7:
75:e9:5a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:43:09 2026 by rpki-client