Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
File: hfTuFPbTinzwcSed_3s5FwLjcTU.mft (raw, json)
Hash identifier: 02Po862nSnrj2Ct4cSnv/5wx/7Yh2QIBhZguD/3PoJM=
Subject key identifier: 49:0B:AB:6B:78:76:87:82:9A:CA:66:9F:B8:B8:C8:17:1F:25:C7:95
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Certificate issuer: /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial: 019E1DC70C07B4D28F40BFBF86CC780AED4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
Manifest number: 17A4
Signing time: Tue 12 May 2026 20:00:44 +0000
Manifest this update: Tue 12 May 2026 20:00:44 +0000
Manifest next update: Wed 13 May 2026 20:00:44 +0000
Files and hashes: 1: Fbp_lxqUHehCSWbyl7sXqy6NV7c.roa (hash: 2HfCb9kniGEaBDNnHz9GBiRgabhJI0HLcxsnmcMaKY8=)
2: Kw8ydkhlfzZHeJTkr7mnY0TC51Q.roa (hash: A/++N69JbstSCEAobrMDwfyAGtA60/N4ZLrwg/2X2ok=)
3: hfTuFPbTinzwcSed_3s5FwLjcTU.crl (hash: PQyjUe4+GBE/ASGBcEsfg8V/QNNgPcJOPjnARlsSzak=)
4: tTro6Q3OQALzLcA8FA4eU5RfBWA.roa (hash: jtcqT3NEeBB17kUbe2vD9a8c2cug0yjIQxz7WQqkvtg=)
5: vbHBtb2iPNz_qrAoEkpCxsaIZZc.roa (hash: OIkOu0+4El6Pg/y3PaYXt7py5eZ3TqMx4VnZc06tByw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:0c:07:b4:d2:8f:40:bf:bf:86:cc:78:0a:ed:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Validity
Not Before: May 12 20:00:44 2026 GMT
Not After : May 13 20:00:44 2026 GMT
Subject: CN=490bab6b787687829aca669fb8b8c8171f25c795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:20:b8:4d:38:24:5a:69:61:85:49:2a:ae:56:
12:91:39:a2:cf:e0:d8:a8:0b:a4:b2:31:41:e3:19:
20:a1:14:de:6f:0a:e2:4c:51:2d:e2:54:36:5e:47:
dc:75:90:c7:69:fa:b4:cf:12:9b:98:a6:e3:c1:06:
c4:85:b1:7d:7d:87:28:b9:32:75:57:b2:2b:c2:d7:
cc:d4:d0:91:30:4b:84:d0:a3:6e:2b:b7:aa:52:2f:
12:19:7b:67:47:99:62:fe:b2:c1:54:40:89:45:db:
5d:e7:7f:6e:0e:45:47:61:e5:5d:01:58:35:b3:8e:
de:a6:5d:5d:01:96:79:d8:d3:d0:f3:7c:d3:16:c4:
f6:ba:97:ef:a9:d4:40:3f:73:88:09:49:68:35:4d:
b7:5a:44:5a:ba:42:c9:1b:89:c9:d4:a4:22:5e:80:
4f:86:7b:64:1a:c0:bf:78:55:b6:d9:2a:fd:f2:41:
74:31:e9:f0:49:de:6b:2d:ed:39:58:35:53:21:a1:
39:43:76:31:f1:9a:8f:bd:e7:9e:7b:70:2c:aa:8a:
8a:88:03:60:c5:15:3c:fa:dc:89:c1:b8:33:b4:77:
29:95:8c:35:57:fd:31:05:a6:e3:b3:60:f6:e9:81:
7a:47:19:72:c0:29:5a:a4:27:f2:de:d8:6f:e3:83:
bc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0B:AB:6B:78:76:87:82:9A:CA:66:9F:B8:B8:C8:17:1F:25:C7:95
X509v3 Authority Key Identifier:
keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9c:ab:3b:5e:45:db:08:fe:c5:87:27:2a:a8:ef:d0:dc:1d:
37:1f:0b:fe:36:25:2a:ef:89:4b:bf:84:83:19:3e:a5:4b:b1:
9d:be:67:f9:64:32:f6:3e:d2:65:91:ae:02:4c:a6:cf:28:e4:
b0:e2:d5:77:9e:19:84:d8:f7:f2:74:b4:35:96:78:e1:7e:ed:
d7:b0:b0:b8:d4:d3:e8:6b:81:50:a5:02:4c:cc:1a:20:c7:bf:
d2:23:cb:2a:15:84:46:d0:ef:ac:e5:c3:49:a6:b7:ef:ba:99:
76:05:cb:94:f7:7b:ba:4b:6c:a6:5e:25:9a:a2:2e:d1:03:2a:
ef:81:70:b8:a0:06:b9:da:ed:90:d7:0f:40:09:37:3b:e7:59:
ee:10:da:6b:6a:cb:25:12:f9:f8:ef:58:13:54:bd:02:1b:d7:
56:6a:7d:14:c7:66:aa:ba:bf:6f:02:24:a5:4a:4b:ca:a6:06:
82:b6:39:fe:0e:f0:75:50:0a:65:af:e2:0b:66:70:40:03:ea:
a1:03:d7:d6:83:e0:61:2f:ba:c1:68:a2:91:e4:f7:79:91:ff:
b3:2d:2e:bf:f7:06:81:09:56:10:bd:bf:32:dd:7e:14:0c:7e:
68:e0:98:7a:9c:3f:e3:ed:a0:f5:df:92:ea:80:a7:4f:f1:e9:
c2:d7:f4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:52 2026 by rpki-client