
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
File: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft (raw, json)
Hash identifier: EIu59tfqbHV2TOCThBZ/14j+TvVmeY3Gc6evLoQoOjc=
Subject key identifier: 6F:8D:74:11:94:8E:A9:99:73:E8:E0:27:8D:F6:E5:E5:BF:CC:5D:6E
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial: 019E1E6C47F4BA854DC35CDED0CB21877AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 23:01:13 +0000
Manifest this update: Tue 12 May 2026 23:01:13 +0000
Manifest next update: Wed 13 May 2026 23:01:13 +0000
Files and hashes: 1: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl (hash: AIZOWNGCBCh32hzI5Z8G9QEHkgvskAVh2QIbhlxbCGs=)
2: lFgdap73IKN-x6XHvGiMEA7qWxg.roa (hash: Cy3+NfE+G8o591s23SgJa1A+OW1ox1rr66Hm02Ee6OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:47:f4:ba:85:4d:c3:5c:de:d0:cb:21:87:7a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Validity
Not Before: May 12 23:01:13 2026 GMT
Not After : May 13 23:01:13 2026 GMT
Subject: CN=6f8d7411948ea99973e8e0278df6e5e5bfcc5d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e0:f9:2f:39:7f:c7:c4:cb:7c:53:95:f3:da:
38:df:25:38:61:a7:6f:45:aa:40:83:01:3f:c9:a6:
48:11:8d:34:20:c7:da:8b:39:b4:1d:2a:1c:3e:5d:
b4:8d:5f:6b:04:d5:a6:41:5a:ea:9f:6f:e3:5c:ea:
b0:88:7d:bd:8d:45:04:1d:b5:1e:f8:c0:47:9e:10:
9c:28:a5:f5:78:bb:ed:4b:e8:bd:05:9c:90:65:74:
25:07:5e:71:c5:79:a3:5d:78:a4:ca:db:0c:31:b8:
0a:4a:9b:15:a7:c5:66:b4:7a:b9:44:56:0a:24:88:
48:50:d1:7c:b3:6b:e2:20:25:9d:f7:a3:11:12:b3:
16:c6:2a:7b:fe:db:2a:60:27:68:b7:85:54:0a:e6:
1b:6a:d8:ef:dc:a5:f5:8b:b7:ba:9a:78:db:ce:2f:
a7:e8:9f:94:18:20:54:f9:47:22:6b:12:72:5c:7a:
86:44:69:13:0d:81:8a:09:91:70:2f:00:59:00:42:
00:fb:0d:b2:bc:c5:9b:4a:4f:dc:06:70:a3:02:ee:
33:b4:d6:5e:b0:7d:b3:07:49:3f:c3:2e:54:0f:57:
12:38:62:75:b2:b9:fb:fb:52:f6:be:02:78:5c:87:
83:37:9c:7e:e8:7a:2e:a6:26:90:49:63:ad:e6:dd:
c0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8D:74:11:94:8E:A9:99:73:E8:E0:27:8D:F6:E5:E5:BF:CC:5D:6E
X509v3 Authority Key Identifier:
keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f7:11:da:8d:d3:55:b8:01:f9:84:bb:9c:40:1d:4f:4b:9f:
72:96:95:33:44:dc:3c:5f:64:54:5f:1d:ae:61:a0:18:7e:05:
3c:c6:ac:89:fd:d0:4c:e8:5c:92:e0:04:b1:da:2a:0f:68:a7:
09:29:40:87:8b:20:86:fc:44:35:bc:fc:e5:08:15:84:2f:e9:
c2:b7:3f:0c:11:de:5c:ca:a7:fb:75:0e:bf:f1:97:09:6a:a7:
fa:fd:70:67:c8:20:35:56:d0:f3:41:9d:bf:22:cc:e8:e8:20:
16:d7:a4:f9:19:6d:a0:04:d7:c1:a6:96:df:23:a9:1e:f4:6b:
2a:30:98:99:97:07:8b:73:84:8e:57:dd:fc:4a:91:db:91:7e:
d2:bc:70:e9:ab:58:13:9c:17:03:4a:f2:10:27:ed:cb:c3:c1:
d2:6b:8d:aa:ed:ab:f4:2a:17:ad:93:77:84:62:40:15:30:6a:
bd:73:fa:39:6f:b8:90:a6:17:90:4b:a5:e8:3d:32:44:e6:1d:
77:45:8d:c8:88:f8:89:39:7b:d8:14:5c:01:ea:85:d7:61:ae:
eb:88:de:81:53:1b:79:7f:7c:6e:52:a3:ae:e1:cb:0b:b2:9a:
cc:3a:5e:4a:83:9d:57:44:8a:42:4d:69:47:ee:d8:ab:a3:73:
f8:8a:8e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:05:18 2026 by rpki-client