Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json)
Hash identifier: Z4t0gST8cwSlCJp7awJMsqeZn98u7V2lSfSF8e7ucL0=
Subject key identifier: A4:B2:E8:D3:72:B8:8F:ED:E5:75:57:95:73:D1:B0:9D:A4:A1:39:AC
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial: 019E1D598538211DE306A7062D6C6D3650E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
Manifest number: 060D
Signing time: Tue 12 May 2026 18:01:06 +0000
Manifest this update: Tue 12 May 2026 18:01:06 +0000
Manifest next update: Wed 13 May 2026 18:01:06 +0000
Files and hashes: 1: EXFjqp1pXGSV5jmx4tb-VicHFJo.roa (hash: SAiHY7qAn6jJFUL6Y4lo8wfyaergjigidCjHrKuL8KM=)
2: TcfDrpaktt6ck5dfzSZX1rUU-3o.roa (hash: IMmbj46lmVM3D8aBLL2Qo1JPLTBEevvdt670OHWqbPA=)
3: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: dCG/exy9Zlv7sgqsNDpRsnCuom5r1WLdoeEBPhYLd3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:85:38:21:1d:e3:06:a7:06:2d:6c:6d:36:50:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
Validity
Not Before: May 12 18:01:06 2026 GMT
Not After : May 13 18:01:06 2026 GMT
Subject: CN=a4b2e8d372b88fede575579573d1b09da4a139ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ac:43:85:16:ec:44:22:8e:41:be:9f:da:4e:
b5:a2:30:a7:ba:9a:28:c0:39:6f:66:88:9e:1c:53:
8b:6e:e7:8d:fc:1e:3b:39:d9:43:cf:ff:87:96:f5:
de:2f:d4:ab:d3:f4:71:95:7e:14:11:4c:81:ab:6e:
c1:ae:4b:68:2f:6d:e4:b9:57:e0:f8:a4:78:93:02:
7d:c0:d2:c8:02:ca:1e:6a:49:d0:8f:f4:6b:0a:f4:
5a:ba:67:cb:60:85:8f:10:ce:8d:84:5e:4b:8f:3f:
f0:7a:c2:15:49:9b:ed:f7:98:e6:d4:34:2c:9d:4e:
9b:cc:c5:2c:81:8f:9f:3b:2c:5d:8e:78:60:8b:7f:
c1:5e:fa:bf:87:02:83:35:0c:82:d7:ff:8f:d8:cc:
ef:cb:a1:31:a0:b5:de:8f:f9:94:11:e8:28:7b:d0:
de:df:97:d8:30:ad:52:63:34:ed:b5:37:fc:e5:ce:
3d:49:5e:21:c6:b9:89:ec:22:1a:28:98:9a:66:6e:
6c:ca:aa:7d:f2:99:f2:e1:ea:2e:3b:52:e2:ba:bc:
04:ff:7f:90:70:66:ec:31:ba:02:4e:a1:3f:01:e7:
96:3e:ba:14:82:a9:74:76:58:98:53:d1:4c:26:09:
83:6d:1e:fe:41:63:ea:5e:67:d5:d3:e6:fc:d9:4c:
e2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B2:E8:D3:72:B8:8F:ED:E5:75:57:95:73:D1:B0:9D:A4:A1:39:AC
X509v3 Authority Key Identifier:
keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:00:22:96:04:d8:92:13:eb:26:3d:7d:ce:d6:92:f6:7d:c6:
49:9a:3d:f7:12:dd:0f:7a:c3:e4:bc:77:78:8d:4c:2b:24:78:
85:b0:c3:50:f3:7f:13:f7:f3:15:d0:d9:a4:dd:68:0b:9e:42:
80:d1:79:75:dd:5c:60:a2:79:df:ea:79:68:1a:5a:09:b0:1d:
40:cb:fc:52:38:29:95:02:04:91:f9:5e:87:54:ba:ad:3e:99:
3d:8c:ed:b8:79:53:9d:2a:3c:49:17:55:bd:b1:c9:a6:4e:0c:
40:d4:80:1a:b9:db:ac:9d:51:e1:39:a6:96:e3:2f:39:12:22:
6c:fa:a8:90:57:ca:82:0e:24:13:07:65:0d:3a:93:e8:84:82:
f0:4e:9f:e7:9b:f4:fc:2e:99:04:8f:ca:32:66:52:bd:04:a3:
27:8e:fe:99:8e:99:5d:53:49:64:03:7f:bf:24:69:f3:e6:af:
30:c6:58:42:f8:ad:ea:44:71:a4:09:56:ec:83:d3:dc:1c:ba:
7c:b2:ae:34:1e:ca:7c:52:7b:31:49:57:b5:45:57:d4:4c:63:
8e:bb:bf:0e:2e:88:36:66:24:40:27:da:9f:7e:30:77:78:3f:
9e:a4:7c:32:02:0c:af:9a:c4:b4:84:4a:92:85:32:61:8e:77:
67:a8:44:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:15:05 2026 by rpki-client