Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
File: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft (raw, json)
Hash identifier: oiJZy/WXS+ppBGyn3QQjdjL0OFFMJNQM0nDLxrhwzlA=
Subject key identifier: 95:61:75:EC:F4:62:CB:DB:93:AC:22:07:C5:F5:EC:D9:E3:67:5F:69
Authority key identifier: 84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
Certificate issuer: /CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Certificate serial: 019E1C7DE9CCF43D20791722EACD65D548C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
Manifest number: 190D
Signing time: Tue 12 May 2026 14:01:14 +0000
Manifest this update: Tue 12 May 2026 14:01:14 +0000
Manifest next update: Wed 13 May 2026 14:01:14 +0000
Files and hashes: 1: 867F4OQuQLWhRY4aKxKeoxD01B4.asa (hash: +fRCR0HY7fbE+pyBbt7W5yHcfIjIo6aJjDfzPZQv280=)
2: au_k5KTkHwmYgyGwQL9kaGDMGdc.roa (hash: TQ4e7aFpXjYOcX/z8GmwxlZOtaffODMat2Hj3Al3L2Y=)
3: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl (hash: s9sRrm/TbptrEBA2qyZkKYwYBbHPBOaTySR2P4hm2P4=)
4: iqLo87tMFOB-XBrWIzdU46MRBuE.roa (hash: IzYBLEWXA56LUWCfb8F/l/nPeES5nSXV/ENxm4IRlhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:e9:cc:f4:3d:20:79:17:22:ea:cd:65:d5:48:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Validity
Not Before: May 12 14:01:14 2026 GMT
Not After : May 13 14:01:14 2026 GMT
Subject: CN=956175ecf462cbdb93ac2207c5f5ecd9e3675f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:37:bf:d5:c8:91:5f:bc:35:b4:9f:cc:df:d1:
ea:34:08:8c:b2:dc:1f:fd:c1:8a:bb:50:12:b9:6f:
af:ff:b7:c0:92:c2:c0:28:61:b5:ba:96:a3:d4:3e:
c1:50:19:3d:7a:56:46:79:4e:5a:a7:5c:fa:12:a5:
83:17:e2:ed:d5:87:98:31:02:c4:77:47:6f:88:b5:
d4:6f:84:2a:fc:13:eb:d8:3c:fc:01:0d:fe:21:39:
7d:ee:3d:35:33:e8:7c:f8:c7:7a:dd:21:ed:ba:56:
1e:fb:3f:c1:6c:2b:7d:b3:17:7c:d0:c8:04:b9:b7:
3f:d0:06:05:0f:73:89:89:d9:bd:6d:a6:38:95:63:
f9:81:b0:c3:86:52:b3:c5:7b:fb:a1:dd:2b:ed:c6:
a6:0c:78:14:6b:46:0d:58:f9:b5:ec:e5:90:cf:79:
97:b0:08:49:d4:54:6b:3d:97:c8:0c:3b:b5:af:0e:
4d:d5:59:7e:f1:57:80:ce:29:2c:28:15:24:88:77:
ab:44:3f:41:03:68:15:13:6d:3c:1c:ff:96:db:3a:
7d:42:91:4a:11:8f:98:a7:0e:26:83:6d:1a:39:8b:
55:7b:84:68:59:14:81:49:90:aa:a6:e9:8f:48:ac:
0a:af:4b:c9:5a:6d:fe:d7:1f:cc:16:58:0c:1c:c9:
2c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:61:75:EC:F4:62:CB:DB:93:AC:22:07:C5:F5:EC:D9:E3:67:5F:69
X509v3 Authority Key Identifier:
keyid:84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0d:59:a7:97:6c:a8:21:b9:00:19:d3:c8:33:38:05:94:d7:
0f:2c:89:f5:e1:0d:57:2b:70:f7:b1:92:10:e5:07:92:4a:3d:
55:f1:71:be:43:96:26:6d:5f:87:1e:91:db:4a:03:e0:83:b8:
7c:74:23:b9:19:22:3e:30:71:61:c0:d1:61:c2:37:18:82:77:
45:a9:3c:b4:c3:e1:78:2c:d7:6a:83:a9:66:80:bd:f6:a8:f2:
dc:50:44:ee:d6:cb:5e:5e:d8:f9:01:3a:d6:58:35:9a:53:d6:
9c:cb:02:6b:d7:2e:b4:ae:39:b4:00:e6:40:60:22:74:62:ff:
10:d0:a1:08:5b:28:e2:46:6b:f0:1d:2a:90:9a:f3:19:51:df:
e2:25:37:8e:c7:77:eb:60:73:29:71:8e:3b:54:b4:85:46:e4:
ca:fd:3c:e0:78:40:18:25:a9:bd:2e:9f:54:34:fb:53:c2:35:
80:1d:3f:21:da:b7:39:61:81:70:49:63:e2:f2:49:88:73:e2:
95:1a:d9:0b:11:b8:e5:8f:b4:b8:f0:64:87:b2:f2:e7:f7:53:
77:ef:45:86:c2:d7:85:75:49:2a:b1:dc:8b:5b:28:86:c6:67:
74:56:c9:dc:ba:93:1d:9c:6b:b9:16:a7:a4:4c:46:86:97:51:
29:e7:54:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:18:06 2026 by rpki-client