Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
File: _H1Kt3YauiTzPVtt-8J8q3OLte4.mft (raw, json)
Hash identifier: 0OJwppznwSuYfRYZyeqiiQUP+Za9QOe6KoiEPtMHZLk=
Subject key identifier: 1A:17:4D:B6:8D:EC:EE:D7:FD:40:AA:DF:62:D0:15:38:46:49:60:34
Authority key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
Certificate issuer: /CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Certificate serial: 019E1E6C78A8E33959A5F30EAEC163B0275A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
Manifest number: 15A5
Signing time: Tue 12 May 2026 23:01:25 +0000
Manifest this update: Tue 12 May 2026 23:01:25 +0000
Manifest next update: Wed 13 May 2026 23:01:25 +0000
Files and hashes: 1: _H1Kt3YauiTzPVtt-8J8q3OLte4.crl (hash: 3UQIGXPl/MR54SW4F5zKlkXlKeRm2abZ2tcTUGZqFzU=)
2: pIzu0UPpsP8clP4GJvMQ5mOsgdU.roa (hash: cY4H2iigWEWrWAaGXnc1Tjbm637H9ISvb9VWaDHjJoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:78:a8:e3:39:59:a5:f3:0e:ae:c1:63:b0:27:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Validity
Not Before: May 12 23:01:25 2026 GMT
Not After : May 13 23:01:25 2026 GMT
Subject: CN=1a174db68deceed7fd40aadf62d0153846496034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:e4:89:0b:e1:8d:06:82:31:64:53:f3:ce:
7f:6f:c4:6e:5f:3e:be:ed:94:ee:ea:37:d2:df:b4:
98:ca:64:22:ff:d5:44:4b:15:58:b6:f3:1e:3d:08:
64:5e:96:9a:6f:73:88:8b:58:98:7a:46:7c:29:8d:
38:26:c2:30:5c:14:49:ba:ce:93:61:66:fb:f3:12:
f2:b1:09:f8:bc:9d:72:7f:52:3a:19:fd:c1:81:f8:
b4:4c:e2:56:7c:17:5e:55:3f:5c:e8:ae:40:7d:f4:
07:c5:cf:41:9e:4a:7d:94:47:88:56:0d:80:46:a6:
98:13:7a:45:b9:1f:d4:1d:ec:40:70:b6:e7:f1:d4:
19:c1:62:6b:fc:cb:55:d7:d8:07:cc:a3:e0:df:bc:
e0:33:8f:6c:b2:c2:a0:b4:26:46:2d:f5:7b:bd:ff:
ad:ac:7e:5f:15:a9:de:ab:b0:22:2c:4a:de:c7:d5:
22:87:6d:bd:25:e2:6c:6e:23:7f:80:c0:8e:cb:b0:
ec:16:7c:fa:ed:04:ee:6c:16:cd:ed:54:c3:62:c5:
ba:41:de:04:ac:b4:48:4f:bf:44:7f:07:ab:29:3d:
66:c0:84:69:d0:a4:e2:6b:8d:2d:09:70:49:11:bf:
f9:e3:ba:7f:f8:8e:1e:35:d4:10:ff:c5:da:58:03:
86:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:17:4D:B6:8D:EC:EE:D7:FD:40:AA:DF:62:D0:15:38:46:49:60:34
X509v3 Authority Key Identifier:
keyid:FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1d:4d:c7:c7:89:b1:41:4b:6d:b0:66:fc:06:3e:86:55:b8:
72:0b:75:d7:75:33:11:a2:f9:37:6c:e9:d4:47:65:5b:0f:d3:
58:fb:a3:04:45:4e:5f:07:5b:98:8c:d7:a3:28:30:2d:a5:f5:
6b:78:fa:b6:90:83:03:b5:36:32:23:d3:12:43:ae:54:e1:c7:
d7:7c:a6:db:6f:c5:5d:25:67:99:6b:5d:69:f6:67:be:89:a5:
99:19:8f:3a:25:03:08:91:c4:c8:4c:da:dd:99:c0:47:17:70:
f5:f8:e8:6b:3b:bc:f1:28:92:0c:53:17:74:e5:bb:dc:e7:e5:
bf:94:be:b5:41:f3:53:da:cc:53:3d:f9:dd:a4:b3:82:98:0b:
93:63:89:e5:ad:59:65:7a:60:bc:ff:a5:d3:d1:76:eb:32:ef:
fc:99:90:fe:70:c5:5e:2f:91:17:74:90:2c:ba:d2:4d:de:1a:
03:56:de:29:0a:e2:38:33:60:83:a2:a2:4c:6a:01:1a:16:75:
79:0f:dc:ad:46:96:7d:47:ab:de:dd:ef:bf:3f:5b:7f:7e:39:
a2:54:80:ff:53:23:51:f1:41:d6:72:f2:ee:06:5c:8d:d3:c0:
7c:13:3b:12:ef:94:66:99:24:bb:ef:74:c6:90:0c:75:76:c3:
12:33:73:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:53:03 2026 by rpki-client