Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
File: hGbpF0La0bn0x5ayOzfres2FgWE.mft (raw, json)
Hash identifier: ju/dqkwBEetbMLIM3QSRPLkRCUjH5I95P0W4/P8Qwrw=
Subject key identifier: 1E:05:FF:A9:D5:48:EB:1F:0B:A9:ED:B5:83:F4:66:FC:CB:D4:E9:6C
Authority key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
Certificate issuer: /CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Certificate serial: 019E1F11240C25776D88B36CB6B36960A82A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
Manifest number: 13A8
Signing time: Wed 13 May 2026 02:01:17 +0000
Manifest this update: Wed 13 May 2026 02:01:17 +0000
Manifest next update: Thu 14 May 2026 02:01:17 +0000
Files and hashes: 1: V6Mvsnc7Z774Ev5q6h6Mb-ytj-8.roa (hash: /GNFnTbzQDf+YRxBgnXt7mG8KTDdxxNld8mJ/4Y6skk=)
2: hGbpF0La0bn0x5ayOzfres2FgWE.crl (hash: sqx+mdoTeoHRQ9gmf9d5iB1+V30AcR7SOnBh9XEIu6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:24:0c:25:77:6d:88:b3:6c:b6:b3:69:60:a8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Validity
Not Before: May 13 02:01:17 2026 GMT
Not After : May 14 02:01:17 2026 GMT
Subject: CN=1e05ffa9d548eb1f0ba9edb583f466fccbd4e96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:98:a4:34:fb:1f:26:3c:a5:4a:4f:37:05:
9e:97:3e:61:b8:3a:90:9e:48:b0:72:2f:69:e4:a3:
13:be:ff:61:3d:08:ef:cf:6a:04:40:48:88:c8:15:
fc:91:3f:52:55:1a:af:d7:e9:96:7d:73:3d:16:ce:
79:77:b7:71:ab:99:ef:93:2d:62:7a:1f:de:d7:4b:
ca:94:25:4d:94:37:d8:fe:63:a1:f7:93:28:7c:e2:
60:cc:24:2e:6d:a8:16:59:9b:8b:48:87:a2:93:1a:
56:3f:8b:e1:51:9d:5a:87:96:77:5a:60:ce:7c:c5:
a0:f2:00:ec:6d:5d:04:2f:05:64:83:41:cb:9a:79:
bc:5a:49:b3:83:59:24:86:9a:66:1f:67:72:24:75:
a9:8f:64:04:48:7d:db:aa:22:7a:41:92:40:44:b7:
07:77:79:ca:12:d2:83:95:67:9f:37:7b:44:59:11:
2e:b1:a7:be:07:c4:25:5a:3e:53:93:65:e1:46:8a:
7f:64:70:ef:ce:3d:46:eb:29:cf:cb:7f:f0:58:0f:
6e:77:87:96:1b:a3:89:79:d5:cd:4e:11:0d:9d:20:
fc:ad:1f:9f:18:b5:af:34:e3:6a:bc:fa:73:28:e7:
e0:f8:40:9b:5b:01:cb:13:7b:37:f4:f0:b5:f8:32:
12:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:05:FF:A9:D5:48:EB:1F:0B:A9:ED:B5:83:F4:66:FC:CB:D4:E9:6C
X509v3 Authority Key Identifier:
keyid:84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:0f:c5:80:17:16:7f:f3:ac:a4:c8:2f:e5:f0:bc:58:ca:8d:
0d:d5:a7:eb:36:44:45:ee:cb:6f:69:90:54:89:49:36:c3:ef:
79:6d:6e:ee:89:b5:07:04:af:a3:cb:2c:37:86:69:a5:0d:a6:
6e:7f:aa:17:16:6d:ef:5a:7f:f3:de:71:90:d8:c6:cd:31:f0:
97:9d:75:a8:eb:31:1b:c4:ae:6e:48:e5:a5:ea:a9:6f:5a:13:
a6:a3:4c:2d:2e:f7:73:97:f2:ba:a0:87:19:f0:65:53:54:a0:
73:41:9e:9d:7f:71:79:e2:67:42:cd:1e:03:23:38:c1:11:95:
f1:dd:c8:cc:a7:27:f6:64:6e:25:eb:15:ea:cd:f9:25:80:e5:
ed:09:7f:ac:d3:8b:1d:13:8c:e2:50:74:20:c0:92:df:ad:e6:
6b:6c:a2:ce:21:19:e6:6f:c9:f3:8f:e5:df:ce:17:d3:4c:96:
0c:4a:30:33:34:09:de:61:26:83:1f:6e:a5:72:cc:ec:1b:eb:
c9:4c:5b:f1:ab:fa:99:e6:31:f5:3a:d8:70:fd:f4:e7:cb:ec:
17:0c:b1:fc:e0:15:c1:d8:6d:76:3d:9c:20:83:6d:2f:ee:f1:
40:f7:73:81:da:61:8e:d4:dc:0d:9e:30:bd:a7:00:72:21:77:
34:3e:b6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:29:38 2026 by rpki-client