Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
File: hUyBdtnELHBLMQkTMJRwNRu1meU.mft (raw, json)
Hash identifier: UAAOBrDClyWHfeq/0Nl5p7fwq8420Fn5txxiwGTWxwY=
Subject key identifier: DE:1F:F2:7B:F5:C6:A6:0D:D7:03:D8:85:5E:01:BD:3A:B7:DC:C8:0A
Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
Certificate issuer: /CN=854c8176d9c42c704b310913309470351bb599e5
Certificate serial: 019E1F479CA2170A679D7BC98ED740AD3107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
Manifest number: 1430
Signing time: Wed 13 May 2026 03:00:47 +0000
Manifest this update: Wed 13 May 2026 03:00:47 +0000
Manifest next update: Thu 14 May 2026 03:00:47 +0000
Files and hashes: 1: 2E1p8fabJ0AaZVQtK27is72W3zA.roa (hash: seOc2odI/aAB9kmMiUcr+Fn5jR9zKFiFx7mITmVnxdg=)
2: hSHIj4UWxpZV5CJ62FEUxANmmx4.roa (hash: DokJgpyiq/4HexdzVhkwpYdCq1bUBWCyEOpnC3xmI30=)
3: hUyBdtnELHBLMQkTMJRwNRu1meU.crl (hash: phnEM5hRDvbx7emDR0V7JF57IGmROn9i80N2XWS66Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:9c:a2:17:0a:67:9d:7b:c9:8e:d7:40:ad:31:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c8176d9c42c704b310913309470351bb599e5
Validity
Not Before: May 13 03:00:47 2026 GMT
Not After : May 14 03:00:47 2026 GMT
Subject: CN=de1ff27bf5c6a60dd703d8855e01bd3ab7dcc80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:2f:4a:cf:58:f6:bc:ad:c7:50:8f:55:e2:
c8:27:b6:5f:4b:a5:48:21:bf:82:e0:ed:fb:7f:4b:
a6:03:4d:89:6a:ba:18:d7:6e:92:72:76:a6:bd:24:
dd:99:c1:c7:10:5b:82:9b:5f:36:fa:9f:11:c9:6b:
ae:5b:c6:36:82:22:17:c5:93:9e:7b:f3:53:ed:f5:
65:e4:a9:c5:b6:c5:ae:3d:3f:e2:b7:8b:bb:fb:1b:
9d:8e:3c:f8:53:87:a6:c3:e0:86:ae:58:e9:c1:26:
cd:9c:0b:4d:2e:b2:c2:69:a7:70:d3:ca:77:b0:c2:
49:f8:91:41:b5:00:81:9b:10:6f:74:0f:8e:ed:3f:
7c:43:04:a3:5b:77:6d:35:f0:95:f3:ab:a3:92:a6:
72:c8:ff:7f:13:db:e7:25:fc:9a:8e:0b:1b:42:de:
ac:e8:ef:27:e5:df:ab:bb:62:06:73:ea:95:82:9f:
fd:7e:01:aa:08:03:51:62:bb:27:82:ed:05:24:10:
77:e4:79:57:b4:4a:f6:fa:88:f6:c1:e9:10:b2:22:
94:90:7f:b2:e8:25:36:91:8a:b7:2d:5d:a0:14:7a:
36:80:d2:95:4c:9c:be:5f:27:72:bf:c4:7d:c6:90:
88:5b:1d:01:f2:ac:60:12:65:1f:a7:7b:fe:dc:2a:
11:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1F:F2:7B:F5:C6:A6:0D:D7:03:D8:85:5E:01:BD:3A:B7:DC:C8:0A
X509v3 Authority Key Identifier:
keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a9:19:48:1c:69:f2:ea:47:c6:25:51:70:68:3b:14:a4:b1:
b1:2a:bc:e6:32:a7:4a:ab:24:c2:e5:bb:0d:5f:1b:ea:de:92:
f1:b6:56:dc:ad:e2:c5:f3:ca:5e:eb:4b:04:e7:06:08:2a:1c:
4e:1f:60:fb:37:8d:47:76:2e:47:8b:83:b6:91:ad:e7:57:63:
4e:60:59:58:7d:18:b9:c7:2b:71:c3:80:02:be:9c:fa:8b:18:
d9:f2:aa:c2:8a:c0:eb:c1:99:b4:7c:92:59:1f:a5:34:c4:50:
dc:c9:7e:e9:78:23:22:2d:27:cf:96:47:7a:ad:39:9c:c6:07:
82:d0:57:65:21:ad:ae:73:38:62:a7:1e:2a:2d:25:64:c0:e1:
f7:bd:8a:72:1e:06:40:72:6f:e3:56:0d:70:4a:1f:42:51:07:
30:06:b5:10:73:40:7f:99:b4:6e:45:57:75:63:12:17:c9:7f:
92:2b:06:e8:15:2f:39:1c:01:b8:8c:d5:8f:13:ed:83:86:22:
ab:53:df:97:20:53:e8:34:b7:40:0f:cb:8b:a7:a2:64:35:79:
48:42:0c:76:7f:ac:25:c4:8e:6d:ee:3f:5c:3d:87:0a:85:a7:
08:a7:b5:cf:12:1f:88:7a:7f:e6:e6:31:2a:98:aa:ab:3b:bc:
8d:bf:9f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:53:03 2026 by rpki-client