Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
File: h3rydLcxE0zLwmco-TfaAwWN1zs.mft (raw, json)
Hash identifier: tklkuybOUchXJTNbExK8whxc6c0jp7Z+MKOYrYpJjCk=
Subject key identifier: CA:FB:31:39:C1:4A:D1:8C:76:44:22:82:9E:E8:5F:A3:27:06:76:FF
Authority key identifier: 87:7A:F2:74:B7:31:13:4C:CB:C2:67:28:F9:37:DA:03:05:8D:D7:3B
Certificate issuer: /CN=877af274b731134ccbc26728f937da03058dd73b
Certificate serial: 019E20FF8265DF15A1037BD4066FAE9B4029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
Manifest number: 4D
Signing time: Wed 13 May 2026 11:01:16 +0000
Manifest this update: Wed 13 May 2026 11:01:16 +0000
Manifest next update: Thu 14 May 2026 11:01:16 +0000
Files and hashes: 1: AhAcdKgAbaxev6WZheq94rPVhy4.roa (hash: jnz0tuvjSI9nchLY2GePdtWDuCFuuGK4nahWThqEMJU=)
2: IR529NvnrXP81UBDnz8QdBrSyJ8.roa (hash: IkGeFcq/7XMWRAAEt9CdXpwX/GjXpCyZ2A9WTlqr/w4=)
3: h3rydLcxE0zLwmco-TfaAwWN1zs.crl (hash: 5xBVntT5yE2dR5gh4xSGsn1GXJQ6kPWgHBeRuQRZhzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:82:65:df:15:a1:03:7b:d4:06:6f:ae:9b:40:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877af274b731134ccbc26728f937da03058dd73b
Validity
Not Before: May 13 11:01:16 2026 GMT
Not After : May 14 11:01:16 2026 GMT
Subject: CN=cafb3139c14ad18c764422829ee85fa3270676ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:92:e7:23:2c:b1:4e:24:9c:43:97:16:18:83:
3e:39:f5:6c:cb:1f:5f:3c:42:33:7e:88:9a:89:b4:
ff:f2:13:7c:37:4e:1d:46:42:aa:94:b8:2d:48:0b:
f7:d2:ca:1c:ce:d9:d1:21:c6:28:6f:b8:05:d4:de:
ee:2d:b1:fa:05:4d:d6:fa:3e:e1:49:3b:fe:f2:e9:
06:d4:69:a1:27:70:70:92:8e:23:cb:56:91:57:6a:
1a:c1:94:0d:e3:72:b7:9e:a5:db:35:d9:e9:1f:a2:
a6:21:f2:bb:78:bd:89:2d:61:1f:dc:7b:52:55:31:
99:fb:bc:68:77:77:03:ad:34:a3:a1:22:3f:90:8d:
26:6b:47:c7:ba:6a:48:17:b6:97:45:fb:51:8d:2c:
d4:3e:20:de:ce:7d:d9:12:3c:71:77:ac:ae:b1:ab:
64:98:1b:49:6c:93:61:6f:6f:37:56:5b:0d:71:0b:
ba:be:e3:08:3b:fd:12:72:3a:fa:05:38:d5:a4:3f:
a0:a4:25:dc:8b:e0:81:6c:ff:f8:05:59:3b:78:a5:
a2:de:63:ce:5b:aa:92:20:c8:e8:e4:5c:f2:68:0c:
0d:61:47:cd:36:70:ab:05:66:80:54:23:c8:b4:fb:
96:8b:69:61:87:a0:34:00:db:5d:19:73:44:72:cd:
54:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FB:31:39:C1:4A:D1:8C:76:44:22:82:9E:E8:5F:A3:27:06:76:FF
X509v3 Authority Key Identifier:
keyid:87:7A:F2:74:B7:31:13:4C:CB:C2:67:28:F9:37:DA:03:05:8D:D7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1c:b1:f8:c2:fe:28:f5:53:30:a9:97:ae:89:06:07:1b:72:
64:b1:e3:ba:b1:b6:02:74:c5:07:d8:c8:76:dc:d6:a0:cd:a3:
74:3a:01:33:31:a7:aa:15:8f:49:ba:b0:7f:91:76:bb:c0:92:
ef:aa:40:d6:4a:71:8d:56:6a:13:d6:ac:7e:15:1a:39:e9:71:
53:43:8e:71:2c:d3:50:35:3f:91:5b:d1:df:0e:9b:01:1b:ba:
3b:eb:45:90:e6:6c:27:c0:57:b7:53:f4:e0:2a:1f:d1:31:81:
e7:09:de:ec:3a:45:33:eb:2a:3d:58:c2:5f:fc:93:bd:95:4f:
52:46:96:8e:1b:fa:d0:b8:d0:8c:f3:cb:22:b7:74:0c:57:2b:
68:ab:2b:26:c8:3e:57:9e:8c:32:ce:71:a0:db:da:98:bf:33:
29:1a:b4:79:48:1d:46:1d:18:ee:e7:c7:0d:4f:55:5f:83:65:
38:56:f8:3c:65:80:e8:cd:26:12:6d:5f:43:39:79:ca:b8:e0:
71:d5:1e:b1:bc:f9:9e:49:fe:77:8d:ba:e0:f2:32:61:a9:64:
42:04:ef:b0:dc:79:c0:9d:0c:b0:25:5b:9b:48:23:88:5c:3b:
fa:34:94:1c:3d:e1:67:f2:c0:5d:39:83:f9:42:a0:6b:d5:4c:
d4:a6:37:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:23 2026 by rpki-client