Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
File: hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft (raw, json)
Hash identifier: gU8qeYuUycm2kenae2jaKw2q4dIZlrpKsEd6opUyu2k=
Subject key identifier: D8:D1:06:89:FF:99:6E:E0:0F:6C:85:65:B1:AE:F4:33:BC:18:27:CB
Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
Certificate issuer: /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Certificate serial: 019E21A3B5DA8BA38FBC23196919603CE6FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
Manifest number: 190B
Signing time: Wed 13 May 2026 14:00:37 +0000
Manifest this update: Wed 13 May 2026 14:00:37 +0000
Manifest next update: Thu 14 May 2026 14:00:37 +0000
Files and hashes: 1: Bgb4R3FK8PY34Yz-lvynRT-9XWQ.roa (hash: St6uFsBRyQsJnyTTYPZwyzlv1Byj/hyZ5kqADUUKKnM=)
2: hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl (hash: 9ZIdWxdqmbj9CUJp3dPSyrEmCXfHQZGI36BDPvj27nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:a3:b5:da:8b:a3:8f:bc:23:19:69:19:60:3c:e6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Validity
Not Before: May 13 14:00:37 2026 GMT
Not After : May 14 14:00:37 2026 GMT
Subject: CN=d8d10689ff996ee00f6c8565b1aef433bc1827cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:c8:a9:d9:0c:9a:e2:a6:f9:42:6c:ef:b6:
9b:6f:09:90:45:98:63:fa:87:88:91:e1:f5:c4:cd:
a0:99:30:81:ff:d1:f8:c9:18:15:1a:94:68:36:31:
c6:d8:4d:62:6b:b9:c1:96:13:76:27:8c:3d:6e:0b:
8c:95:63:87:bf:24:60:60:9b:c5:82:3b:51:78:5f:
81:c2:8f:72:f3:83:93:a0:99:79:02:03:19:c1:b9:
65:01:6d:2a:4b:ac:a0:35:ce:78:41:38:e3:88:e7:
de:f2:ea:e4:0d:91:a5:a5:a1:5c:6e:35:35:4b:7d:
5b:e1:24:91:00:1e:78:70:d6:b7:de:bd:d3:a3:f9:
59:64:7a:b7:67:b2:07:f6:2e:a6:9e:9f:70:de:2e:
79:ef:57:78:d3:50:9c:8a:dc:d0:ee:a3:18:96:74:
81:b0:28:41:bf:f3:3c:c5:e9:3f:c7:ae:d7:f0:16:
70:e0:2b:7e:b5:72:18:e8:e2:82:64:72:ee:99:ff:
ac:3e:9c:08:2d:5e:af:57:86:46:07:e1:66:eb:ad:
2f:eb:9d:71:58:db:1e:81:27:91:c2:6c:b2:71:0d:
ac:e2:60:40:04:73:fb:f8:3d:45:54:aa:db:5b:a1:
d7:60:f1:b8:87:ae:74:ac:f1:2e:07:ec:6f:d9:48:
35:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D1:06:89:FF:99:6E:E0:0F:6C:85:65:B1:AE:F4:33:BC:18:27:CB
X509v3 Authority Key Identifier:
keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e4:9f:4f:fe:81:d6:23:0b:83:ca:34:4c:99:9f:ec:48:fa:
b7:6f:40:47:3e:12:af:1a:dc:0b:c1:c7:c1:be:14:61:8c:6a:
a3:3c:68:fc:63:9a:e9:e6:52:56:11:ba:fc:59:40:ff:ad:ad:
5a:79:95:bb:7c:8b:f9:0f:24:3d:0d:05:dd:39:2f:e7:f3:89:
8b:48:e2:62:8b:9b:aa:43:35:d8:9d:2e:61:4f:19:6d:d7:7b:
63:e4:fe:e0:e6:47:d4:36:10:9e:d2:c8:34:0b:42:df:e8:c4:
c2:d4:c5:45:bf:61:b7:cd:f6:c9:44:77:b1:38:33:37:20:e1:
6f:cb:88:5b:94:ff:96:31:de:a5:c5:11:56:84:1b:41:f6:79:
b7:bc:40:54:61:fc:b8:84:19:11:06:07:e7:54:af:49:5f:4d:
c8:c9:0f:99:58:e4:7c:fe:58:a0:ed:aa:d4:f1:6c:e5:7b:22:
b5:2d:1e:f5:47:56:df:35:7b:1a:6d:b3:71:b0:77:66:28:8e:
23:e8:fd:bb:d9:80:10:9b:52:0a:ae:f1:91:42:cd:ec:a8:7a:
7e:77:b3:ca:9b:fa:e8:41:90:bf:ef:03:3a:90:ec:9a:be:2e:
62:55:e2:9f:ff:04:b3:e8:df:d1:d3:d9:09:20:92:a0:18:8d:
e5:09:92:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:33:59 2026 by rpki-client