Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
File: hYPpE4a3wAKken-k97f9Nf-eTgo.mft (raw, json)
Hash identifier: MCVhcU2zi6cI4S0PMOTwP3WN+3504BHxCZHfSF9HG5U=
Subject key identifier: 25:17:42:EC:87:73:E7:2F:32:56:2C:51:CA:53:2C:9F:D2:78:6D:B1
Authority key identifier: 85:83:E9:13:86:B7:C0:02:A4:7A:7F:A4:F7:B7:FD:35:FF:9E:4E:0A
Certificate issuer: /CN=8583e91386b7c002a47a7fa4f7b7fd35ff9e4e0a
Certificate serial: 019E1DC73CB4C89D464347FE2B082F01CA6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
Manifest number: C5
Signing time: Tue 12 May 2026 20:00:56 +0000
Manifest this update: Tue 12 May 2026 20:00:56 +0000
Manifest next update: Wed 13 May 2026 20:00:56 +0000
Files and hashes: 1: hYPpE4a3wAKken-k97f9Nf-eTgo.crl (hash: wi2W1LcUShlBoC0xzautctserVdjNZ8WfaGFjTNYNWw=)
2: rdpASP2znJQvquGxJOvyDRpnmhU.roa (hash: 2K9g0ofmwtg+0wCGPKVHPvtZQPkH/atZkucjpNuBbHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:3c:b4:c8:9d:46:43:47:fe:2b:08:2f:01:ca:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8583e91386b7c002a47a7fa4f7b7fd35ff9e4e0a
Validity
Not Before: May 12 20:00:56 2026 GMT
Not After : May 13 20:00:56 2026 GMT
Subject: CN=251742ec8773e72f32562c51ca532c9fd2786db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3e:c1:1f:ec:6d:34:c3:e9:aa:07:95:e1:ba:
04:15:c5:f5:f6:93:82:c1:7c:0e:c3:02:40:2e:c1:
f7:6a:bf:34:b2:df:3a:6e:6e:af:69:8a:5b:7f:d4:
98:0c:46:10:5b:49:4f:1c:10:a4:d4:1f:06:8f:d0:
fe:22:9f:dc:19:2d:58:21:f6:06:98:f1:b0:ae:22:
c3:6b:a6:b8:c4:82:e7:c0:39:30:a6:9c:a7:71:80:
43:3d:9c:82:5f:c3:42:ab:40:b7:76:b0:ff:ef:c8:
e9:8e:e1:0b:31:15:fb:8e:ca:dc:48:fa:93:96:ab:
85:55:87:27:0a:e5:81:2e:76:8b:9c:18:d0:01:b9:
6a:ba:9b:d4:e1:78:5c:5a:ce:d6:16:e6:b5:f0:9f:
a9:1d:6a:f3:45:41:a0:f5:c2:ea:7c:a3:04:dc:86:
92:a2:1f:a6:cc:75:2e:1b:6d:14:e0:4f:36:29:32:
51:10:e7:9d:cd:61:20:5e:1b:b3:38:19:dd:d2:86:
aa:63:ec:37:83:a9:4b:e6:b6:96:9c:ef:ae:44:73:
1d:ba:cc:7e:75:98:52:cc:7b:cd:78:12:33:3e:13:
7e:c7:bd:c0:3b:ee:ef:61:e6:3d:93:06:6f:0f:63:
67:e2:5a:e2:35:49:a1:01:6a:93:82:84:a5:af:5a:
c4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:17:42:EC:87:73:E7:2F:32:56:2C:51:CA:53:2C:9F:D2:78:6D:B1
X509v3 Authority Key Identifier:
keyid:85:83:E9:13:86:B7:C0:02:A4:7A:7F:A4:F7:B7:FD:35:FF:9E:4E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:37:8e:94:c9:76:04:77:f3:80:98:37:19:2b:9d:7e:36:73:
1b:9e:bb:3a:24:0e:be:8b:74:39:21:ed:e1:0c:e2:be:24:e1:
b1:05:d4:b4:14:c3:69:e1:9c:bf:01:4f:b9:ff:05:d5:0b:f4:
a8:17:c1:91:0d:1a:81:03:bf:32:c3:d8:fe:b6:ae:ea:2e:6c:
97:ef:6b:b2:af:e9:b4:f3:69:37:b0:e4:34:07:6d:8d:33:2e:
58:f7:a7:b9:53:10:d8:74:4c:93:20:d3:fb:ce:f4:31:a2:c1:
6d:d9:45:9f:7f:c3:4c:7e:e0:10:a2:7f:8f:64:c9:65:67:63:
cb:92:b7:5e:da:39:bd:c1:12:a6:06:21:82:ec:3e:8a:34:96:
b4:9b:77:f0:55:fc:69:e2:5b:d3:b5:1e:fc:1e:33:a2:20:dd:
06:40:20:8c:49:29:6a:a0:5e:02:11:9c:7e:b0:d2:0a:f5:cb:
2a:33:dd:ca:a3:6e:bc:1b:84:ed:a3:40:29:92:59:50:54:da:
7e:cd:ee:86:de:c6:da:39:7c:f3:2f:8a:3f:da:83:9a:60:76:
15:57:0a:a7:b2:ca:a8:9c:72:8f:17:33:ed:7b:29:e1:16:99:
4f:77:32:4c:3c:b9:e4:3d:55:0c:8b:ab:dc:60:74:3b:dd:52:
a0:4f:0b:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dxzy0yJ1GQ0f+KwgvAcptMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ODNlOTEzODZiN2MwMDJhNDdhN2ZhNGY3YjdmZDM1ZmY5
ZTRlMGEwHhcNMjYwNTEyMjAwMDU2WhcNMjYwNTEzMjAwMDU2WjAzMTEwLwYDVQQD
EygyNTE3NDJlYzg3NzNlNzJmMzI1NjJjNTFjYTUzMmM5ZmQyNzg2ZGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz7BH+xtNMPpqgeV4boEFcX19pOC
wXwOwwJALsH3ar80st86bm6vaYpbf9SYDEYQW0lPHBCk1B8Gj9D+Ip/cGS1YIfYG
mPGwriLDa6a4xILnwDkwppyncYBDPZyCX8NCq0C3drD/78jpjuELMRX7jsrcSPqT
lquFVYcnCuWBLnaLnBjQAblqupvU4XhcWs7WFua18J+pHWrzRUGg9cLqfKME3IaS
oh+mzHUuG20U4E82KTJREOedzWEgXhuzOBnd0oaqY+w3g6lL5raWnO+uRHMdusx+
dZhSzHvNeBIzPhN+x73AO+7vYeY9kwZvD2Nn4lriNUmhAWqTgoSlr1rELwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUXQuyHc+cvMlYsUcpTLJ/SeG2xMB8GA1UdIwQY
MBaAFIWD6ROGt8ACpHp/pPe3/TX/nk4KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFlQcEU0YTN3QUtrZW4tazk3ZjlOZi1lVGdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hNmRlODctNTUxNy00NjgxLWEyMzYt
MzY4YmMxYmY4M2VhLzEvaFlQcEU0YTN3QUtrZW4tazk3ZjlOZi1lVGdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hNmRlODctNTUxNy00NjgxLWEyMzYtMzY4YmMxYmY4M2Vh
LzEvaFlQcEU0YTN3QUtrZW4tazk3ZjlOZi1lVGdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTeOlMl2
BHfzgJg3GSudfjZzG567OiQOvot0OSHt4QziviThsQXUtBTDaeGcvwFPuf8F1Qv0
qBfBkQ0agQO/MsPY/rau6i5sl+9rsq/ptPNpN7DkNAdtjTMuWPenuVMQ2HRMkyDT
+870MaLBbdlFn3/DTH7gEKJ/j2TJZWdjy5K3Xto5vcESpgYhguw+ijSWtJt38FX8
aeJb07Ue/B4zoiDdBkAgjEkpaqBeAhGcfrDSCvXLKjPdyqNuvBuE7aNAKZJZUFTa
fs3uht7G2jl88y+KP9qDmmB2FVcKp7LKqJxyjxcz7Xsp4RaZT3cyTDy55D1VDIur
3GB0O91SoE8LYg==
-----END CERTIFICATE-----
Generated at Wed May 13 07:19:59 2026 by rpki-client