Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
File: hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft (raw, json)
Hash identifier: M48X9QnDxz9mYn+LeAB/BEBmPxAxEEJ+brYRZ1LwqVM=
Subject key identifier: F4:0F:63:53:C5:7D:7C:5E:A4:32:47:FF:C4:EE:E3:D3:9D:9B:26:D8
Authority key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
Certificate issuer: /CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Certificate serial: 019E1DFE4C138B4F847084889B419A0515DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
Manifest number: 05E3
Signing time: Tue 12 May 2026 21:01:05 +0000
Manifest this update: Tue 12 May 2026 21:01:05 +0000
Manifest next update: Wed 13 May 2026 21:01:05 +0000
Files and hashes: 1: hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl (hash: a2QFDgEfLB9xE1pjxe0VOAQd7nsIY3BfWCtBeOxUUTo=)
2: oXRKH5b-T-CRxs2hxBp_XOCDBZY.roa (hash: CXD7uTJndYpsuBoJT2/svXnMWPhH6ma+JfEwHCQE7gU=)
3: tIddSJpZ8A8bsH1Q9vYKm2A610E.asa (hash: FxJTYjqaIVsvB66XTycCPAWGxY0433SU6Z6bkpRMAQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:4c:13:8b:4f:84:70:84:88:9b:41:9a:05:15:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Validity
Not Before: May 12 21:01:05 2026 GMT
Not After : May 13 21:01:05 2026 GMT
Subject: CN=f40f6353c57d7c5ea43247ffc4eee3d39d9b26d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:83:fa:58:04:de:a4:53:44:42:91:f2:de:10:
e4:b7:ee:f4:33:de:e8:4e:48:6a:24:c1:82:23:fc:
63:f5:23:3c:76:69:21:69:30:62:a0:c9:39:2e:ea:
a9:13:02:b8:e3:30:90:08:60:09:30:4b:58:00:d4:
9b:96:5e:b3:3c:01:d8:0b:04:b4:ed:78:44:8f:7f:
3c:82:4f:6e:aa:6d:1c:b0:46:7d:2b:36:88:f8:74:
2c:08:bf:55:cc:a5:fb:d8:59:40:8b:ac:6b:ef:9e:
3b:48:0e:49:6a:85:fa:db:f6:38:e3:8f:8f:41:d7:
31:c3:aa:35:be:42:bc:fe:dc:f4:54:c8:14:7a:d6:
69:9d:08:4f:d3:60:13:de:5c:f3:0b:28:f8:98:e1:
f2:35:c8:42:28:d2:72:91:27:02:ce:1e:47:11:df:
09:92:74:53:09:93:75:64:ba:d2:94:44:55:9e:53:
70:43:56:f4:31:53:ec:6a:e7:a8:11:05:8f:d3:d6:
a8:9b:51:e2:93:e8:fc:5b:c6:45:0c:df:98:f7:40:
e1:d2:a4:c2:4b:b6:11:a5:75:98:7e:28:f2:e3:14:
30:df:0f:a5:05:a4:5d:42:11:51:7c:bf:05:ec:fb:
bb:f2:35:a0:d1:6e:5e:bf:87:34:86:9d:d1:54:08:
57:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0F:63:53:C5:7D:7C:5E:A4:32:47:FF:C4:EE:E3:D3:9D:9B:26:D8
X509v3 Authority Key Identifier:
keyid:84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:28:ce:4e:19:70:24:f4:fe:71:78:86:23:20:42:01:1c:23:
42:b8:f3:23:8c:eb:2b:1a:d5:be:13:cc:55:94:64:d1:7d:70:
eb:a5:36:bf:e1:60:22:95:db:32:bd:94:96:4a:62:4c:d0:f2:
fb:81:97:e5:82:c3:d1:56:3f:b8:61:38:d2:d9:4c:20:0d:79:
16:cc:fc:fa:f3:b4:ec:86:2c:cb:5b:d1:74:cd:17:0c:05:87:
63:be:20:1d:95:33:a0:bf:8b:8e:de:cf:96:37:da:f1:00:cc:
ac:53:a3:8d:e3:81:b4:81:f2:1a:68:a3:97:9e:2e:9d:df:94:
e5:be:ab:a8:97:ad:e7:3d:f7:aa:ca:1b:75:35:5a:cf:f6:27:
43:ba:78:3f:f1:b6:b5:1a:0b:13:45:d4:79:6e:d5:10:57:fd:
11:ff:ac:73:7a:ce:51:09:fd:5d:77:ce:a3:81:d3:c5:19:28:
6e:57:31:bf:63:d7:58:fc:c1:d4:ed:f5:31:f0:76:29:7e:27:
05:09:37:b7:c7:21:c0:24:34:11:80:d1:81:a0:87:ca:ad:12:
f2:5e:5d:1f:82:04:3e:fd:1e:4f:d3:7d:aa:09:a8:b1:d9:a0:
1f:b3:83:6c:40:d6:7c:a7:1c:af:64:fb:e2:35:fc:18:62:f2:
0d:b9:73:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:26 2026 by rpki-client