Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
File: h5kgiOdlXLE0AgypWw5X1Oba9A8.mft (raw, json)
Hash identifier: C3RyCdPXknrTCJa+twGNoSpRgQFtn2smwETdmphuixw=
Subject key identifier: B6:9A:F3:06:4D:70:E5:83:69:6D:83:4A:44:DE:B1:C5:CF:A0:F3:C4
Authority key identifier: 87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F
Certificate issuer: /CN=87992088e7655cb134020ca95b0e57d4e6daf40f
Certificate serial: 019E20FFC81726BFFA2D44BF98A0557AC8CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 11:01:34 +0000
Manifest this update: Wed 13 May 2026 11:01:34 +0000
Manifest next update: Thu 14 May 2026 11:01:34 +0000
Files and hashes: 1: h5kgiOdlXLE0AgypWw5X1Oba9A8.crl (hash: ZfiRAc8b27fu7J9sG+dOHr1fQRg7QPqHXNUA9w77uhw=)
2: uOT6tJlrkH7uNore0SwrHv6B2q8.roa (hash: sj7kmuH/7FdqL+TtQaRY1OsxURdzt9SlOSUYNlEq6iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:c8:17:26:bf:fa:2d:44:bf:98:a0:55:7a:c8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87992088e7655cb134020ca95b0e57d4e6daf40f
Validity
Not Before: May 13 11:01:34 2026 GMT
Not After : May 14 11:01:34 2026 GMT
Subject: CN=b69af3064d70e583696d834a44deb1c5cfa0f3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b3:35:3f:63:33:8e:eb:93:33:04:50:47:99:
b2:6b:dd:c2:de:11:a9:74:82:dc:4e:40:58:57:b2:
1f:07:ae:8f:5f:33:7d:91:8f:22:b0:bf:4c:88:78:
e0:d4:5f:79:71:71:7b:6b:36:7f:ef:de:38:49:a5:
e7:91:1a:f5:fe:0e:06:5b:7c:f1:5c:6b:b5:f5:24:
10:95:28:20:56:a2:f7:e3:80:fb:67:15:8a:6c:d3:
77:6e:4a:9c:a9:34:f8:d0:1a:78:da:cc:65:56:6b:
0e:06:cd:e4:bd:0e:1a:39:ad:5d:32:6a:8c:65:62:
70:66:68:04:7d:55:a6:6f:d8:fc:a3:8b:99:4a:75:
e9:00:ba:1a:9f:3f:48:10:97:3a:1b:a4:ea:72:21:
1b:45:42:5b:b8:ef:c7:b2:d5:72:e2:bc:1d:56:8f:
37:5e:23:32:8b:d4:72:74:4a:53:0e:1e:c3:c7:4d:
04:ad:b0:c2:78:3d:76:ab:9e:66:0c:b9:54:15:5d:
6b:02:f5:a6:ff:b0:fe:e6:ff:13:ed:e4:81:79:78:
66:34:d4:2e:1f:9a:59:74:aa:9c:8a:41:3e:16:2c:
b0:d1:c6:15:06:e9:01:d2:ab:b0:36:2e:8a:f4:d8:
46:ad:7e:51:1c:58:57:4d:da:fa:50:fb:59:83:73:
f0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9A:F3:06:4D:70:E5:83:69:6D:83:4A:44:DE:B1:C5:CF:A0:F3:C4
X509v3 Authority Key Identifier:
keyid:87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a2:74:6e:e4:89:80:a1:0d:14:06:45:33:3c:11:3f:00:57:
42:70:78:a8:6c:a7:98:c3:26:c5:6c:45:b0:58:69:a7:95:f8:
02:96:f5:56:66:c9:ff:8f:4b:15:bb:d2:bf:75:10:ce:f8:91:
83:70:82:bc:2e:77:a2:b5:b0:05:79:0a:0a:04:a3:2d:cb:31:
5e:9d:80:25:bf:06:2b:3c:38:e8:53:2b:6c:11:65:d0:d6:3c:
4f:2e:87:fc:6f:dd:b5:1d:29:de:c8:c9:99:4d:50:63:34:58:
8d:8d:1d:b7:5e:e2:da:0a:15:9e:b8:07:ff:65:61:8a:47:1b:
50:5b:cb:ff:77:b7:7a:fe:b0:5a:c6:55:c9:5e:10:c9:33:29:
9d:92:8c:02:3f:74:f7:ad:05:1e:aa:6d:e3:13:c8:2a:37:e2:
e4:78:e8:37:89:a1:33:cb:9a:50:59:29:d6:a9:71:83:eb:43:
df:8a:46:fa:8a:6a:40:04:47:6d:65:cc:63:04:df:94:db:4c:
02:da:0c:e4:e6:2e:45:55:61:17:df:07:cb:4b:f2:30:95:2f:
b4:2a:3b:c9:3b:34:7d:ab:20:72:25:68:d3:82:38:7a:00:1a:
6b:45:9b:5f:2c:49:58:f0:e3:5d:b1:d0:31:21:49:ce:24:6a:
22:40:45:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g/8gXJr/6LUS/mKBVesjKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OTkyMDg4ZTc2NTVjYjEzNDAyMGNhOTViMGU1N2Q0ZTZk
YWY0MGYwHhcNMjYwNTEzMTEwMTM0WhcNMjYwNTE0MTEwMTM0WjAzMTEwLwYDVQQD
EyhiNjlhZjMwNjRkNzBlNTgzNjk2ZDgzNGE0NGRlYjFjNWNmYTBmM2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7M1P2MzjuuTMwRQR5mya93C3hGp
dILcTkBYV7IfB66PXzN9kY8isL9MiHjg1F95cXF7azZ/7944SaXnkRr1/g4GW3zx
XGu19SQQlSggVqL344D7ZxWKbNN3bkqcqTT40Bp42sxlVmsOBs3kvQ4aOa1dMmqM
ZWJwZmgEfVWmb9j8o4uZSnXpALoanz9IEJc6G6TqciEbRUJbuO/HstVy4rwdVo83
XiMyi9RydEpTDh7Dx00ErbDCeD12q55mDLlUFV1rAvWm/7D+5v8T7eSBeXhmNNQu
H5pZdKqcikE+Fiyw0cYVBukB0quwNi6K9NhGrX5RHFhXTdr6UPtZg3PwFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaa8wZNcOWDaW2DSkTescXPoPPEMB8GA1UdIwQY
MBaAFIeZIIjnZVyxNAIMqVsOV9Tm2vQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDVrZ2lPZGxYTEUwQWd5cFd3NVgxT2JhOUE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lMDgzMTgtMjk3NS00MTdhLWI4NjMt
ODVlYTYzYzI0NDc0LzEvaDVrZ2lPZGxYTEUwQWd5cFd3NVgxT2JhOUE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9lMDgzMTgtMjk3NS00MTdhLWI4NjMtODVlYTYzYzI0NDc0
LzEvaDVrZ2lPZGxYTEUwQWd5cFd3NVgxT2JhOUE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKJ0buSJ
gKENFAZFMzwRPwBXQnB4qGynmMMmxWxFsFhpp5X4Apb1VmbJ/49LFbvSv3UQzviR
g3CCvC53orWwBXkKCgSjLcsxXp2AJb8GKzw46FMrbBFl0NY8Ty6H/G/dtR0p3sjJ
mU1QYzRYjY0dt17i2goVnrgH/2VhikcbUFvL/3e3ev6wWsZVyV4QyTMpnZKMAj90
960FHqpt4xPIKjfi5HjoN4mhM8uaUFkp1qlxg+tD34pG+opqQARHbWXMYwTflNtM
AtoM5OYuRVVhF98Hy0vyMJUvtCo7yTs0fasgciVo04I4egAaa0WbXyxJWPDjXbHQ
MSFJziRqIkBFuA==
-----END CERTIFICATE-----
Generated at Wed May 13 14:28:26 2026 by rpki-client