Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.mft
File: h2mm8aRv5rEvfl8cASyKTMvve58.mft (raw, json)
Hash identifier: vRIhMcxKYmd9Je6c7kzI0eT6NXj1QWlhhaz+NqURrpQ=
Subject key identifier: 24:4E:65:8C:9E:6E:14:92:A6:06:3A:3A:E8:A5:AC:56:BA:2E:31:74
Authority key identifier: 87:69:A6:F1:A4:6F:E6:B1:2F:7E:5F:1C:01:2C:8A:4C:CB:EF:7B:9F
Certificate issuer: /CN=8769a6f1a46fe6b12f7e5f1c012c8a4ccbef7b9f
Certificate serial: 019E1CB56C4605DA9E700B3C4B9C71A020FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h2mm8aRv5rEvfl8cASyKTMvve58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.mft
Manifest number: 39
Signing time: Tue 12 May 2026 15:01:51 +0000
Manifest this update: Tue 12 May 2026 15:01:51 +0000
Manifest next update: Wed 13 May 2026 15:01:51 +0000
Files and hashes: 1: Pwqn4oY0KPuWxFDB-Ztc1zWrVwI.roa (hash: j9WbrXVSr2U86ODDAeyZl+rZySS1lzxdLUlG17Tpq0c=)
2: h2mm8aRv5rEvfl8cASyKTMvve58.crl (hash: 2yF07NaQal+ga2e2eexyCeflCYNnHMof7GZO+Lxi8LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.mft
rsync://rpki.ripe.net/repository/DEFAULT/h2mm8aRv5rEvfl8cASyKTMvve58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:6c:46:05:da:9e:70:0b:3c:4b:9c:71:a0:20:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8769a6f1a46fe6b12f7e5f1c012c8a4ccbef7b9f
Validity
Not Before: May 12 15:01:51 2026 GMT
Not After : May 13 15:01:51 2026 GMT
Subject: CN=244e658c9e6e1492a6063a3ae8a5ac56ba2e3174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:06:a5:db:ae:fe:9d:f2:df:2f:1d:80:83:50:
36:99:e5:66:b7:ba:0d:d5:97:e8:6f:a1:7d:ba:d8:
b9:42:73:2a:22:ae:e1:47:9e:5b:23:c8:8e:6d:1e:
b7:9f:84:b3:f2:29:d4:32:4e:66:20:d7:c5:7d:30:
dd:d0:93:3b:b1:ec:d4:56:9e:12:5d:6e:e9:e0:d9:
81:76:8f:93:0f:6f:64:7b:df:78:e5:e9:de:11:d6:
22:f5:20:18:31:3e:e3:78:39:d2:b9:0c:dc:03:28:
9d:14:36:1f:42:1c:2a:6e:e7:ca:76:17:4c:69:2f:
c6:67:0f:2d:df:9a:ae:d7:21:7b:7a:4f:f0:8c:74:
9f:83:80:dc:70:b9:b8:87:f6:b3:7d:c0:45:81:b2:
ab:5c:29:a7:8c:65:9d:35:f9:5d:f3:2e:60:ea:0e:
57:0f:0d:a8:29:cf:43:d3:83:de:31:98:ee:44:7d:
a2:65:15:a6:56:2b:a9:5f:4d:9f:df:ba:00:4a:2e:
84:09:3b:4a:2f:5a:81:4d:8a:bb:a3:f7:1b:79:47:
99:71:82:d1:60:bd:d4:e2:93:d9:c1:90:21:5f:9f:
5d:73:29:01:19:f5:30:1b:4d:73:39:00:51:e4:26:
8b:c4:20:5e:04:bb:41:65:89:58:fe:98:81:ff:90:
d6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4E:65:8C:9E:6E:14:92:A6:06:3A:3A:E8:A5:AC:56:BA:2E:31:74
X509v3 Authority Key Identifier:
keyid:87:69:A6:F1:A4:6F:E6:B1:2F:7E:5F:1C:01:2C:8A:4C:CB:EF:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h2mm8aRv5rEvfl8cASyKTMvve58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:db:bf:e0:9f:c3:de:3b:b5:3c:5c:b7:4e:0b:05:88:0e:21:
db:f7:3e:20:41:9d:ae:79:43:dc:e1:f8:dc:e1:4c:c0:d0:53:
42:c7:34:13:15:4b:95:47:66:f4:d3:c9:08:74:2d:3c:be:44:
c8:ae:db:da:98:5d:86:95:67:5c:34:54:10:92:e0:93:f2:2d:
b2:9e:0c:aa:e7:cb:61:51:a4:66:f3:07:bd:a1:92:dd:1a:b4:
b6:7c:98:39:c5:27:87:2b:59:3f:72:45:a4:76:1e:81:e1:3f:
15:b4:b8:d0:9f:b2:ad:9a:4a:42:f8:2d:44:01:57:85:82:83:
60:ab:42:5d:dd:68:37:89:52:63:6f:38:41:0e:25:94:5d:50:
9e:10:6c:79:28:14:65:0b:16:17:e8:7c:16:f4:40:a2:1d:ef:
ed:20:12:c2:2a:ac:e8:93:d6:60:a6:ea:7f:e3:48:1d:59:66:
dc:a9:3b:ea:a5:0c:a3:35:0e:1d:91:09:6e:5a:3d:74:54:09:
9e:0a:56:b4:2b:0d:67:f4:ed:52:f8:04:9a:02:32:71:92:df:
00:b8:86:7e:6f:3f:bc:fd:1d:4c:89:c2:4f:da:e4:23:8f:c8:
88:c9:82:67:c4:db:ad:34:66:26:b2:8b:cc:df:fc:59:0f:7d:
31:09:8f:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctWxGBdqecAs8S5xxoCD+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NjlhNmYxYTQ2ZmU2YjEyZjdlNWYxYzAxMmM4YTRjY2Jl
ZjdiOWYwHhcNMjYwNTEyMTUwMTUxWhcNMjYwNTEzMTUwMTUxWjAzMTEwLwYDVQQD
EygyNDRlNjU4YzllNmUxNDkyYTYwNjNhM2FlOGE1YWM1NmJhMmUzMTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAal267+nfLfLx2Ag1A2meVmt7oN
1Zfob6F9uti5QnMqIq7hR55bI8iObR63n4Sz8inUMk5mINfFfTDd0JM7sezUVp4S
XW7p4NmBdo+TD29ke9945eneEdYi9SAYMT7jeDnSuQzcAyidFDYfQhwqbufKdhdM
aS/GZw8t35qu1yF7ek/wjHSfg4DccLm4h/azfcBFgbKrXCmnjGWdNfld8y5g6g5X
Dw2oKc9D04PeMZjuRH2iZRWmViupX02f37oASi6ECTtKL1qBTYq7o/cbeUeZcYLR
YL3U4pPZwZAhX59dcykBGfUwG01zOQBR5CaLxCBeBLtBZYlY/piB/5DWswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCROZYyebhSSpgY6OuilrFa6LjF0MB8GA1UdIwQY
MBaAFIdppvGkb+axL35fHAEsikzL73ufMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDJtbThhUnY1ckV2Zmw4Y0FTeUtUTXZ2ZTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9kYzRiNDUtZDk0OC00YjZhLWEzZDkt
NzMwNTQxYTA2ZjgwLzEvaDJtbThhUnY1ckV2Zmw4Y0FTeUtUTXZ2ZTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9kYzRiNDUtZDk0OC00YjZhLWEzZDktNzMwNTQxYTA2Zjgw
LzEvaDJtbThhUnY1ckV2Zmw4Y0FTeUtUTXZ2ZTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActu/4J/D
3ju1PFy3TgsFiA4h2/c+IEGdrnlD3OH43OFMwNBTQsc0ExVLlUdm9NPJCHQtPL5E
yK7b2phdhpVnXDRUEJLgk/Itsp4MqufLYVGkZvMHvaGS3Rq0tnyYOcUnhytZP3JF
pHYegeE/FbS40J+yrZpKQvgtRAFXhYKDYKtCXd1oN4lSY284QQ4llF1QnhBseSgU
ZQsWF+h8FvRAoh3v7SASwiqs6JPWYKbqf+NIHVlm3Kk76qUMozUOHZEJblo9dFQJ
ngpWtCsNZ/TtUvgEmgIycZLfALiGfm8/vP0dTInCT9rkI4/IiMmCZ8TbrTRmJrKL
zN/8WQ99MQmPOQ==
-----END CERTIFICATE-----
Generated at Tue May 12 22:16:18 2026 by rpki-client