Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
File: HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft (raw, json)
Hash identifier: UZ421WpXP8GhhXdGpGnumI+cAEPjtsqjS4qpfaMtDgQ=
Subject key identifier: 79:47:08:18:E9:61:8A:37:FB:C0:7B:E4:AE:A2:C6:4A:5D:17:F0:C8
Authority key identifier: 1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
Certificate issuer: /CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Certificate serial: 019E1DFEBA9B2500006B3E77891C337F0D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
Manifest number: 0E3D
Signing time: Tue 12 May 2026 21:01:33 +0000
Manifest this update: Tue 12 May 2026 21:01:33 +0000
Manifest next update: Wed 13 May 2026 21:01:33 +0000
Files and hashes: 1: HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl (hash: +FpFX/jDWHaq+cN1cSPHVK13D/zvOgB2FHVH+p2TOsU=)
2: gusOyZenv7586RqtEWmnhh7N0MA.roa (hash: 2ylZF1yMijEe2k4/d611VBCjiq1WUabPgeneyDm3vsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:ba:9b:25:00:00:6b:3e:77:89:1c:33:7f:0d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Validity
Not Before: May 12 21:01:33 2026 GMT
Not After : May 13 21:01:33 2026 GMT
Subject: CN=79470818e9618a37fbc07be4aea2c64a5d17f0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2f:ad:00:1a:b0:80:98:51:ec:7a:65:cf:8e:
97:f3:b1:85:7c:c5:d6:6f:94:f4:12:7a:5f:61:5a:
34:9e:f4:0e:43:a0:bc:8e:c9:bd:54:84:66:ff:81:
a3:e0:95:c4:20:b5:e1:9b:10:e6:7f:77:c4:60:ce:
e6:4d:98:de:68:40:6f:92:4f:c0:67:3b:4b:4c:25:
50:f1:62:72:49:3e:eb:a6:fe:30:92:2c:4c:b8:95:
12:86:e5:95:53:cc:87:c4:20:0a:8d:e5:37:74:82:
78:6d:3d:fc:5c:5f:7f:d3:77:73:ad:30:67:1f:0d:
30:ad:4a:68:32:53:6c:d3:69:96:ac:e0:08:95:f7:
86:cb:a5:d8:5d:73:09:34:d7:ab:22:99:93:95:a8:
4f:8b:f1:af:05:58:af:c0:9d:e5:7f:ff:80:ca:35:
35:d1:8f:33:f8:03:5f:12:6c:5b:28:5f:66:f8:aa:
68:2d:87:5c:4e:4d:16:d2:fd:10:1b:b8:25:8f:ed:
3d:54:a7:b3:d6:14:6f:0c:95:b1:b3:e5:79:c8:08:
4a:de:5a:5d:2a:04:f2:2c:c8:45:53:90:34:32:91:
58:63:66:1a:50:f5:cb:89:d8:1f:ad:7c:d1:3f:93:
3d:01:21:4b:ae:4b:b4:0d:36:d8:b3:8f:55:14:11:
5a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:47:08:18:E9:61:8A:37:FB:C0:7B:E4:AE:A2:C6:4A:5D:17:F0:C8
X509v3 Authority Key Identifier:
keyid:1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e3:f8:f9:db:df:ce:d9:07:90:68:4c:1e:d9:76:8d:06:06:
5b:6e:8a:02:79:85:00:45:0a:43:b6:21:36:b9:b1:bf:1e:06:
a4:a2:4b:9c:3b:0a:95:af:f1:37:fa:5c:df:e3:f0:4d:c8:a4:
a2:e8:c4:4f:f9:9c:55:52:78:7d:6d:79:ee:2c:60:ba:c5:7b:
a1:e4:1f:8c:0a:58:10:08:f1:78:4e:27:4c:ae:b0:1f:1d:32:
6e:cc:c1:d7:02:fb:86:e7:cf:a6:04:c1:10:70:c3:e6:f0:d7:
22:c6:65:ea:5b:4e:cb:c5:97:10:0e:07:76:90:d0:da:0e:1d:
40:a4:08:2b:e2:cd:2c:c2:71:ab:98:b1:aa:69:65:78:e2:be:
87:a5:8e:07:9d:c1:c9:08:e2:b4:ac:d4:02:e0:8a:3b:5c:07:
a2:69:21:30:7e:d1:74:e6:17:55:25:22:c9:1d:f1:7b:db:5a:
7d:2a:03:b1:2e:5f:8e:cd:df:ea:b7:ab:c3:db:af:11:ce:ba:
e9:01:7c:d7:84:f4:98:80:d0:b2:19:25:e9:23:30:cd:38:77:
5b:31:5d:e1:7d:c5:b7:05:45:e8:ea:b0:58:a2:95:2a:93:c8:
70:91:b3:a8:ad:e8:ba:c1:6f:2c:7b:e1:69:a8:90:7c:5b:f3:
36:1b:63:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:33:52 2026 by rpki-client