Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
File: ifTHhzt_6kn_brkNUCwdvDpfjDM.mft (raw, json)
Hash identifier: 2yTlijOm4WMP7oLloA3DluEFipj17JeIT3D7ld2lJuA=
Subject key identifier: F5:B3:0A:FE:05:77:24:E7:6E:9B:96:9C:03:C6:2C:43:66:16:B5:B1
Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
Certificate issuer: /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Certificate serial: 019E1DFE6A8011A3CC44FB014A380A1D2012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
Manifest number: 18EB
Signing time: Tue 12 May 2026 21:01:13 +0000
Manifest this update: Tue 12 May 2026 21:01:13 +0000
Manifest next update: Wed 13 May 2026 21:01:13 +0000
Files and hashes: 1: 6knPf4Z_Yom73fZwtAX7TGmnwWI.roa (hash: uMucpBFGP9VTEQFIpmoToKJaaBVJ7Z0HhGQfxWsojaw=)
2: ifTHhzt_6kn_brkNUCwdvDpfjDM.crl (hash: dkSdxHGw2tbd+yG31d0mX17v+iaLsMOv6E40aON+3LI=)
3: jCfveam_XFqY1WaoDM8mc53l0-A.roa (hash: oYsXoD5qrvfH3xJxru02r9mxYtA0m3BelZFuFCg04Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:6a:80:11:a3:cc:44:fb:01:4a:38:0a:1d:20:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Validity
Not Before: May 12 21:01:13 2026 GMT
Not After : May 13 21:01:13 2026 GMT
Subject: CN=f5b30afe057724e76e9b969c03c62c436616b5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f9:dd:61:05:8d:b4:49:1d:5b:69:8a:e6:27:
5a:8b:1e:03:c3:ac:76:b6:b6:14:cd:00:7a:dd:c5:
f3:48:d5:ff:3f:de:94:7b:45:77:ee:f8:3a:57:76:
33:43:24:e8:72:38:7a:b4:00:c8:b9:c9:31:cd:d0:
cd:c3:71:79:97:9d:83:58:48:46:1d:e9:c8:67:62:
40:10:fc:24:59:cf:ec:84:ce:ff:c6:cb:8d:b6:6a:
5c:13:53:8e:b9:08:69:1e:0e:c8:f1:51:2d:23:ca:
2c:d3:23:ab:9d:7e:0c:ab:b4:38:b1:92:d1:ef:05:
ae:78:18:85:05:f8:0b:7c:2a:c3:05:a4:d1:42:3b:
27:f8:86:1a:1a:e0:79:78:17:6c:91:4d:71:87:7f:
93:46:ea:8f:1e:c7:d1:57:7e:bb:8c:4f:00:ad:c5:
69:f2:40:13:e0:1e:16:97:e4:9f:31:9e:b1:65:a0:
ae:28:ee:c9:9e:e9:18:76:3f:e8:e1:3b:50:99:57:
15:ed:13:10:62:06:74:5f:31:50:ba:54:42:d1:e4:
3c:7c:3b:56:ba:87:6d:81:7b:5a:0a:c5:39:43:f1:
e7:95:ee:7c:fa:b8:52:7b:97:f7:4f:f0:79:02:23:
dc:01:9a:5c:2a:80:ca:b2:46:e8:ca:78:47:a7:5f:
07:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B3:0A:FE:05:77:24:E7:6E:9B:96:9C:03:C6:2C:43:66:16:B5:B1
X509v3 Authority Key Identifier:
keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:af:b5:df:26:8a:d2:62:6c:40:dd:ff:0b:dd:42:58:c3:21:
8d:ec:b0:05:11:91:41:db:bb:9d:67:3e:38:26:0f:1a:6e:51:
92:8f:8c:d3:0c:a2:a6:cb:79:ab:2a:61:9d:53:57:5e:91:5c:
6d:ab:2e:09:6c:64:9e:1c:89:18:0d:ad:24:66:90:d2:fd:ca:
a5:8a:12:3d:14:63:d8:35:7d:84:12:2b:aa:37:e4:39:95:f8:
c3:98:95:4f:4d:6b:75:60:ca:ba:6c:17:1a:4f:dc:e8:02:4b:
12:f9:bf:0f:f3:33:c8:0b:33:67:7d:79:b9:40:2e:75:4e:3b:
f4:b0:14:3d:fe:fa:80:69:30:ef:b7:3b:5c:76:78:dc:00:a7:
c5:27:5b:77:17:7e:93:c1:b8:36:1f:00:a2:c3:d5:bf:14:25:
e5:0b:34:52:a3:34:0f:62:8c:b8:68:35:51:b3:19:0b:ab:23:
15:cd:9a:00:da:c4:a4:3f:dd:ef:c9:c5:17:33:31:81:a4:49:
26:1e:3f:2e:d1:7f:d6:45:12:9f:9a:79:c0:6a:32:65:e7:3d:
d5:f2:25:25:97:ce:84:22:a3:63:61:62:13:8b:f7:7b:49:79:
8d:7f:73:bc:e4:e5:ab:13:88:b3:44:62:6d:3e:2f:b6:00:b9:
c4:f6:33:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:53:38 2026 by rpki-client