Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
File: hst0KgO8nIVQcheiUgTf_4L8zfk.mft (raw, json)
Hash identifier: BAT4Nl3k2RQapkgge33pm3iu9l7Q5tuktJQgyZghSq4=
Subject key identifier: 97:7B:BF:A8:0B:94:7E:A5:D6:F4:74:F0:2B:7F:96:59:3F:97:3E:AB
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 019E1EA2D19A87896CF673593CA6D1877295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
Manifest number: 1213
Signing time: Wed 13 May 2026 00:00:47 +0000
Manifest this update: Wed 13 May 2026 00:00:47 +0000
Manifest next update: Thu 14 May 2026 00:00:47 +0000
Files and hashes: 1: FsEYUQUVL6IgAyC_3hTmIC05sYA.roa (hash: erfQp237zxf8AD8EH/ivbDYnw0vQY88Vf8ov2LTkk+Q=)
2: KhePy2KSChqSTO56xjFNB88Adhw.roa (hash: jSbx1Mp1yMnht16w7llcf9K2ZLPdIRkxkGJ6/eCHfII=)
3: Z-DKyWN4NlE9Oe6WxuczFCionOA.roa (hash: DCMKgnjrJbcUZjEDqwNnXXjpRG/93HbByWia9wwVNVM=)
4: hst0KgO8nIVQcheiUgTf_4L8zfk.crl (hash: ApOEf8YkOHTYLOBxq/klHnds6uRH/88O8vkXzbkWi0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:d1:9a:87:89:6c:f6:73:59:3c:a6:d1:87:72:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: May 13 00:00:47 2026 GMT
Not After : May 14 00:00:47 2026 GMT
Subject: CN=977bbfa80b947ea5d6f474f02b7f96593f973eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:b5:03:58:b5:ac:8b:0c:78:7f:fa:52:18:
36:e8:af:a2:9a:51:9c:3b:10:38:64:c0:89:0e:9d:
02:68:27:e0:f2:f2:c0:62:16:23:cd:ea:3c:de:a0:
9b:e7:7f:4f:d3:2f:5d:c0:75:76:3c:2a:de:d5:48:
dd:d4:60:65:b6:a2:49:13:47:6e:ca:ee:fc:30:0e:
49:15:b2:4d:0f:2c:3b:b7:2f:6e:0f:90:ed:b4:2c:
c1:e6:0e:27:e9:94:98:b4:21:8a:9d:42:80:9b:cc:
05:29:88:18:ef:96:9f:11:5e:93:d5:8e:be:64:10:
32:52:61:72:53:2f:30:21:66:1d:19:3e:f4:20:47:
18:ba:5d:5f:18:b5:d6:f9:1c:8d:bd:bf:70:b0:19:
88:d4:92:93:1a:f9:5b:4e:aa:eb:39:2a:b6:39:82:
d2:f7:2c:eb:67:c2:e6:4d:af:15:de:6a:63:3a:b2:
98:ab:82:33:be:3a:d0:78:a3:75:8e:15:bd:d5:38:
09:72:2e:59:83:c3:1f:a3:6c:cc:b1:95:ae:dc:6a:
f3:7c:8c:ce:7c:d2:cf:67:7e:d1:49:91:d5:1b:c2:
45:43:19:89:3a:5f:fc:aa:12:06:5f:96:f3:38:0e:
e6:4c:7e:40:bf:08:e8:d7:64:ab:09:a2:55:d0:7f:
f8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7B:BF:A8:0B:94:7E:A5:D6:F4:74:F0:2B:7F:96:59:3F:97:3E:AB
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d2:5e:c6:e9:26:d5:85:15:af:b8:08:3d:70:08:d3:9a:bb:
01:85:62:dd:d7:14:4b:1c:d6:ac:95:c4:38:90:6d:4c:c9:5e:
78:12:9e:da:2c:15:0c:c7:ac:5a:5a:6e:4b:1f:9b:bb:7e:6b:
c0:09:fa:26:66:e7:29:46:e5:e8:f1:b7:f2:14:61:6d:d7:21:
c8:7c:cd:91:56:06:eb:19:b8:5d:bd:77:93:6d:97:c5:01:1a:
9a:a4:8c:f2:be:92:f2:36:b5:15:d8:9f:56:53:e6:a4:7e:d6:
52:ca:60:c1:c4:c1:85:0c:82:89:1a:92:13:bf:ee:b7:30:23:
e4:2a:a7:cb:cf:d5:22:b6:f6:77:41:f0:47:b4:05:ef:a7:bf:
3a:c2:a4:4d:2f:29:0b:4e:e2:f6:67:61:8b:2b:9b:85:0b:84:
c1:4d:e5:d6:a2:79:19:1b:e5:57:66:3b:ad:ce:92:ac:9c:76:
0d:80:a6:d8:0b:38:69:44:1a:75:93:98:88:08:1f:09:23:8d:
cb:51:7c:42:5b:85:ab:8b:ea:b7:5c:47:aa:11:71:5f:c7:80:
98:0f:5e:76:7c:c2:6b:ce:e1:20:3c:8e:a6:58:de:a0:04:6c:
5d:66:dd:29:9a:ee:ae:f1:9a:ec:e2:dc:be:f2:6b:f7:ec:e4:
49:58:68:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:57:15 2026 by rpki-client