Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
File: vh89wilTBsx9-HLO7M1olNDg6uY.mft (raw, json)
Hash identifier: Zp2uMxpmfHou9dfdN20V/px18VkpXZzzEGrIM15EauQ=
Subject key identifier: FC:AE:EE:27:E1:74:93:CB:E9:9A:49:E4:09:8D:C4:8D:AB:6D:1B:26
Authority key identifier: BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
Certificate issuer: /CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Certificate serial: 019E3260ABBC7127E0164D84B8FF1458EF1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
Manifest number: 0A2F
Signing time: Sat 16 May 2026 20:00:56 +0000
Manifest this update: Sat 16 May 2026 20:00:56 +0000
Manifest next update: Sun 17 May 2026 20:00:56 +0000
Files and hashes: 1: 2BE8OL8UUysTCY2ZZS0Z-hyf26U.roa (hash: FNDNGh9+uGviPmZxVI3wwzrMpVPUZPSayc/06tScadg=)
2: RUhDge75ZRg2jm6GkiDeW_q_9R4.roa (hash: 1Rm1MMHk+9+hgPs8tOVkUq4dP1nGXvpDaYqmiRr/RDc=)
3: vh89wilTBsx9-HLO7M1olNDg6uY.crl (hash: DL8wgZz0PrjoZ7TJYNkrLGO03Ny+8Dn6cM8/B4jlio8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:60:ab:bc:71:27:e0:16:4d:84:b8:ff:14:58:ef:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Validity
Not Before: May 16 20:00:56 2026 GMT
Not After : May 17 20:00:56 2026 GMT
Subject: CN=fcaeee27e17493cbe99a49e4098dc48dab6d1b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:fd:90:a9:30:2e:68:9d:bc:36:1c:4d:72:
ee:f1:17:f0:2e:72:d2:0f:26:2b:eb:21:e7:a9:d0:
ad:cf:9f:18:fa:d0:12:64:c6:4a:ef:4e:80:49:42:
1e:39:f1:92:8f:58:bf:1d:ff:23:55:30:cb:b8:3f:
23:e1:9b:35:27:47:71:20:7a:4e:61:4e:64:9a:62:
26:09:c7:5a:fc:ce:71:f9:ca:b0:ec:99:d7:b7:28:
d1:3c:ce:ce:6f:68:23:85:3b:4b:11:18:b9:58:12:
29:58:6f:0c:48:79:80:ee:5c:66:85:a7:13:9b:03:
a3:f0:ab:68:e2:05:93:6c:ca:e4:e9:84:8c:ea:c5:
5a:dd:95:b9:c2:35:ce:1b:78:b3:44:1e:de:01:59:
b5:ee:b6:02:b9:73:a3:00:2f:65:3e:4c:d7:7b:53:
b3:1b:f0:a3:94:fc:39:f5:e4:db:1c:53:26:1d:ee:
e7:16:8f:1d:b8:87:8f:99:ee:ba:0a:21:24:2c:69:
2c:96:a7:8b:68:6d:b9:42:d6:11:fa:ec:21:29:06:
4b:2a:9a:93:dd:45:65:b6:4b:71:18:f6:cf:57:5a:
c4:29:6b:d1:3d:53:9f:ae:03:7a:cd:65:ab:93:c7:
a9:d1:d0:ca:a2:df:ba:e2:7b:4b:3b:6f:69:95:6c:
6c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AE:EE:27:E1:74:93:CB:E9:9A:49:E4:09:8D:C4:8D:AB:6D:1B:26
X509v3 Authority Key Identifier:
keyid:BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:21:b9:c6:fa:7f:78:08:ac:65:9e:dc:68:a6:93:a9:36:24:
b6:85:50:91:94:20:e1:04:9d:4a:5b:fe:a2:d4:fa:9e:21:90:
87:ec:61:da:43:41:77:24:13:ab:29:01:b0:db:85:5e:98:1f:
51:4f:69:31:8d:91:ac:ab:10:e1:d0:ec:bf:cb:9c:a7:ca:2b:
8f:ad:4a:51:b6:c1:2a:94:60:ab:e6:a5:50:56:0f:0b:10:52:
50:7d:64:e0:67:a4:0a:2b:ba:58:b9:57:ce:91:63:1d:67:d6:
64:d1:70:67:39:8b:25:08:8d:49:f2:6c:e3:cc:aa:9a:41:3c:
13:e0:30:1e:d9:3f:69:08:a9:87:d4:d0:de:98:0e:c4:9b:13:
ff:6d:d4:07:ba:6f:e3:23:79:cf:35:5b:e3:c7:92:33:3f:c0:
e2:39:08:9b:cb:02:3d:b6:dd:01:12:fb:1e:7b:a4:f6:70:58:
00:a0:ee:b2:8c:21:63:b1:7f:37:ef:3f:2e:2c:1c:74:db:c8:
2d:f1:b6:31:c3:95:63:52:00:4b:29:09:89:a5:5b:05:b2:97:
f3:9f:a8:f3:f5:90:51:c0:e1:cf:d7:51:53:9f:41:6d:49:6f:
c6:62:07:b0:2c:6e:66:b9:69:8e:e1:16:04:01:54:f2:ac:bc:
8c:56:92:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:05:36 2026 by rpki-client