Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
File: hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft (raw, json)
Hash identifier: aAdbU/6Qu+cnc6audCw+vyOjxfNh0amYQCSAdnwDfkI=
Subject key identifier: 54:8D:0E:60:3A:57:7F:A7:BF:14:7B:DF:0C:6D:98:99:82:A3:9F:21
Authority key identifier: 84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
Certificate issuer: /CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Certificate serial: 019E28EFD333804787086071E06C5D7752A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
Manifest number: 042F
Signing time: Fri 15 May 2026 00:01:06 +0000
Manifest this update: Fri 15 May 2026 00:01:06 +0000
Manifest next update: Sat 16 May 2026 00:01:06 +0000
Files and hashes: 1: dE8xQiANkczZ0tAFkQGK1c1TYTY.asa (hash: TqFGlNij6y9fV1mllromoWTFgsW2Z9/zlXhLCTPAEBE=)
2: hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl (hash: lEzk2kyAXCbXtkJF92We5ie81yM/xyURUFXU4Q5uW0o=)
3: lwdA6JuX3-pn18rffEN0nPoUEzg.roa (hash: 934Mdi6isovZuFn2f0j17OwEt11O6pbILLLQ1tR1JWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:ef:d3:33:80:47:87:08:60:71:e0:6c:5d:77:52:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Validity
Not Before: May 15 00:01:06 2026 GMT
Not After : May 16 00:01:06 2026 GMT
Subject: CN=548d0e603a577fa7bf147bdf0c6d989982a39f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:4b:49:fa:98:ed:da:67:e2:79:17:4d:c1:
4c:e6:d2:dc:12:fa:2f:4d:63:b7:63:be:79:b6:f9:
66:f5:1d:03:7d:e1:54:c5:60:6e:e3:36:a3:70:af:
e8:0d:b0:53:84:2f:b0:07:ec:64:be:8c:8a:9c:6a:
75:32:f2:7a:25:81:9d:ca:ab:88:11:3d:62:1b:53:
86:9f:8a:6e:3d:45:2f:56:6a:bb:52:c3:f5:c4:85:
7f:d9:23:74:fe:96:92:c9:61:1a:8b:52:74:0d:18:
4c:25:cb:88:e1:15:b0:74:9e:97:73:10:2e:cd:c9:
8d:21:e6:a9:a9:14:b3:03:3e:ae:c2:bb:69:a6:2b:
bd:df:37:ee:47:07:c7:17:d6:b7:01:73:7f:8e:e7:
85:83:f1:f5:41:38:9d:de:e8:4f:90:db:dc:9d:f5:
d0:67:8a:e3:61:89:9a:bc:29:ad:30:8b:28:e5:68:
92:0f:34:e7:b9:fb:ec:83:0a:d1:da:2b:f7:01:9f:
4b:21:f6:57:27:8f:b1:55:0a:29:0d:9a:c4:a9:97:
db:22:f2:40:98:e9:8f:cf:17:38:95:fd:d8:cf:b2:
f9:61:e3:40:eb:0c:2b:1f:fd:b1:6f:9a:c1:2d:3f:
bf:50:65:aa:78:a6:05:de:25:3c:f2:20:6c:1f:1d:
1a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8D:0E:60:3A:57:7F:A7:BF:14:7B:DF:0C:6D:98:99:82:A3:9F:21
X509v3 Authority Key Identifier:
keyid:84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:dd:9b:65:51:22:e6:e6:dc:52:68:b0:84:0b:69:02:22:03:
da:e9:70:16:b5:fc:a0:52:c5:65:b9:f5:28:33:6c:68:f5:64:
7e:75:0d:85:da:c8:42:f9:57:1d:1d:71:b2:2d:1e:fc:01:1a:
06:07:89:bf:ca:77:90:4e:8b:ac:e3:9e:a8:44:4a:9d:4c:40:
12:3f:d4:23:31:52:00:a6:19:e1:3e:e8:19:33:17:51:50:8c:
59:6b:fb:c8:4a:b7:d2:d4:e3:8f:95:3a:1b:5b:fd:28:df:64:
96:e6:9d:85:30:94:9e:37:76:0d:a7:96:43:45:47:67:f1:26:
0d:7a:51:24:ba:96:28:d4:58:ed:53:c1:5f:04:95:1c:dc:88:
e7:c5:79:c1:f5:87:19:e2:33:8f:a5:cc:40:65:58:9a:93:3c:
bf:9a:67:55:55:f0:26:36:15:7e:8d:36:58:ac:6b:b6:64:e6:
e7:cf:b1:e2:b9:50:a3:08:4c:e7:1b:ea:f0:bc:b0:b2:c6:d8:
d5:ee:8f:eb:d5:7d:63:bf:25:34:a0:07:5e:2a:ee:4d:be:b3:
47:33:bc:29:33:b6:3c:4f:63:70:87:f7:5d:2f:74:fa:ab:40:
bc:78:ce:ed:30:64:a3:94:d5:5f:37:b6:cf:4e:6a:ca:97:f9:
d3:28:eb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:03:01 2026 by rpki-client