Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
File: hA6dA48bwAXzsJxdyoIK2BCUiz4.mft (raw, json)
Hash identifier: fXV01J+c8zd7OdpA1P7Zw8j0vhHxY09CkqRknS95lzA=
Subject key identifier: 1B:3B:E1:32:A9:9F:6A:02:F1:FB:9C:62:A0:EA:7D:7D:A0:C2:27:AC
Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
Certificate issuer: /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Certificate serial: 019E2994E0A8574E4BDA42D3541089CD53A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
Manifest number: 18DB
Signing time: Fri 15 May 2026 03:01:23 +0000
Manifest this update: Fri 15 May 2026 03:01:23 +0000
Manifest next update: Sat 16 May 2026 03:01:23 +0000
Files and hashes: 1: hA6dA48bwAXzsJxdyoIK2BCUiz4.crl (hash: XS4fSoSB4rEV/xrvfgnkBGxgOte72uKEiI+d1IjTtaQ=)
2: q8Sc-hb4z8RPWefbF866BBRja54.roa (hash: c2mi+bk32KaktYwhBDhcFoed5UYVyYxJQtaR6VL5ZBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:94:e0:a8:57:4e:4b:da:42:d3:54:10:89:cd:53:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Validity
Not Before: May 15 03:01:23 2026 GMT
Not After : May 16 03:01:23 2026 GMT
Subject: CN=1b3be132a99f6a02f1fb9c62a0ea7d7da0c227ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:10:5b:15:dc:5c:f6:93:43:b5:6f:60:18:eb:
48:2a:b7:13:a9:74:61:9f:90:af:9a:c6:6e:98:b1:
e9:c0:ef:b7:90:36:22:18:5a:25:1f:33:1e:b7:fd:
d3:58:77:4d:76:40:cd:1f:45:10:8b:07:73:80:8a:
95:ea:5c:84:c3:d2:d4:c3:11:0e:98:c5:9b:79:1d:
9a:c1:b0:b1:e0:5c:17:4b:43:66:d0:46:89:8e:bc:
e1:8d:2c:f6:ce:fa:fc:b8:2a:ec:44:19:a8:11:c8:
3b:af:56:0d:06:76:a8:0d:ac:c7:3e:40:e3:69:e2:
00:30:eb:07:2a:71:c5:d7:91:06:5e:57:6b:51:45:
a2:d1:08:17:a6:7a:fb:f0:a0:22:0d:ca:20:70:ee:
fa:9e:25:0f:ee:e8:6e:35:cb:f0:22:10:c2:88:02:
5d:f1:66:d3:aa:b3:ff:53:c2:b2:47:d0:4e:d5:e7:
b9:e7:96:7c:94:86:18:88:30:cc:03:54:93:4c:c9:
ae:25:c5:d9:4e:82:27:43:28:c9:6b:14:87:dc:88:
86:10:5f:d0:81:93:af:3a:0a:92:f4:c2:81:14:dc:
9c:12:75:da:a1:58:96:34:47:51:94:f3:55:72:c4:
08:5c:72:be:a0:a8:d7:6b:7b:1a:bc:69:41:ee:02:
21:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3B:E1:32:A9:9F:6A:02:F1:FB:9C:62:A0:EA:7D:7D:A0:C2:27:AC
X509v3 Authority Key Identifier:
keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:54:09:44:af:b7:ee:5a:18:85:18:3b:42:84:e3:ce:c3:da:
20:6c:9e:5a:5c:e2:ef:fa:43:b3:f0:72:af:9a:42:3b:78:c3:
8e:3c:e0:df:a5:e6:91:5f:75:a0:83:84:47:bf:f1:7f:4a:77:
98:d4:18:9d:b4:e7:bc:94:fa:88:1f:4e:dc:1f:e8:84:ad:31:
12:0e:6b:2c:10:42:42:85:84:7f:d6:40:71:f4:72:91:2e:27:
57:c8:5e:3a:8c:f1:e0:8e:26:b5:d9:71:b8:45:08:8c:b7:53:
2a:6c:1f:d5:be:a8:aa:96:1f:d7:b0:af:a3:56:58:0b:14:7a:
9a:0b:ac:e3:82:43:57:f1:0f:8e:da:05:cd:25:bd:f5:af:0b:
29:f9:fa:58:d7:eb:ea:78:bb:47:23:27:9f:4d:06:57:16:9b:
bf:2f:d3:88:94:3b:53:8d:fa:c3:8b:1f:50:1a:8c:6f:8c:6d:
64:9b:57:31:66:2b:c3:e5:f8:07:b9:fb:90:b3:58:cf:81:e4:
a2:b2:b7:86:be:32:f8:c9:b9:06:60:f8:63:9f:64:1b:d7:88:
d5:a4:2c:bf:71:ca:38:8e:82:df:71:fa:70:b2:7e:55:7f:4e:
ab:91:ad:bc:4c:43:71:2f:c0:c7:6b:e8:fc:19:19:1b:2a:2d:
5c:0d:f2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 14:05:53 2026 by rpki-client