Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
File: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft (raw, json)
Hash identifier: HGxI/fvRqamDGJnqwkUO3nEfJiGMbxYhfZ80TUfgELA=
Subject key identifier: AA:A6:96:A0:72:14:D2:AA:6B:87:E3:3D:93:86:DA:DF:61:8A:97:FD
Authority key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
Certificate issuer: /CN=8794395ac822dfe01165216c7781ffd61db28d5b
Certificate serial: 019EB732C9CDC7ECCFDAF5EB57C1F53B112A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
Manifest number: 07DA
Signing time: Thu 11 Jun 2026 15:00:19 +0000
Manifest this update: Thu 11 Jun 2026 15:00:19 +0000
Manifest next update: Fri 12 Jun 2026 15:00:19 +0000
Files and hashes: 1: L7s0ED57mNbRMv5scEab-MWU-0g.roa (hash: UTR/1aEsEtkTlQxKjpcPzSUv65QlBCtFASF3Ua17FGM=)
2: RBE0mA4HScE-lPJMqTTmYcsD2Hw.roa (hash: YHl21kGfBScrHLWB8nH7LfwSKrFDkFd1MvbGkxb2nBQ=)
3: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl (hash: zj7Sw3ja4Nny8uAc1aao3Q8fsN2YKZZSc+ye0dJfmN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:32:c9:cd:c7:ec:cf:da:f5:eb:57:c1:f5:3b:11:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794395ac822dfe01165216c7781ffd61db28d5b
Validity
Not Before: Jun 11 15:00:19 2026 GMT
Not After : Jun 12 15:00:19 2026 GMT
Subject: CN=aaa696a07214d2aa6b87e33d9386dadf618a97fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:30:f3:8a:b4:24:d2:42:b7:fa:b5:d8:8d:f9:
3e:87:8d:35:2c:ba:4d:bc:4d:54:5e:8a:40:c1:7f:
b5:52:3c:2f:76:3c:8e:87:53:e2:b7:26:bf:08:85:
3a:5c:69:a2:c2:cc:16:a9:b2:20:2d:db:91:7d:83:
f0:0a:89:2e:79:b1:88:ae:ca:c3:a4:6d:71:4e:25:
89:47:1f:38:d6:cb:cc:a4:74:4a:a9:15:4b:39:90:
ef:ce:14:29:a2:7b:65:14:62:06:00:7e:d1:c2:44:
5a:33:d7:68:cf:88:b0:4c:98:86:6a:aa:33:e4:b4:
87:c2:09:58:fb:2c:04:00:7d:f2:91:a5:6a:e4:3f:
6e:a2:4b:5c:2d:88:de:e8:e9:cc:99:28:53:2c:9d:
0d:f4:51:d6:fb:54:08:16:37:fc:1b:b7:cc:ec:8f:
c4:1b:8a:e2:5f:24:e9:1e:a8:50:5e:5a:30:5b:82:
f2:79:93:8f:33:c2:b9:b1:4a:76:da:87:12:f8:3b:
b0:e6:9a:62:47:db:40:fc:2f:df:2a:08:26:86:d2:
8e:0a:44:54:11:5f:17:26:27:61:12:72:9c:0a:5a:
20:8c:85:bd:57:64:78:88:b3:7c:b7:54:9a:03:c6:
06:74:0e:53:e9:02:06:e5:2b:db:70:2a:75:f4:d7:
1a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A6:96:A0:72:14:D2:AA:6B:87:E3:3D:93:86:DA:DF:61:8A:97:FD
X509v3 Authority Key Identifier:
keyid:87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:0a:a3:27:51:eb:c7:9b:5f:d7:f4:50:0b:dc:93:b6:13:c1:
cf:fd:06:96:89:66:c5:16:75:d1:88:5a:7f:cf:7d:24:b0:38:
82:b8:80:76:00:87:b6:3e:ca:d6:b1:48:46:32:4b:e9:22:22:
0e:8e:50:06:96:80:66:d0:24:2b:c0:60:d9:25:e5:1b:ee:a1:
9a:71:db:d7:5b:44:68:35:b6:60:8b:0b:68:45:6d:13:78:fd:
90:35:4d:6b:e2:3f:6f:c0:c1:95:fc:52:ef:c0:3a:ab:7b:b4:
a5:91:47:d5:f4:3c:22:e6:92:4c:f4:c8:d3:bd:91:a7:22:f9:
31:40:27:d3:47:c2:f5:87:21:9d:59:7d:d6:0f:59:09:4b:99:
d9:76:4f:ad:f8:d3:87:66:56:e5:c2:33:2b:ac:da:33:4b:f5:
1f:b8:43:2e:af:37:fa:23:e3:29:d0:e8:33:13:50:f8:b0:b8:
be:fc:de:d9:6f:5b:ee:a9:ea:a3:2f:d7:b2:51:6c:4e:90:ab:
df:9b:95:a7:c2:4e:86:11:f4:b5:c0:dd:ce:f9:fa:8a:0a:b6:
da:95:6e:67:6a:f3:af:09:ea:d3:3f:29:37:41:74:7f:c8:d1:
24:25:1a:ff:4a:f2:4d:a7:ac:3b:a1:09:0b:cd:80:9f:99:dc:
f2:fb:96:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:33:14 2026 by rpki-client