Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
File: H0guXkEsHeu3dt7fr0XDMXTnZC4.mft (raw, json)
Hash identifier: sKeiegUsCDCoxCa1TiEfN1Tx0wCJs+EXOvRVaQqgvTA=
Subject key identifier: C1:A7:E6:8A:5B:20:21:FB:B7:52:E0:F7:3B:07:72:80:5F:6F:FB:A7
Authority key identifier: 1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E
Certificate issuer: /CN=1f482e5e412c1debb776dedfaf45c33174e7642e
Certificate serial: 019E32299DACC8B371923374CFDCD10F3A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
Manifest number: 075C
Signing time: Sat 16 May 2026 19:00:48 +0000
Manifest this update: Sat 16 May 2026 19:00:48 +0000
Manifest next update: Sun 17 May 2026 19:00:48 +0000
Files and hashes: 1: 7F5MFPLGX7n9kqmK4iPr3DwuhNU.roa (hash: sUozPnCyk9y8i1GS+PfFGedUQX43402xLyKa/GCV0HY=)
2: H0guXkEsHeu3dt7fr0XDMXTnZC4.crl (hash: 2X9nAj6sGIlcrY+SKzYVK2vkhPrTRcyR5HcPXcJMKSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:29:9d:ac:c8:b3:71:92:33:74:cf:dc:d1:0f:3a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f482e5e412c1debb776dedfaf45c33174e7642e
Validity
Not Before: May 16 19:00:48 2026 GMT
Not After : May 17 19:00:48 2026 GMT
Subject: CN=c1a7e68a5b2021fbb752e0f73b0772805f6ffba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:1b:a4:02:31:65:96:35:3f:b1:c7:22:66:
48:be:f5:b8:5f:06:c9:21:27:bb:ea:60:7b:ed:5a:
bd:0f:2c:69:81:2f:43:9e:b5:b7:c8:21:bc:45:39:
ad:4c:e6:b2:68:8f:da:52:c2:52:35:5f:a1:4f:69:
5e:2d:33:08:e5:7e:c3:8f:b3:c8:99:1c:98:4d:ec:
7e:7e:57:b1:df:ea:d0:34:e8:b5:1a:bb:7a:7b:07:
b8:a5:15:05:a8:38:19:45:2b:0d:7a:ae:eb:88:71:
cd:b6:14:fd:91:1c:69:20:b0:b2:80:32:3f:ac:99:
93:b6:8f:a1:53:d2:1c:cf:a8:7c:1e:f2:f2:bc:a9:
b7:5a:2e:f9:b3:6e:07:37:a6:1a:e9:bc:c4:95:c6:
35:7f:60:ba:ff:2b:9b:d3:f9:3b:30:d3:c6:04:5b:
b5:6b:c3:11:7c:4f:5a:ce:74:ad:4e:71:a3:6f:32:
aa:38:30:ab:70:f7:60:56:b3:6e:31:04:d4:71:31:
b1:8e:b4:cb:49:c8:b1:01:12:02:fb:18:b9:87:37:
d8:62:3a:d3:ad:67:ac:dd:29:e9:db:7d:12:3b:d5:
5d:3e:05:4a:35:8f:37:20:a4:a2:69:75:e2:ee:13:
59:4e:e9:ac:98:64:f8:49:cb:57:0d:42:3c:c6:9a:
ac:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A7:E6:8A:5B:20:21:FB:B7:52:E0:F7:3B:07:72:80:5F:6F:FB:A7
X509v3 Authority Key Identifier:
keyid:1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b9:b2:2d:77:db:44:ad:a0:c2:8d:ff:3e:92:3e:18:57:18:
d1:98:2e:79:98:b2:bd:05:2d:23:6c:fd:f8:26:7e:c2:97:db:
01:7d:64:b9:65:d8:49:ec:45:fc:ad:8c:d0:fb:32:43:4d:52:
41:8e:03:f2:34:f5:04:86:45:c8:97:ac:51:cc:5b:18:6a:50:
a4:2d:db:98:e4:c2:21:5f:0d:ac:bb:97:98:d3:21:16:bf:16:
61:a7:ac:6b:31:d8:a8:f5:38:27:1b:2e:5e:84:6f:80:9e:ae:
d1:11:24:d1:97:cf:18:de:90:1f:fd:45:c5:22:e3:7a:e6:12:
4b:b8:8c:7b:37:1f:cb:b9:aa:13:da:50:a9:68:de:e5:8c:9c:
17:ef:f6:78:e4:8a:1c:20:80:15:48:c4:4c:50:5d:ef:7c:ed:
97:fc:cc:0f:d1:81:85:df:f4:96:9c:75:6a:52:a5:fd:20:92:
88:19:64:72:1e:77:61:c8:71:94:a9:57:eb:c3:37:c8:ee:f7:
ce:61:66:98:48:5d:f4:79:ae:f0:ce:b5:79:82:27:4f:8b:5c:
ee:33:0d:99:b6:d0:e1:32:0c:b9:da:76:f5:31:cd:7e:19:61:
a4:1b:4a:0a:73:49:1a:e7:ca:ca:77:98:1e:7b:4c:5c:27:04:
ba:08:fc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:14:08 2026 by rpki-client