Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
File: B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft (raw, json)
Hash identifier: y2vDfKevKHSCh7pp8XyyjeRSWFX17ot4RfaDYACupQI=
Subject key identifier: 5C:ED:86:A2:BE:DC:37:6A:5A:4E:96:09:05:F7:A2:11:04:53:73:98
Authority key identifier: 07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
Certificate issuer: /CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Certificate serial: 019E2FCDAB5197E42533BBFC532019F80A78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
Manifest number: 140E
Signing time: Sat 16 May 2026 08:01:08 +0000
Manifest this update: Sat 16 May 2026 08:01:08 +0000
Manifest next update: Sun 17 May 2026 08:01:08 +0000
Files and hashes: 1: B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl (hash: JVyGUpe2/jenSfRKkxB3c55Q1+zbpSQdFIUiVVyMRgI=)
2: DUkKAgihVQLx-9lRs9kP656LAqs.roa (hash: Q209pcJqFgT3dRAcDq1sFjsPW/cttABhC0fxm9KWWRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:ab:51:97:e4:25:33:bb:fc:53:20:19:f8:0a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Validity
Not Before: May 16 08:01:08 2026 GMT
Not After : May 17 08:01:08 2026 GMT
Subject: CN=5ced86a2bedc376a5a4e960905f7a21104537398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2f:1b:e2:d4:a2:b9:b3:a4:2b:aa:ce:ec:af:
7e:db:73:d2:8e:c4:df:ba:1e:2c:fc:b5:3e:38:5f:
99:ec:d9:43:88:2f:e4:83:13:d3:78:b9:4e:7f:cf:
0f:14:70:cd:d7:d3:51:4e:81:9d:82:10:da:b3:95:
05:79:d6:6d:83:5e:aa:0b:59:2e:10:9f:cb:0a:77:
3c:54:f3:c6:19:a3:f4:30:02:02:ea:29:17:2d:b4:
c6:e4:f3:e7:50:27:1d:8e:62:28:87:68:83:a7:be:
7c:0b:7b:f0:2e:d4:0a:7c:35:03:b7:4a:f4:8e:b1:
24:9d:7e:29:4a:2e:ed:32:00:d7:bc:a7:aa:73:f4:
65:cd:f7:84:10:9b:56:18:99:32:99:41:7f:59:ee:
24:bf:ee:52:9b:76:85:ee:ab:27:ea:4d:f4:86:51:
40:0d:25:f5:0a:e5:19:6e:51:db:7e:dc:89:76:cb:
61:45:58:69:86:be:ab:b2:5d:50:f7:19:5e:6d:e8:
c4:29:27:df:67:f7:65:e8:d5:aa:f6:c9:7d:f3:36:
28:d1:6b:a9:32:75:06:ed:49:05:e5:ea:d7:ee:d9:
5a:38:fc:e5:07:1e:cc:82:b9:1c:3c:67:99:9b:c6:
7b:24:43:c2:e3:44:91:53:d3:4b:14:6f:d1:7a:47:
af:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:ED:86:A2:BE:DC:37:6A:5A:4E:96:09:05:F7:A2:11:04:53:73:98
X509v3 Authority Key Identifier:
keyid:07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:57:1d:94:b2:da:15:18:88:bb:df:98:8a:23:54:f3:fe:b0:
0f:f4:73:af:6b:e7:44:9a:08:be:a1:86:e1:1e:ee:3a:a7:26:
96:a6:a4:16:5d:9b:e8:5d:98:cd:37:5c:26:3d:0e:d6:8d:b6:
53:7e:41:d8:ea:76:0e:dd:09:79:4a:c9:8b:42:2a:a1:9c:50:
15:04:30:7c:c8:a9:29:f1:5c:e6:ea:49:22:bf:f6:71:6c:c3:
2c:55:f5:00:d3:df:29:f0:c2:6f:dd:fa:48:9a:55:d8:0a:ad:
e3:aa:13:b8:c0:da:37:bd:80:65:65:07:2c:f5:42:7a:1c:47:
0e:0c:3f:5f:5d:26:e4:8d:c6:f1:f5:88:3e:a9:21:43:bf:eb:
40:40:3e:0c:bd:de:9f:f6:c3:f6:3f:a1:2c:92:ec:0b:59:23:
b4:c9:d8:1d:24:92:bf:35:32:a8:22:da:4e:c7:4c:52:6d:88:
61:8a:a9:3f:06:e7:fa:ee:41:aa:0e:37:ce:81:27:b7:b1:6b:
fb:c7:bc:93:ee:45:d7:60:b6:64:9b:30:96:d2:06:37:be:75:
fb:a1:8e:69:5f:f9:90:a3:d6:5e:02:55:ae:ce:32:4a:c3:48:
f3:44:78:c8:a1:dd:1a:51:b0:d0:81:f9:c2:a3:3a:ab:b1:3b:
f6:22:d0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:28 2026 by rpki-client