Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
File: hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft (raw, json)
Hash identifier: FyfhClEpeNaS/v10PyEIognXU3gRvsX5MHozUPJjYW4=
Subject key identifier: 2A:E1:4A:C9:C6:DB:B9:CA:1D:AD:2A:B4:D0:DB:EA:A9:C4:79:C0:9E
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial: 019E2581064CBA0B1850AA0168F84F225B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
Manifest number: 15C0
Signing time: Thu 14 May 2026 08:01:13 +0000
Manifest this update: Thu 14 May 2026 08:01:13 +0000
Manifest next update: Fri 15 May 2026 08:01:13 +0000
Files and hashes: 1: AskFBvRE4tY5tlit_Gy114m2J0A.roa (hash: J6ljvruIBCWnrpJURNZnlPx/uNcMw2gcnFDVYqRVqz0=)
2: hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl (hash: eMi6tjiqbTM0IZyO+QGPforXORkLz8FFNVxEJarSOZk=)
3: mMleahkhBsxzGvTuhDg0yXEwF_w.roa (hash: qQecQrTvSIfunD3zEv/rPkBZ+0gt71EWgnmmdmDO4Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:25:81:06:4c:ba:0b:18:50:aa:01:68:f8:4f:22:5b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Validity
Not Before: May 14 08:01:13 2026 GMT
Not After : May 15 08:01:13 2026 GMT
Subject: CN=2ae14ac9c6dbb9ca1dad2ab4d0dbeaa9c479c09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:54:d3:74:21:93:c1:ae:59:5c:52:34:b1:56:
71:8d:ef:67:e8:4d:47:61:81:5e:d3:ba:8b:65:15:
29:8a:9b:3d:33:aa:94:61:dd:4a:28:cc:e3:cf:36:
0a:f7:4f:f1:1e:1f:b8:7f:6a:5b:d1:34:17:ac:67:
21:88:f5:62:5d:65:94:d4:53:44:a8:3b:c7:35:ef:
62:11:7b:3c:b7:f3:54:54:c5:a4:cb:4c:6d:73:4e:
7d:9a:cf:2a:84:12:2b:16:7b:bb:3c:4c:d6:75:95:
5f:3c:f9:60:9a:21:ab:30:ac:36:66:a4:41:3a:29:
fb:b3:82:34:d9:de:2b:70:f7:24:e1:b2:24:3c:bc:
aa:9b:1d:50:99:45:69:2c:e1:dc:1b:31:eb:1b:ab:
45:dd:81:e9:e5:b7:17:8a:f3:cd:e9:d3:cc:6d:e4:
69:7f:32:2c:d7:a9:b9:ac:26:64:12:ae:9a:29:d6:
be:2f:b8:b1:2e:f1:2f:ca:a5:61:2b:95:03:57:58:
47:b2:22:3f:71:ce:f6:4e:ff:e2:3c:f7:3e:87:02:
62:a5:7b:35:4a:ea:14:41:71:78:28:95:1f:4d:55:
b5:72:4d:1a:fa:29:85:eb:6c:34:4a:a8:95:3c:f4:
6b:4c:d1:4b:21:fc:c8:79:bc:d4:f0:89:4c:36:c4:
77:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E1:4A:C9:C6:DB:B9:CA:1D:AD:2A:B4:D0:DB:EA:A9:C4:79:C0:9E
X509v3 Authority Key Identifier:
keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9f:b3:8d:1e:f2:15:72:34:bc:c1:ae:64:94:58:f7:97:1e:
2c:b7:5d:2c:2c:66:b3:a4:39:62:8f:2c:45:6e:c5:c9:fc:a1:
f3:53:46:b7:9b:1c:81:35:27:06:1c:98:ae:27:fd:4d:69:fd:
9f:ee:65:e3:b3:7c:07:83:78:e6:cf:24:70:c4:8b:a1:e0:d8:
a9:67:9a:6c:12:b4:85:3a:82:0d:b8:1b:2a:1d:83:4c:20:d6:
f2:0c:23:34:a6:d2:6d:f0:52:e4:15:4c:55:8a:8f:50:cc:2c:
d7:0e:e2:f4:19:a6:c3:ce:c7:c0:18:9c:9c:ea:4f:0f:48:80:
9a:c2:6a:b7:9e:78:02:45:c6:37:6b:7f:e2:0b:6a:13:90:6d:
46:61:0b:fd:5a:5f:1b:8b:2c:40:c0:41:44:f2:a5:78:5b:f2:
4d:cd:5c:55:32:60:59:e8:b5:02:a7:a3:f2:59:52:5a:7a:e1:
e2:04:7d:77:de:bf:df:bb:42:51:5b:69:68:7a:69:7b:1f:22:
be:9a:fd:f0:2b:68:36:d9:1e:a2:20:cd:dc:3c:a0:ad:81:9b:
b6:d5:54:74:d4:39:90:c8:30:90:a5:e7:8d:50:85:0e:dc:d4:
cc:f4:12:44:dc:82:3b:c6:2f:d4:40:1b:3d:a3:9a:6e:8a:92:
b7:6f:27:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 13:03:59 2026 by rpki-client