Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
File: HsBDSlw88jdMo2AzGSaufSSsNFs.mft (raw, json)
Hash identifier: wIF9V8iLeMk/i29/Hnp5lfQWquxymzpg1VoiX4ksxyg=
Subject key identifier: A4:5B:FB:8A:40:19:3A:A7:EE:99:65:23:16:DF:5E:23:8F:A0:02:15
Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
Certificate issuer: /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Certificate serial: 019E31F29565EF5AEBB756EC68000B25011A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
Manifest number: 177A
Signing time: Sat 16 May 2026 18:00:41 +0000
Manifest this update: Sat 16 May 2026 18:00:41 +0000
Manifest next update: Sun 17 May 2026 18:00:41 +0000
Files and hashes: 1: 1-bR6sRmqVUM--gERBLCMb9Ravtw.roa (hash: IEQS2o9NuZUHyISNsWvFCuuFh71uq4ILP2ZvrrGr1Uc=)
2: HsBDSlw88jdMo2AzGSaufSSsNFs.crl (hash: yTf3STlXlqCsa+sKnycMD3DtgJxO+PELFnPlbAM5h1o=)
3: vbqC7dnIYforI52OCrB0B1B9v_E.roa (hash: l+1hvAkiSw6p++rx/Ga348Dp115kPP0Bh0QVsqmz+I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f2:95:65:ef:5a:eb:b7:56:ec:68:00:0b:25:01:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Validity
Not Before: May 16 18:00:41 2026 GMT
Not After : May 17 18:00:41 2026 GMT
Subject: CN=a45bfb8a40193aa7ee99652316df5e238fa00215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d3:f6:52:fb:4a:24:06:fc:5a:dc:6b:40:7b:
64:29:f1:a4:35:41:37:df:e7:5b:97:dc:42:d1:6c:
ac:b0:20:b7:0b:89:65:d1:63:f5:09:cb:39:ca:81:
f4:f6:ff:83:75:fb:7b:74:68:03:47:66:a1:6d:b7:
a3:8b:5d:27:b7:ae:84:fe:7c:a7:7a:95:b8:4e:4e:
da:98:5e:ff:26:45:86:31:d3:83:17:c6:18:d1:35:
4a:52:bb:8a:b8:58:ee:34:e4:47:e8:0b:a0:76:ce:
97:3e:e1:1d:d7:01:25:9b:ae:f1:7d:11:42:d3:1a:
35:ab:1a:f7:63:2e:06:d6:6b:fa:5f:7f:4b:e6:f9:
f4:51:0e:b3:be:aa:c2:08:16:7a:57:59:7d:0f:3c:
92:44:04:b0:01:f1:d4:1c:c5:28:e2:e9:39:c8:72:
b9:95:07:96:32:05:04:9f:0b:ba:4e:7e:f5:d6:14:
72:1b:11:96:a3:52:4a:e0:41:20:eb:6b:a5:c2:cc:
7e:76:b0:5c:35:5d:07:ba:31:14:14:e8:6d:5c:38:
5c:7e:44:28:e1:54:de:f2:f4:32:92:76:46:76:18:
77:16:89:46:b9:7d:c5:06:19:44:9e:10:1e:14:7c:
93:1d:f5:6b:4e:0d:dd:92:2a:e6:bc:b1:a7:69:04:
45:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5B:FB:8A:40:19:3A:A7:EE:99:65:23:16:DF:5E:23:8F:A0:02:15
X509v3 Authority Key Identifier:
keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:e0:de:c3:a6:b7:da:a7:46:22:e5:23:9c:8e:9b:09:b5:08:
50:9b:0b:5e:d9:24:7f:79:11:3c:e0:41:e9:1f:67:b4:f7:cb:
4a:1d:55:3d:18:e0:84:1b:9a:c5:d7:fe:be:c3:71:2f:6a:cc:
f1:77:36:88:25:76:4a:f4:70:95:59:fd:be:42:a5:e4:df:75:
1c:a8:7c:ea:60:46:b3:1c:99:88:54:c9:b8:75:eb:5a:f3:59:
a6:1e:ae:30:b5:32:6d:62:2c:54:8d:31:57:fc:70:4f:f3:1c:
85:de:dc:bb:f3:9c:e1:dc:ea:86:56:69:fa:97:36:9b:21:b6:
54:00:25:9d:42:0e:d4:51:ba:72:27:be:d9:3d:36:9a:0e:25:
eb:f6:3e:21:7e:9b:f4:60:5d:97:3f:87:15:ec:e3:13:75:6c:
80:25:f5:9c:6f:a1:34:45:7d:95:94:bf:88:3e:f5:d0:83:ad:
3b:f9:d6:33:9b:e3:dc:bc:61:78:cb:bb:dc:f8:e2:85:ca:64:
1c:a8:a3:fa:6e:cb:6c:c6:cc:fc:53:38:9e:a6:a6:e2:19:e9:
ee:a0:87:36:6a:b8:f3:41:e3:d2:4b:6b:ea:60:0a:8c:55:ed:
9d:5a:18:7a:79:d9:f7:e0:b2:9d:a0:f6:9d:aa:bb:d0:1b:49:
2c:da:c6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:18:45 2026 by rpki-client