Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
File: h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft (raw, json)
Hash identifier: TMx1S2nto51xs/XtILXm7Hz5bRTSJDUkNxKqXC9sk1o=
Subject key identifier: 88:9C:2F:7B:18:1F:FE:B3:3C:6B:1B:42:7F:18:7C:25:F8:44:9C:61
Authority key identifier: 87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
Certificate issuer: /CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Certificate serial: 019E28EF95CF5B34D0443DD2F5CB1175886A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
Manifest number: 1280
Signing time: Fri 15 May 2026 00:00:50 +0000
Manifest this update: Fri 15 May 2026 00:00:50 +0000
Manifest next update: Sat 16 May 2026 00:00:50 +0000
Files and hashes: 1: 4fVpw4jDmLgLlVEJ14HcYjkhURc.roa (hash: OgxhauoTFqD32kP7fqq3sMCVlZur9FHQRJ/kNIVIhFQ=)
2: h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl (hash: kjpghPCHRro5iRaMXvM+lafs1S8WATjKUiqIheaTQPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:ef:95:cf:5b:34:d0:44:3d:d2:f5:cb:11:75:88:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Validity
Not Before: May 15 00:00:50 2026 GMT
Not After : May 16 00:00:50 2026 GMT
Subject: CN=889c2f7b181ffeb33c6b1b427f187c25f8449c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:96:2c:9e:bc:06:09:fe:c9:2d:72:89:2c:
6b:4b:aa:84:f3:e8:90:d5:fe:54:0e:89:8b:9e:6a:
d4:65:1f:70:d7:aa:90:ff:5f:da:4b:e0:d6:20:0e:
94:bd:c9:69:dc:6b:9c:dc:88:a8:7c:c9:c1:7f:9c:
63:60:c0:34:75:92:96:9e:b6:cd:26:b5:6a:40:3d:
8f:e9:78:5f:f6:1a:df:2d:2d:f7:d0:92:38:ad:3c:
f9:0e:8d:65:01:cb:8d:44:e4:c8:32:51:e5:d5:41:
04:7f:44:4d:ad:a4:e3:30:2c:6e:85:82:0e:cf:6f:
da:6e:e1:aa:ae:88:4d:03:34:06:d8:9f:14:24:04:
17:13:21:d9:56:85:f0:56:5a:46:75:b0:48:47:28:
09:8b:71:ec:2e:f2:83:33:56:97:b7:80:6b:61:7f:
43:8d:ec:36:91:4d:b3:84:cf:d5:de:ca:e6:56:d0:
16:f9:4a:ee:27:de:dc:f9:3c:33:8a:68:ed:f5:e0:
5e:b3:f2:8e:66:de:ff:7e:72:0f:61:a4:4b:3d:1a:
4f:39:b6:bb:fb:a9:3c:35:1b:7b:4e:d2:88:8b:de:
48:8b:65:80:5d:bb:2c:b2:33:71:e8:12:de:4b:d6:
b0:a4:14:9e:8f:5d:95:b8:67:ef:3c:f7:d1:29:b7:
25:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9C:2F:7B:18:1F:FE:B3:3C:6B:1B:42:7F:18:7C:25:F8:44:9C:61
X509v3 Authority Key Identifier:
keyid:87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9c:0e:20:42:b6:d0:ae:b3:16:79:46:63:6f:c2:36:33:61:
05:58:3a:ac:91:27:20:f9:11:39:05:c1:a5:5d:98:72:ee:61:
b0:07:69:8e:60:59:6e:06:ed:97:ac:6a:9c:69:bb:2a:b3:d2:
34:fc:81:05:84:fe:c4:3c:c3:0d:d3:f6:c9:14:40:03:c5:53:
cb:62:a0:ac:9f:87:32:3c:c9:4e:ac:c3:6f:9f:df:3c:d0:9c:
a1:9e:69:95:31:1a:ed:79:07:24:5f:32:65:d4:59:51:a1:ab:
54:1f:38:8b:82:7a:d4:8f:fb:89:11:4e:6b:8c:17:14:f3:a6:
56:2b:cf:de:bd:6c:e6:f5:e5:c0:6f:84:62:d4:0f:a0:ef:db:
84:45:2e:86:12:71:03:b3:14:c9:7d:76:3a:f3:af:90:30:9d:
3f:c0:b8:c7:21:a7:25:a6:4e:3f:08:30:98:24:5c:41:1e:93:
25:84:19:b7:98:e0:6c:cd:30:2e:68:6c:31:2c:f7:2f:32:b6:
fa:1f:26:2c:03:b8:ae:ad:bd:6e:44:ce:2e:da:fb:47:51:9a:
0e:20:dd:77:2c:16:ef:d8:10:fc:ea:0e:2c:04:e9:98:e2:87:
d2:ff:f7:ee:b8:d2:4b:03:73:97:bb:42:81:dc:16:1b:a3:2e:
90:87:8a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:57:13 2026 by rpki-client