Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
File: 0haCh3tsivdeJ2DPhUDnhFLUvsA.mft (raw, json)
Hash identifier: xVaEUhTWD+l0T6/y76qepipBHonQ8vxAr7VObS0uMWo=
Subject key identifier: 19:D8:5A:3C:64:7C:B6:AC:80:15:B9:40:54:78:0A:3C:82:0D:78:35
Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Certificate serial: 019E2F969007F1A911A345801253F94FBCE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
Manifest number: 0E32
Signing time: Sat 16 May 2026 07:00:56 +0000
Manifest this update: Sat 16 May 2026 07:00:56 +0000
Manifest next update: Sun 17 May 2026 07:00:56 +0000
Files and hashes: 1: 0haCh3tsivdeJ2DPhUDnhFLUvsA.crl (hash: KYY3snnp54K5w3vzdVMS/uVRHlSTDM3hAxEG4VllNVU=)
2: NiVW-1DlGr5hCTPyCnLWhfcQSJ0.roa (hash: P0xJoWIH1C9Cod99ksa8hxvCHok9B+UC8X73hnLeN0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:90:07:f1:a9:11:a3:45:80:12:53:f9:4f:bc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Validity
Not Before: May 16 07:00:56 2026 GMT
Not After : May 17 07:00:56 2026 GMT
Subject: CN=19d85a3c647cb6ac8015b94054780a3c820d7835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e8:2d:64:9c:bd:8e:b9:b7:33:25:99:3f:f5:
de:ac:73:17:9b:4b:60:0f:95:25:37:69:ab:f7:d9:
c0:59:23:79:16:ea:df:24:77:59:72:16:2d:ee:8c:
c4:16:59:ad:4c:87:82:24:99:14:6f:24:dc:96:5f:
b1:9c:fc:14:86:fd:1d:89:d0:be:57:80:8b:3c:a7:
ce:59:06:11:cc:0c:94:50:07:d5:c9:40:99:38:ef:
cd:1b:7b:f4:71:bf:df:a5:c4:1f:71:67:37:3e:cd:
20:e7:90:ac:4b:23:dd:63:8a:e4:a5:27:02:6e:23:
70:33:2f:d9:f6:13:c1:01:52:77:71:e0:32:d1:e9:
c6:d5:56:ed:95:7d:bd:20:99:31:8a:c9:7f:c0:44:
30:80:be:dd:24:90:d0:ec:dc:3f:3e:e9:5b:9e:23:
a4:24:28:3d:c1:e6:5b:71:ae:30:2f:94:ad:df:06:
28:69:db:5e:9a:43:b8:15:b3:4c:26:7f:cb:58:e7:
09:38:62:88:89:50:b2:0f:c0:1d:a8:da:d5:9a:d9:
70:49:46:3a:f1:08:9a:65:d4:74:32:1a:3b:c7:61:
89:20:40:1c:23:80:d0:3d:22:23:e9:49:94:10:92:
2b:b6:e4:25:b6:ae:c6:a1:a5:d5:87:6a:9a:f0:a7:
9c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D8:5A:3C:64:7C:B6:AC:80:15:B9:40:54:78:0A:3C:82:0D:78:35
X509v3 Authority Key Identifier:
keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:55:9c:47:08:61:80:8d:f0:b2:6e:8f:27:7b:ba:f7:43:32:
45:c2:a4:5c:33:7f:f3:c0:e5:06:e5:1e:ba:6a:26:60:d0:f8:
4f:e6:cc:7b:87:06:56:db:cb:04:2b:b6:19:ce:24:80:b6:05:
7c:b5:b8:a4:39:38:85:c8:3b:bc:b8:f0:04:d3:6a:05:ca:c9:
0e:b3:3c:10:db:b9:e8:80:c2:84:1b:3c:99:88:9a:0d:a7:c8:
4d:d8:9b:ec:3b:0d:8f:fa:28:70:3d:42:fd:82:13:6b:76:bb:
36:ce:ea:62:72:3d:ff:b8:73:ca:cd:68:66:1b:ca:ab:43:3c:
b2:1c:f5:c9:a2:b2:6d:a4:8e:3b:ba:a5:6d:9f:32:9b:a9:56:
02:b4:1b:96:57:b9:b3:25:83:d6:88:5c:43:84:de:63:df:f6:
dd:56:24:4c:51:18:a3:e7:8b:80:22:f1:0f:0f:81:b3:40:d5:
94:39:9c:54:bc:13:3c:d0:c9:59:ce:47:ef:fa:53:2d:ed:06:
ad:49:3c:c7:61:81:50:1d:11:da:7d:f4:b2:a2:76:e4:fb:b5:
78:8d:40:56:75:59:f4:4c:b3:01:e2:65:d4:61:66:c3:40:1b:
54:d1:ca:89:c3:91:5e:06:0a:3e:76:4d:49:4c:94:75:b9:77:
9b:35:3a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:16 2026 by rpki-client