Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
File: HkXMabTR7hUbUCdEL7upRMJ035c.mft (raw, json)
Hash identifier: maoExvYlUKsWEtKZhABXBoJU28DW2rdkL8lJqa/+nzw=
Subject key identifier: 39:53:C7:83:DE:F3:44:0B:60:BA:F7:0C:35:8B:08:84:64:2D:20:34
Authority key identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
Certificate issuer: /CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Certificate serial: 019E2881C74609E66FF69F68D7C9ADCCD962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
Manifest number: 1887
Signing time: Thu 14 May 2026 22:00:53 +0000
Manifest this update: Thu 14 May 2026 22:00:53 +0000
Manifest next update: Fri 15 May 2026 22:00:53 +0000
Files and hashes: 1: HkXMabTR7hUbUCdEL7upRMJ035c.crl (hash: d3fWNo4W8xFKaYAu0F15oDzixUJflxPAiOAgqLR3zfg=)
2: aZ1Tmj5Fb0n-wAOpGfFgPSrHdBE.roa (hash: Gos9McZbPOXHaQCrEQsYEbpvs5QjrqdpWFlMgXSAVtE=)
3: cmpuXpIT4rvzqBUAC8x_2HfS7ko.asa (hash: oUrQJpTPJIb/YuIVBdY/6NRHdTxNTlQPuGs1oAK8Nmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:81:c7:46:09:e6:6f:f6:9f:68:d7:c9:ad:cc:d9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Validity
Not Before: May 14 22:00:53 2026 GMT
Not After : May 15 22:00:53 2026 GMT
Subject: CN=3953c783def3440b60baf70c358b0884642d2034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:38:ca:45:09:e5:5b:c0:37:d2:b2:57:09:20:
db:d8:2b:49:fb:ac:eb:c0:46:ff:57:7f:47:ef:ff:
93:8d:b8:56:3a:17:ee:bd:ef:29:18:01:29:08:81:
0c:5d:47:ee:e8:ce:ed:33:b5:51:b8:c3:e0:3b:21:
1f:2b:5d:7b:93:d2:2c:f6:3b:a0:ce:45:ec:4a:45:
3e:fc:97:da:06:12:0c:54:0b:47:36:7b:7c:e1:ab:
4e:6b:b3:a3:c4:e5:7c:3a:35:0e:b0:ac:d0:59:9c:
40:f4:d3:9f:51:09:1c:ee:b0:c9:50:e0:d4:67:11:
f8:6b:27:a5:0c:fd:a1:1a:50:f6:eb:4a:9c:fc:49:
49:59:ae:4a:c1:a1:06:f5:e2:4e:32:39:4b:da:3f:
ba:3e:33:b0:d2:38:96:32:e1:90:81:76:24:5e:27:
eb:c2:c2:c1:79:6a:10:2a:4c:e2:84:41:da:e3:fe:
a2:47:74:32:d5:c2:52:4f:65:65:4e:31:11:7d:70:
d2:7d:22:b8:c8:40:6e:87:48:ee:43:3f:3c:04:ac:
1b:2a:15:64:9a:2b:93:c5:51:6d:4e:54:e7:63:29:
8e:e0:8f:5c:c9:b5:82:6c:2a:a6:1a:99:47:fd:4a:
1a:3d:e9:25:27:e9:95:74:54:86:b9:e4:b9:50:0c:
eb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:53:C7:83:DE:F3:44:0B:60:BA:F7:0C:35:8B:08:84:64:2D:20:34
X509v3 Authority Key Identifier:
keyid:1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:09:b1:fc:bf:25:26:c8:b6:32:34:6f:0e:86:ab:56:c6:a5:
98:d5:9b:85:08:09:61:33:8b:e1:63:ea:f8:fb:5d:10:e7:c4:
a4:d6:82:77:15:ad:c7:a8:9d:fb:8e:5a:ea:c6:77:e8:34:1f:
83:0d:73:bf:62:a3:b6:22:8b:29:75:d2:4e:84:bb:c2:42:c1:
eb:14:38:dd:44:8d:7d:2e:96:f2:5e:7d:e2:eb:af:9b:18:4c:
70:2f:7c:a3:0c:0b:6a:2b:aa:fc:98:14:54:80:be:0b:f6:0c:
0f:9c:35:06:17:28:67:3b:88:9f:58:01:64:22:bb:2a:f0:03:
ba:e2:13:94:be:71:08:14:f8:58:6b:bd:0a:6d:cf:33:c8:85:
ef:ee:bf:37:e3:ad:ff:f1:18:d5:4c:a1:3f:df:cb:83:b0:ec:
13:dc:1e:b6:39:25:60:c3:39:36:2e:e2:e2:d7:a5:23:5d:b5:
a1:48:7b:e6:45:28:fc:11:34:9b:b7:27:8c:c6:c6:1a:47:35:
b9:ad:48:fa:e6:22:6a:ee:fd:5e:67:2e:d9:13:a5:e6:54:90:
1e:42:ac:2c:20:dd:7a:cf:dc:c2:ff:41:1a:fa:cc:86:8b:07:
88:25:49:f5:83:c4:37:85:ed:14:eb:a4:ac:86:c2:ff:a3:dd:
34:c3:2e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:01:46 2026 by rpki-client