Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
File: hJICE8sjC_5REhzl-03s4oAYvtA.mft (raw, json)
Hash identifier: Mx23b+TXjzaZtKs71LC/fgMADo77g0Mm04+Bg47A59Y=
Subject key identifier: A7:0A:90:53:B9:91:2B:C1:8F:98:1F:E0:48:30:5A:2D:6D:28:F9:F6
Authority key identifier: 84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
Certificate issuer: /CN=84920213cb230bfe51121ce5fb4dece28018bed0
Certificate serial: 019E2D03905DF1EC7FA45AC0FF52D2D57819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
Manifest number: 190D
Signing time: Fri 15 May 2026 19:01:08 +0000
Manifest this update: Fri 15 May 2026 19:01:08 +0000
Manifest next update: Sat 16 May 2026 19:01:08 +0000
Files and hashes: 1: hJICE8sjC_5REhzl-03s4oAYvtA.crl (hash: UC0FGvVPyfZoXhGWwMLgwv6Vssw4A5NPBwAK5yKncZY=)
2: z_fYCrrGSV54cj1knb3xBk4SK5U.roa (hash: EFlql6uKuI4YQL66OtBnNw+c0chssYW8DVC7ieJRlbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2d:03:90:5d:f1:ec:7f:a4:5a:c0:ff:52:d2:d5:78:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84920213cb230bfe51121ce5fb4dece28018bed0
Validity
Not Before: May 15 19:01:08 2026 GMT
Not After : May 16 19:01:08 2026 GMT
Subject: CN=a70a9053b9912bc18f981fe048305a2d6d28f9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:26:9b:9c:60:68:fc:93:df:da:3a:f1:26:b6:
bb:2e:f1:4e:16:d6:c7:6b:48:98:07:0c:7b:5e:2b:
91:a4:32:7c:ae:24:25:54:99:ba:4c:42:89:67:32:
1b:13:4a:1a:93:b0:54:e1:51:1b:5d:fb:ea:fb:77:
f3:57:f2:4a:d8:3e:b0:82:3c:d9:f3:bb:24:58:f4:
4c:b0:e6:bf:6c:e3:24:89:b8:07:f7:c5:3f:ed:4c:
d4:f0:00:b9:f3:ca:41:05:dd:68:7e:fc:99:5b:3c:
b7:e8:cd:79:a1:64:40:26:ad:de:af:f7:61:4a:ea:
63:84:79:82:ae:e8:3f:69:e9:fc:a4:28:12:a9:ce:
a7:4f:55:d1:24:b2:29:ab:65:e2:df:15:89:0d:a0:
33:35:87:f4:95:9f:fd:ef:01:5b:9c:e2:b5:e4:d2:
ca:f2:1e:ed:f2:21:ad:55:15:c0:00:c5:d3:e2:b7:
7f:d8:1d:c4:1c:a4:c3:63:56:f3:34:73:72:7c:09:
77:a7:3c:14:41:38:24:6f:c3:74:e7:8c:2e:65:c7:
3c:9e:08:de:2d:1e:88:d4:fa:88:21:4d:43:0f:ca:
8d:13:5c:97:6f:0c:80:67:df:74:a5:45:a9:99:3a:
50:8b:76:14:21:35:5d:0a:c1:b9:66:30:29:7a:b8:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0A:90:53:B9:91:2B:C1:8F:98:1F:E0:48:30:5A:2D:6D:28:F9:F6
X509v3 Authority Key Identifier:
keyid:84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f2:3b:d5:14:98:5a:e0:e3:40:92:82:68:b0:b4:5c:39:7d:
5e:db:fd:e4:01:67:73:14:c6:6b:c2:de:d8:e7:84:dc:0a:eb:
c1:f8:e8:4f:9f:21:62:e7:1d:a1:0d:8e:ab:ec:7b:76:a1:47:
06:52:d5:50:f3:a7:d1:2f:79:de:8b:6e:2c:c8:58:67:5e:0a:
91:1f:a3:bb:b1:18:1c:85:3d:a3:f6:93:90:61:bc:31:c4:10:
ce:bc:21:5f:1e:c7:00:3c:66:2e:16:81:1b:f1:27:a1:48:08:
07:4e:26:93:e3:87:3e:70:7b:2c:65:49:2e:e0:c3:6f:f7:c3:
59:8a:51:b5:97:43:16:7a:11:d5:79:41:86:e2:97:b3:c6:b6:
35:c3:db:76:f0:ba:af:6a:55:05:9d:2c:07:da:29:c0:24:36:
0c:8b:e0:05:71:c8:e7:a5:06:40:f8:d0:10:0e:96:a4:08:6d:
36:16:9c:0e:5b:1d:10:9c:a9:b5:a3:dc:a0:ca:5c:72:9f:68:
5d:fd:57:cb:7c:78:d1:5e:db:77:bd:ca:5f:f6:08:ef:bd:94:
80:06:58:0a:f3:da:2f:fb:9e:98:54:92:df:08:27:24:72:e6:
57:1c:e5:ed:79:b9:ff:44:61:1b:2b:f5:8b:c9:cd:29:73:19:
7c:08:1a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 21:08:05 2026 by rpki-client