Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
File: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft (raw, json)
Hash identifier: jccWi/2NwSe5Af+1Sf3XJfbAN/gM1IpQY766DaK9Mj8=
Subject key identifier: 4D:1B:F3:27:FD:3A:E7:D2:F8:3F:23:1D:5A:4D:6A:6E:D2:BA:99:35
Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
Certificate issuer: /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Certificate serial: 019E909307D6342FED59920271D3D274B40F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
Manifest number: 17D9
Signing time: Thu 04 Jun 2026 03:00:15 +0000
Manifest this update: Thu 04 Jun 2026 03:00:15 +0000
Manifest next update: Fri 05 Jun 2026 03:00:15 +0000
Files and hashes: 1: 4KbAohA8ssFR1i33E3s1iD_d4NM.roa (hash: hNIZfJq4/MLB3UNEqiTbF6882A38pDgGoQNN1odn41g=)
2: 63y8SGT1xErvBSh2Z_hJttu62lM.roa (hash: JI2NXJcRm68/TBBkycOEqEDZ5p5swkLFyZRc8a9XM30=)
3: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl (hash: Luvd3vJ66RtoTYaeU/FpopTtSVAWA1F7ki1tLLCM4hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:93:07:d6:34:2f:ed:59:92:02:71:d3:d2:74:b4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Validity
Not Before: Jun 4 03:00:15 2026 GMT
Not After : Jun 5 03:00:15 2026 GMT
Subject: CN=4d1bf327fd3ae7d2f83f231d5a4d6a6ed2ba9935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:2d:5d:e0:a6:ec:30:9d:68:fe:f6:ce:8c:
a1:fd:6a:63:24:e7:be:56:f5:d7:5c:fe:d2:ab:bb:
ca:23:2e:3b:93:22:97:84:d7:42:47:e9:0f:a4:8b:
19:91:9f:90:5c:14:21:3a:97:73:1a:1a:74:19:03:
64:01:00:8f:70:c0:55:48:44:92:09:a4:c3:ff:5f:
1e:1e:c4:e8:3c:ed:77:fa:5f:d8:b6:af:d4:3b:a8:
36:79:76:49:75:60:1d:0c:17:9a:ac:f4:01:89:7b:
28:aa:16:e8:49:24:4f:6c:6f:cb:6b:d9:3d:2c:35:
78:cf:33:83:4c:ac:41:53:8c:ac:64:9f:6a:7a:5c:
c1:af:9b:62:0f:a9:c2:09:10:ef:07:4d:0f:a2:2c:
fa:de:b0:9e:66:3f:a3:3a:49:a5:34:7a:dc:3b:f1:
95:e5:cb:02:94:72:c1:a1:c3:bb:c0:36:66:74:0e:
23:9d:a3:c6:15:8c:7a:b2:b2:31:9b:2a:89:18:19:
ad:c8:20:83:00:4e:7a:a8:d8:11:da:81:b2:6a:59:
18:e8:ac:88:4b:4b:35:2f:5c:b5:05:54:87:88:b7:
f4:df:2a:14:49:e1:8f:f6:78:75:b6:5b:84:3c:b3:
ba:5c:90:67:6d:84:92:83:2d:45:3f:49:e1:87:10:
f6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1B:F3:27:FD:3A:E7:D2:F8:3F:23:1D:5A:4D:6A:6E:D2:BA:99:35
X509v3 Authority Key Identifier:
keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:87:bb:1c:4e:66:f1:9f:05:7e:12:5f:44:a0:7d:6f:6f:45:
b4:24:ed:dc:a5:b8:ac:57:45:24:10:32:25:0d:0e:34:03:c3:
79:fd:18:74:a5:03:ff:7a:a4:27:c2:07:73:1b:b5:8e:fe:88:
07:9f:d6:7a:74:a3:8f:2e:51:74:ce:11:c8:fc:4c:e6:97:4c:
ff:84:c5:e3:6c:ef:bc:d4:2f:20:fa:26:28:3b:28:77:4f:fb:
3b:11:52:c8:f8:f2:5c:6d:9c:46:92:7f:d5:a4:3e:88:7b:45:
24:e6:89:9a:57:84:a8:69:20:6d:00:0d:b6:9c:32:9b:25:d3:
bd:1e:79:d9:fe:05:8c:75:8a:57:8d:39:45:ec:3c:14:53:ae:
62:bd:8e:2d:a2:1d:fb:88:8b:93:32:2c:d6:68:d1:28:bd:85:
7f:65:c1:f0:21:7b:fe:76:fc:c6:1a:e7:79:e2:ec:41:db:4c:
e0:6c:15:4e:5f:c0:89:ae:e6:15:15:e8:54:81:8a:84:07:62:
0a:c5:73:5d:80:40:cc:f5:d2:3a:fe:71:4d:20:75:ed:4f:7b:
89:46:00:da:49:71:74:e8:83:70:fd:73:37:90:2f:5a:be:33:
48:a2:2e:7e:17:21:d2:d9:24:15:1d:b5:d8:84:0e:d8:b4:a2:
df:49:d4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:28 2026 by rpki-client