Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
File: h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json)
Hash identifier: HtjSgS+0kBWqWSABfbuWZi9Yi/4NTsLPVykn/2K/nT0=
Subject key identifier: 39:4F:6B:D6:19:1A:E6:03:4C:3F:01:21:4E:6B:27:30:D2:49:F1:22
Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Certificate serial: 019E284B472A0B28FA010890A57EC136D247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
Manifest number: 1910
Signing time: Thu 14 May 2026 21:01:22 +0000
Manifest this update: Thu 14 May 2026 21:01:22 +0000
Manifest next update: Fri 15 May 2026 21:01:22 +0000
Files and hashes: 1: 9qN4udPUuYowf7HliZ_TGQM3Bms.roa (hash: 5MTkrEKeRcydaztC2Vfhe58BESExP2wuV5gzeR4YOSY=)
2: Dtj1m4cKe3GqX6bpwYtVYnUDpiQ.roa (hash: mEvlh065fRebiKkRrPdsUXHfTWLTcYZ3LKAKyBAKzLI=)
3: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: abkAQl/a6sQKj7lXVhDA/epRcvlwlmTUix0sCJEV/gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 21:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:4b:47:2a:0b:28:fa:01:08:90:a5:7e:c1:36:d2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Validity
Not Before: May 14 21:01:22 2026 GMT
Not After : May 15 21:01:22 2026 GMT
Subject: CN=394f6bd6191ae6034c3f01214e6b2730d249f122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:64:cc:aa:d2:02:2f:90:e2:63:3e:8c:47:8d:
53:ec:53:57:0d:a0:b5:e4:c3:87:98:06:df:62:6d:
41:cd:ad:5e:d2:ab:cb:48:bf:32:22:35:5f:1c:4f:
bc:0a:16:27:47:35:31:83:ee:43:c5:5e:fd:17:04:
db:20:37:b5:02:04:6b:5a:c3:81:dd:34:74:5a:88:
76:d0:25:b2:f6:f4:9e:54:16:ac:3f:4b:7a:50:f3:
89:aa:ea:52:13:22:cc:57:bb:8f:93:f8:48:34:cb:
96:8b:84:ae:48:3d:e3:70:39:29:20:e4:ba:71:7a:
46:b1:55:75:f8:c3:43:d4:d5:df:48:80:8f:9b:2b:
d2:90:49:87:84:4d:80:ba:19:2c:98:f2:26:cd:af:
af:c9:17:81:d7:a9:a6:f4:b4:0e:de:84:25:9c:96:
fb:40:b2:4b:73:a1:16:f9:09:42:92:f8:84:24:1a:
e5:ad:68:36:1b:06:75:e5:d4:92:47:b6:bd:d1:2e:
9e:e1:c7:e1:03:07:b6:6f:2a:d2:20:fd:cb:d1:fe:
4e:9c:d8:f2:a6:bb:47:fe:bf:18:d9:98:d2:48:45:
73:b3:a4:ec:7e:5d:26:88:9d:95:5d:26:c3:a8:1f:
5c:47:da:32:6c:c1:8e:35:b8:be:d7:64:e2:26:bc:
94:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4F:6B:D6:19:1A:E6:03:4C:3F:01:21:4E:6B:27:30:D2:49:F1:22
X509v3 Authority Key Identifier:
keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6c:a8:08:9d:b2:3b:f1:39:3f:24:7e:55:65:f7:73:50:65:
2e:ce:6e:01:70:6c:e5:13:f7:04:35:df:e6:b0:35:5d:27:0a:
56:ee:6e:41:dc:e8:f1:36:58:f3:10:dc:69:69:56:4d:06:cc:
55:39:90:dc:49:9e:72:98:b8:f6:7c:25:c3:36:cd:86:68:39:
b7:2d:fa:62:15:6a:ca:84:58:dc:9f:9f:e1:1d:8d:90:ac:39:
44:c7:57:2e:0a:db:f5:84:6c:29:1c:0f:37:78:4c:cc:3c:e5:
82:f9:dc:20:5c:d6:64:19:2b:69:13:d8:48:5e:a0:25:af:96:
5e:73:ba:1e:1e:cf:d6:c0:d3:19:d1:76:b7:28:f8:d6:bf:bb:
97:35:6d:e2:b4:c1:26:1f:32:c1:71:c3:13:1f:fb:99:d8:77:
40:41:98:31:4c:f4:af:e5:7a:a3:a3:5c:70:fb:52:3f:75:c4:
51:51:e9:f2:12:ef:51:1c:89:40:cc:fb:cd:54:7a:96:57:28:
c9:6f:b9:10:60:92:ba:e0:cc:56:1a:cb:f9:1e:e5:ad:31:25:
99:f8:12:37:e5:5c:2d:88:55:41:3a:1a:c4:5a:be:70:21:91:
a9:76:f6:35:7c:ac:4e:20:5a:b6:24:08:85:83:03:3f:0c:6c:
95:d1:e5:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4oS0cqCyj6AQiQpX7BNtJHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZjQxYWUwNzc5ZTM3ZGVmYzY5YjJhNWIwZjdhYjhmZDQw
Y2QzZTcwHhcNMjYwNTE0MjEwMTIyWhcNMjYwNTE1MjEwMTIyWjAzMTEwLwYDVQQD
EygzOTRmNmJkNjE5MWFlNjAzNGMzZjAxMjE0ZTZiMjczMGQyNDlmMTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9WTMqtICL5DiYz6MR41T7FNXDaC1
5MOHmAbfYm1Bza1e0qvLSL8yIjVfHE+8ChYnRzUxg+5DxV79FwTbIDe1AgRrWsOB
3TR0Woh20CWy9vSeVBasP0t6UPOJqupSEyLMV7uPk/hINMuWi4SuSD3jcDkpIOS6
cXpGsVV1+MND1NXfSICPmyvSkEmHhE2AuhksmPImza+vyReB16mm9LQO3oQlnJb7
QLJLc6EW+QlCkviEJBrlrWg2GwZ15dSSR7a90S6e4cfhAwe2byrSIP3L0f5OnNjy
prtH/r8Y2ZjSSEVzs6Tsfl0miJ2VXSbDqB9cR9oybMGONbi+12TiJryUZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlPa9YZGuYDTD8BIU5rJzDSSfEiMB8GA1UdIwQY
MBaAFIf0GuB3njfe/GmypbD3q4/UDNPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xODVjYjUtNDc1Mi00M2I4LThlNDYt
YzQzYWIyYTEyZDU1LzEvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8xODVjYjUtNDc1Mi00M2I4LThlNDYtYzQzYWIyYTEyZDU1
LzEvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGyoCJ2y
O/E5PyR+VWX3c1BlLs5uAXBs5RP3BDXf5rA1XScKVu5uQdzo8TZY8xDcaWlWTQbM
VTmQ3Emecpi49nwlwzbNhmg5ty36YhVqyoRY3J+f4R2NkKw5RMdXLgrb9YRsKRwP
N3hMzDzlgvncIFzWZBkraRPYSF6gJa+WXnO6Hh7P1sDTGdF2tyj41r+7lzVt4rTB
Jh8ywXHDEx/7mdh3QEGYMUz0r+V6o6NccPtSP3XEUVHp8hLvURyJQMz7zVR6llco
yW+5EGCSuuDMVhrL+R7lrTElmfgSN+VcLYhVQToaxFq+cCGRqXb2NXysTiBatiQI
hYMDPwxsldHlng==
-----END CERTIFICATE-----
Generated at Fri May 15 06:58:37 2026 by rpki-client