Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
File: cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft (raw, json)
Hash identifier: zbxK12Y03jBLQuTFTaMjAa9EKF5SGQL2e0zjUIqAky8=
Subject key identifier: D9:8D:5B:78:8E:AD:95:53:20:FD:4C:88:E6:40:BD:EA:B6:1A:48:3A
Authority key identifier: 70:72:13:4A:22:55:58:0A:91:F0:69:36:CF:82:FB:00:23:F0:6C:42
Certificate issuer: /CN=7072134a2255580a91f06936cf82fb0023f06c42
Certificate serial: 019E28EFBC1DFBEDED4219856139E9533F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHITSiJVWAqR8Gk2z4L7ACPwbEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
Manifest number: 10
Signing time: Fri 15 May 2026 00:01:00 +0000
Manifest this update: Fri 15 May 2026 00:01:00 +0000
Manifest next update: Sat 16 May 2026 00:01:00 +0000
Files and hashes: 1: FqLPIuiuf3FMQdS1IMwY2X53Wh4.asa (hash: k6jbSsVlZa6tcwSHCE0IU1r4vopkE/P0K21AZZnjq/w=)
2: cHITSiJVWAqR8Gk2z4L7ACPwbEI.crl (hash: wpAu23aA+J/6g77Te1rGyV81VpyaYt0h3/ftais1tv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHITSiJVWAqR8Gk2z4L7ACPwbEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:ef:bc:1d:fb:ed:ed:42:19:85:61:39:e9:53:3f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7072134a2255580a91f06936cf82fb0023f06c42
Validity
Not Before: May 15 00:01:00 2026 GMT
Not After : May 16 00:01:00 2026 GMT
Subject: CN=d98d5b788ead955320fd4c88e640bdeab61a483a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:aa:f3:0b:f8:b2:95:a9:e0:5a:d3:df:0e:7f:
14:91:b1:ca:f7:c5:e7:80:b5:5f:d7:48:a5:61:93:
89:1d:e4:ac:43:c0:c9:da:10:11:1d:af:31:c6:32:
61:3e:d6:f0:8e:80:74:d3:73:38:04:df:e9:ae:06:
05:58:e0:39:65:b5:63:44:d7:8a:fe:d0:1f:2e:fd:
27:2c:9c:da:0d:ec:fa:6d:da:dd:6e:e5:41:63:d1:
f2:95:74:ea:34:4f:b3:7e:37:e5:8f:e4:d9:52:4e:
53:28:67:63:4e:01:c0:a3:e1:bd:d0:6a:e4:a3:ac:
4a:d2:13:4d:db:bb:8c:0f:43:e2:0a:ec:19:53:69:
1f:d7:ae:1d:34:b9:f6:a4:48:69:4c:3e:5d:75:51:
52:d3:63:35:b7:0b:d5:0f:9d:c5:b2:26:0d:4a:d6:
ad:ce:9d:3b:a9:10:fa:3e:43:8d:e0:62:6e:50:07:
26:39:36:0a:3c:9f:45:a5:a2:98:c0:0d:70:47:4b:
8d:86:de:96:ee:33:fa:93:dd:cb:72:63:3c:af:28:
93:3e:b3:c9:8a:59:f2:5a:55:69:c2:c8:65:47:bc:
5b:30:2a:5e:47:54:a2:c7:b5:e2:bf:31:e3:cd:d7:
ec:03:40:5f:eb:e7:3e:aa:51:54:98:9b:53:ae:c7:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8D:5B:78:8E:AD:95:53:20:FD:4C:88:E6:40:BD:EA:B6:1A:48:3A
X509v3 Authority Key Identifier:
keyid:70:72:13:4A:22:55:58:0A:91:F0:69:36:CF:82:FB:00:23:F0:6C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHITSiJVWAqR8Gk2z4L7ACPwbEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:58:32:16:fd:da:c1:57:9d:78:44:e4:30:b0:bb:36:46:3d:
6a:ce:fa:d8:d9:fb:4b:c2:aa:b0:96:3b:76:e5:d6:a0:76:13:
07:5f:44:19:b0:c7:29:75:3f:89:bb:8b:19:d8:89:62:25:a9:
39:92:8b:83:98:05:3e:7e:16:da:76:9f:d2:61:f9:f7:d1:a1:
19:89:73:ed:b6:55:d8:e6:bb:44:27:27:3e:2a:b8:7f:63:4b:
84:39:95:f7:76:bc:b5:20:8b:67:88:3b:f1:87:87:05:ea:a9:
d2:9a:5f:bc:6f:38:a2:b6:b1:40:5a:de:5b:77:42:98:d8:7e:
fe:11:69:85:65:f7:c3:0f:60:f3:7a:b8:e7:62:7d:ad:bb:a3:
d9:60:dd:e6:3e:a8:c4:ad:88:1a:ae:eb:57:46:4a:eb:f2:38:
a7:80:14:06:1a:80:6d:2e:47:f0:c8:36:38:6c:2f:8d:c3:94:
a6:c0:b2:32:eb:30:21:82:0c:53:23:42:0c:98:59:86:89:8b:
c8:d3:fc:0e:5f:b9:8f:ca:36:d5:07:6b:0e:f0:a2:f1:f0:7d:
bf:3b:be:46:e4:cd:9a:93:f2:91:a0:5a:03:18:37:74:1d:56:
79:b3:fe:6b:99:fc:ea:29:ff:89:c6:ed:1d:cc:32:09:1b:d7:
ea:94:d9:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4o77wd++3tQhmFYTnpUz9pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNzIxMzRhMjI1NTU4MGE5MWYwNjkzNmNmODJmYjAwMjNm
MDZjNDIwHhcNMjYwNTE1MDAwMTAwWhcNMjYwNTE2MDAwMTAwWjAzMTEwLwYDVQQD
EyhkOThkNWI3ODhlYWQ5NTUzMjBmZDRjODhlNjQwYmRlYWI2MWE0ODNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnarzC/iylangWtPfDn8UkbHK98Xn
gLVf10ilYZOJHeSsQ8DJ2hARHa8xxjJhPtbwjoB003M4BN/prgYFWOA5ZbVjRNeK
/tAfLv0nLJzaDez6bdrdbuVBY9HylXTqNE+zfjflj+TZUk5TKGdjTgHAo+G90Grk
o6xK0hNN27uMD0PiCuwZU2kf164dNLn2pEhpTD5ddVFS02M1twvVD53FsiYNStat
zp07qRD6PkON4GJuUAcmOTYKPJ9FpaKYwA1wR0uNht6W7jP6k93LcmM8ryiTPrPJ
ilnyWlVpwshlR7xbMCpeR1Six7XivzHjzdfsA0Bf6+c+qlFUmJtTrsdmDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmNW3iOrZVTIP1MiOZAveq2Gkg6MB8GA1UdIwQY
MBaAFHByE0oiVVgKkfBpNs+C+wAj8GxCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0hJVFNpSlZXQXFSOEdrMno0TDdBQ1B3YkVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mMzE3MGItYzkyNC00ZGZhLWIyNmIt
Njc5OTZhNzQzZjI2LzEvY0hJVFNpSlZXQXFSOEdrMno0TDdBQ1B3YkVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mMzE3MGItYzkyNC00ZGZhLWIyNmItNjc5OTZhNzQzZjI2
LzEvY0hJVFNpSlZXQXFSOEdrMno0TDdBQ1B3YkVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAflgyFv3a
wVedeETkMLC7NkY9as762Nn7S8KqsJY7duXWoHYTB19EGbDHKXU/ibuLGdiJYiWp
OZKLg5gFPn4W2naf0mH599GhGYlz7bZV2Oa7RCcnPiq4f2NLhDmV93a8tSCLZ4g7
8YeHBeqp0ppfvG84oraxQFreW3dCmNh+/hFphWX3ww9g83q452J9rbuj2WDd5j6o
xK2IGq7rV0ZK6/I4p4AUBhqAbS5H8Mg2OGwvjcOUpsCyMuswIYIMUyNCDJhZhomL
yNP8Dl+5j8o21QdrDvCi8fB9vzu+RuTNmpPykaBaAxg3dB1WebP+a5n86in/icbt
HcwyCRvX6pTZjQ==
-----END CERTIFICATE-----
Generated at Fri May 15 06:14:50 2026 by rpki-client