Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
File: h5TVZDYKUh21mK7m5qL41mkhtsU.mft (raw, json)
Hash identifier: 5+CF428ebDz84eYP201lAeKVKfy4C4aiJXrVnvD7npo=
Subject key identifier: FE:BE:56:35:77:C8:95:17:DE:D2:AA:F0:57:35:41:29:E0:46:3D:8B
Authority key identifier: 87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
Certificate issuer: /CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Certificate serial: 019EB87CF9AAEBFE9EC0245FCD7211A59C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
Manifest number: 01D9
Signing time: Thu 11 Jun 2026 21:00:58 +0000
Manifest this update: Thu 11 Jun 2026 21:00:58 +0000
Manifest next update: Fri 12 Jun 2026 21:00:58 +0000
Files and hashes: 1: h5TVZDYKUh21mK7m5qL41mkhtsU.crl (hash: QLVuwfgrp5CwSd9EcTH3MTD/tQdrckelp6R8vJcX4lU=)
2: l_d_CxebXDc82wsd4U0BFVkGTh0.roa (hash: uFClusAny8IXHB2cwB2oabcg7BQ3SgYHOlNBk9mPDms=)
3: qGufgpnXsdA505UL9rLMl_XkECY.roa (hash: J3gwk0cVtFF6iJ602SqYnRybno+t/W1jMS3C5xgfXqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:f9:aa:eb:fe:9e:c0:24:5f:cd:72:11:a5:9c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Validity
Not Before: Jun 11 21:00:58 2026 GMT
Not After : Jun 12 21:00:58 2026 GMT
Subject: CN=febe563577c89517ded2aaf057354129e0463d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a7:83:2d:51:cf:e8:e9:d2:e9:f6:7e:8e:cd:
da:de:34:97:89:84:e3:db:99:25:b8:58:90:57:be:
87:39:e3:61:01:f6:c4:d3:9d:22:c0:be:fe:00:2f:
3a:61:0d:f3:d9:11:df:c0:98:16:c1:76:45:e1:71:
01:e8:56:90:6f:17:ff:8a:0d:7e:ac:bf:e2:2b:5b:
f5:d3:e2:e4:e6:8a:69:ee:e6:ef:ce:d3:fe:ea:ee:
d8:57:c8:62:32:2f:e9:84:63:ec:f7:4b:f3:10:1c:
38:35:f3:73:71:0c:02:a2:93:3f:3a:9d:18:57:68:
a8:1b:9d:c8:a8:10:16:aa:17:e1:d6:70:75:01:34:
70:e8:bb:6c:05:c0:4d:46:c3:a6:4a:ca:0b:09:fb:
a8:ad:14:61:8c:aa:d6:a0:8a:4e:9c:e7:18:e1:b7:
11:26:4f:de:19:ba:a8:2a:ba:9c:b5:b5:d3:01:65:
0a:4e:32:41:65:bd:7e:8b:a5:d2:35:58:d0:03:a2:
57:e8:42:31:b9:65:82:59:98:67:98:ff:06:a9:b3:
6f:e3:b3:8a:fc:cf:c5:9a:bb:61:5a:e9:c1:2c:ac:
8a:64:17:0d:05:56:cf:70:77:22:40:67:97:31:0b:
60:ff:10:32:81:88:d4:4f:1e:ae:63:d2:78:b7:cd:
b5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BE:56:35:77:C8:95:17:DE:D2:AA:F0:57:35:41:29:E0:46:3D:8B
X509v3 Authority Key Identifier:
keyid:87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:07:2e:28:2a:9b:8a:97:42:9e:88:14:2f:45:af:54:8d:35:
d0:fc:c4:7d:96:94:20:7c:bf:e8:cf:e5:91:6d:40:8e:35:af:
a1:9a:6d:80:3b:94:f6:ca:09:2b:14:c9:26:03:aa:33:2c:b2:
33:8b:f0:28:f8:ed:6c:e5:96:7d:3c:f9:01:07:01:7d:8d:da:
13:f4:e5:ba:8a:ac:f4:c6:31:67:25:7b:76:a1:2b:74:70:5b:
bc:7d:45:7b:f8:34:7e:56:9b:20:e2:37:36:6a:aa:0e:94:14:
a1:a5:4b:36:94:e6:8d:15:39:02:55:df:3b:da:3c:ef:e9:20:
79:d2:39:c9:f9:1d:43:82:19:03:df:ad:b8:da:0a:db:dd:e1:
d9:1f:b3:9f:e5:7d:8d:f9:b1:be:76:c1:0f:bb:4b:ab:8f:3f:
10:52:8d:3d:51:f9:63:39:6f:dc:4e:5b:fc:d9:e7:54:98:17:
88:df:ca:43:b8:c5:c9:1a:d3:d9:35:3d:71:00:aa:8b:0a:fe:
27:dd:f8:6f:c2:9a:67:a0:20:d2:36:c5:32:a5:e3:df:cd:e7:
68:20:6d:c1:1b:ed:e5:cf:b9:78:2c:81:96:73:8f:61:2a:9b:
62:dd:d0:17:2c:80:f1:39:1f:31:9f:46:e0:27:93:2d:80:f1:
45:18:2c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:46:04 2026 by rpki-client