Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
File: dT1Hbblt4eWGIxGacLnXsAtnbaA.mft (raw, json)
Hash identifier: mPFefTX5pO/gAhfmWH119PIJcoY42ipW1/9QUnN+22M=
Subject key identifier: BC:11:41:B6:7F:0F:37:59:AC:21:56:E4:EC:D0:1B:F9:C7:A8:BF:EE
Authority key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
Certificate issuer: /CN=753d476db96de1e58623119a70b9d7b00b676da0
Certificate serial: 019E5749116731883D6E9190241E7A5350E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
Manifest number: 1922
Signing time: Sun 24 May 2026 00:01:06 +0000
Manifest this update: Sun 24 May 2026 00:01:06 +0000
Manifest next update: Mon 25 May 2026 00:01:06 +0000
Files and hashes: 1: H7fYzgAywiwtcT8-20X5WOux6fs.roa (hash: h+Uh5Kz1qJdgzCKaZAX98ps/QJeCnLPBc45Zv+eXiYA=)
2: cHfaPvW5Vud_9pj79Xxvj7kuddE.roa (hash: bGFOgs4ZrshgcJyva0SGzm2fyOyJP6p6s4rmZXREF64=)
3: dT1Hbblt4eWGIxGacLnXsAtnbaA.crl (hash: KksB5mi/pNx7ovnGTPVYY07CKMCDCGUPHdtzezxAlvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:57:49:11:67:31:88:3d:6e:91:90:24:1e:7a:53:50:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=753d476db96de1e58623119a70b9d7b00b676da0
Validity
Not Before: May 24 00:01:06 2026 GMT
Not After : May 25 00:01:06 2026 GMT
Subject: CN=bc1141b67f0f3759ac2156e4ecd01bf9c7a8bfee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:06:95:19:d8:bb:af:19:b4:fc:be:ea:45:8f:
c7:25:a8:73:f6:c4:7d:81:ab:dc:ce:24:b4:34:0d:
74:31:cb:77:50:e2:11:88:5f:6b:8c:2f:ad:46:da:
cf:40:ef:3c:27:48:c2:d4:bc:30:36:26:dd:44:0c:
ef:00:a9:c7:03:90:7e:d9:f1:68:54:28:d5:0b:76:
68:d6:d6:33:1b:d3:5a:f6:c0:ad:54:2a:89:cc:b7:
2e:96:d6:45:e0:f5:58:c5:af:6a:04:74:59:3e:b0:
33:6e:79:6d:7f:40:ee:81:65:b2:00:50:66:2f:6b:
33:6f:73:66:4b:41:7b:fb:f0:da:6b:aa:6c:fc:8d:
bd:9a:7e:c4:7e:bb:c9:58:cc:44:a3:c1:c5:5f:7f:
52:e7:1c:47:e8:da:9f:5a:5e:70:ce:11:ff:59:3a:
7c:18:96:e1:bd:ba:06:ec:71:c5:10:7b:95:05:a4:
81:59:c5:02:47:cb:9f:4f:d2:a7:2d:44:64:c6:39:
4a:83:c9:98:fb:09:7b:48:74:16:e5:42:e4:7c:94:
44:9e:44:e8:13:fd:25:5c:a2:7f:4b:86:38:0f:34:
db:8f:e3:75:a8:e8:77:8c:ef:aa:76:5d:c4:de:ae:
ee:22:82:48:d0:03:5b:f7:74:2b:83:e3:3b:93:27:
de:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:11:41:B6:7F:0F:37:59:AC:21:56:E4:EC:D0:1B:F9:C7:A8:BF:EE
X509v3 Authority Key Identifier:
keyid:75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:bd:09:fc:bf:54:1b:84:a7:b2:e9:f1:dd:bc:a3:80:aa:cd:
88:61:cf:5e:d7:4f:41:34:e0:9d:6f:b7:a4:42:f0:96:8b:c0:
5d:ac:d9:cb:17:14:07:91:45:01:44:6a:23:d5:21:6b:2b:1a:
dd:12:ac:5a:4f:bd:1e:da:c7:b1:51:d6:18:31:7a:99:90:d1:
e3:69:ed:63:61:20:2b:d3:77:1d:dd:58:69:f0:12:b3:f3:f7:
4d:52:2c:57:9e:21:4d:cf:94:5f:d9:7f:9d:ac:80:5a:04:bd:
d3:61:57:14:a4:eb:fb:e7:31:49:48:b0:6e:78:3f:f3:6d:f1:
1c:67:f2:6b:fb:80:50:48:09:82:4c:81:4a:5a:15:5e:a4:29:
b9:46:4c:ea:76:78:24:61:af:2a:c2:3c:8f:72:d4:17:b6:bf:
df:9f:8b:0e:3d:31:0f:e2:8e:85:84:61:59:f7:40:b4:5d:2b:
a7:4b:1c:0c:a9:66:e1:0b:2d:5c:b8:31:99:e7:66:a6:e6:fb:
39:c8:a6:f9:7d:e8:99:73:89:c5:a0:24:51:d6:d8:d0:52:05:
5e:e8:ea:7b:c9:8f:e5:9b:5c:5c:35:3e:68:e2:e1:f9:5f:ef:
1b:c4:f5:c3:77:f1:21:bf:01:b7:08:e0:56:6c:56:c1:21:f4:
ee:6a:ce:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5XSRFnMYg9bpGQJB56U1DhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1M2Q0NzZkYjk2ZGUxZTU4NjIzMTE5YTcwYjlkN2IwMGI2
NzZkYTAwHhcNMjYwNTI0MDAwMTA2WhcNMjYwNTI1MDAwMTA2WjAzMTEwLwYDVQQD
EyhiYzExNDFiNjdmMGYzNzU5YWMyMTU2ZTRlY2QwMWJmOWM3YThiZmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogaVGdi7rxm0/L7qRY/HJahz9sR9
gavcziS0NA10Mct3UOIRiF9rjC+tRtrPQO88J0jC1LwwNibdRAzvAKnHA5B+2fFo
VCjVC3Zo1tYzG9Na9sCtVCqJzLcultZF4PVYxa9qBHRZPrAzbnltf0DugWWyAFBm
L2szb3NmS0F7+/Daa6ps/I29mn7EfrvJWMxEo8HFX39S5xxH6NqfWl5wzhH/WTp8
GJbhvboG7HHFEHuVBaSBWcUCR8ufT9KnLURkxjlKg8mY+wl7SHQW5ULkfJREnkTo
E/0lXKJ/S4Y4DzTbj+N1qOh3jO+qdl3E3q7uIoJI0ANb93Qrg+M7kyfeMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwRQbZ/DzdZrCFW5OzQG/nHqL/uMB8GA1UdIwQY
MBaAFHU9R225beHlhiMRmnC517ALZ22gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82YTljZjktYzBjYy00MDExLTg2MGUt
NDY4NTc4MmFjMmMzLzEvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi82YTljZjktYzBjYy00MDExLTg2MGUtNDY4NTc4MmFjMmMz
LzEvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABb0J/L9U
G4Snsunx3byjgKrNiGHPXtdPQTTgnW+3pELwlovAXazZyxcUB5FFAURqI9Uhaysa
3RKsWk+9HtrHsVHWGDF6mZDR42ntY2EgK9N3Hd1YafASs/P3TVIsV54hTc+UX9l/
nayAWgS902FXFKTr++cxSUiwbng/823xHGfya/uAUEgJgkyBSloVXqQpuUZM6nZ4
JGGvKsI8j3LUF7a/35+LDj0xD+KOhYRhWfdAtF0rp0scDKlm4QstXLgxmedmpub7
Ocim+X3omXOJxaAkUdbY0FIFXujqe8mP5ZtcXDU+aOLh+V/vG8T1w3fxIb8Btwjg
VmxWwSH07mrONw==
-----END CERTIFICATE-----
Generated at Sun May 24 04:37:20 2026 by rpki-client