Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
File: HhH4prKDtSYE2TKiWJO4ZAQSHos.mft (raw, json)
Hash identifier: uimLGz+WMpqvFLsAe6zLkEZom5h2anoybcIrzHJTkMs=
Subject key identifier: 3A:47:F7:06:DD:49:68:6C:74:FE:A6:DF:BC:70:EF:E1:06:8D:3B:C6
Authority key identifier: 1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
Certificate issuer: /CN=1e11f8a6b283b52604d932a25893b86404121e8b
Certificate serial: 019E33E13BA58201780A254F15FF11A9C265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
Manifest number: 0F1A
Signing time: Sun 17 May 2026 03:00:59 +0000
Manifest this update: Sun 17 May 2026 03:00:59 +0000
Manifest next update: Mon 18 May 2026 03:00:59 +0000
Files and hashes: 1: 4n7f8hSe_-4Wy2bDVW-WXjUIx0g.roa (hash: 5C3gCij/JOO8iJfKMKfHtP05aLMSh42RFLgeNEwUl6g=)
2: HhH4prKDtSYE2TKiWJO4ZAQSHos.crl (hash: k2exwDtiWcWkD53Y4wmG/7DwJ5cJHFCDd8pOtoPUMJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 18 May 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:33:e1:3b:a5:82:01:78:0a:25:4f:15:ff:11:a9:c2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e11f8a6b283b52604d932a25893b86404121e8b
Validity
Not Before: May 17 03:00:59 2026 GMT
Not After : May 18 03:00:59 2026 GMT
Subject: CN=3a47f706dd49686c74fea6dfbc70efe1068d3bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6d:1b:1f:fb:14:ad:97:d0:d8:c3:3c:5d:2b:
60:81:5d:bf:51:26:18:6e:69:e9:9a:31:1d:8b:21:
55:6a:50:72:b7:16:96:02:b7:be:79:c4:ef:c5:16:
e5:ce:88:47:5e:7d:62:e8:ea:bf:c8:3b:18:d7:ad:
db:53:75:ee:3a:35:e1:c0:8c:cb:84:f5:32:c8:e4:
13:dc:7a:50:2b:e4:ed:ce:ca:c8:0c:46:fe:75:98:
7e:32:68:16:6d:a2:66:c8:5b:33:68:da:07:f0:50:
29:e7:c1:46:b2:85:f4:df:78:e2:c4:b8:41:d8:61:
3c:52:a6:59:c2:a8:09:7c:57:8c:53:15:cf:04:9f:
90:38:12:15:85:da:51:e7:7e:36:a0:d5:48:88:f8:
7c:74:08:a3:71:5d:e2:2a:ba:6b:7f:82:4d:fb:b9:
3e:5b:60:f7:cd:6a:d9:b7:b0:c0:ab:80:4c:0e:e8:
20:e2:6d:ef:4a:71:59:75:da:45:dd:cb:83:42:d0:
0b:e7:52:5b:e2:d9:5f:be:e5:32:c3:d4:13:07:4e:
12:a6:74:46:98:2f:94:85:29:00:cd:19:8e:ad:0d:
5a:fd:73:00:70:4b:e4:bf:28:b6:34:ff:45:8f:11:
7b:f2:42:60:b9:2e:6e:75:c6:fd:b4:f0:e7:c1:34:
e7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:47:F7:06:DD:49:68:6C:74:FE:A6:DF:BC:70:EF:E1:06:8D:3B:C6
X509v3 Authority Key Identifier:
keyid:1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c1:8e:1c:96:f1:a5:7e:d8:c2:2f:60:c1:fb:45:b3:c3:42:
75:20:ae:cb:b8:2e:99:90:c6:e2:4a:1f:7f:5d:1e:f9:d8:a2:
1b:2c:16:e4:c8:c2:89:0e:53:44:fe:67:c1:ec:04:c4:c5:fe:
b4:ea:01:95:7d:1f:ef:6a:87:95:f3:65:d7:af:e9:45:b1:d2:
e5:77:f2:f5:d9:c3:50:0f:e6:93:85:92:9a:dd:66:6a:b1:b6:
e8:16:22:f5:27:34:ae:72:e5:2a:d1:0d:50:77:8f:8d:80:82:
c9:a5:16:17:b1:b3:25:95:7b:76:da:4b:35:8e:bb:ff:43:a7:
31:c7:ef:ae:81:88:fb:ba:7e:94:4c:6f:c8:2e:38:5e:68:75:
64:6f:31:9c:9d:a9:0e:b7:8c:eb:8e:e9:08:94:0c:31:7e:50:
03:9c:83:f7:f3:bd:e7:98:b3:22:ea:d1:5a:0e:14:44:ad:9c:
07:0b:48:ec:0e:32:28:90:de:82:e9:d2:ee:25:00:d6:47:08:
e4:9a:9f:b3:75:fb:cb:1e:de:44:28:5f:dc:fb:af:ba:06:42:
e3:2b:7b:56:a6:5f:68:71:7c:26:c6:b1:b2:1d:e2:31:ae:83:
d6:26:a1:a2:09:52:bf:b5:5f:a0:55:dc:71:ae:1f:ae:27:0f:
b5:5e:3b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 13:08:37 2026 by rpki-client