
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
File: h5axwx_d4r1emPj7t3mKvEdJPPI.mft (raw, json)
Hash identifier: h26VNzGksr5ywqcDKsDJWLqjB3BhpKG5ew4Q+YIYK0g=
Subject key identifier: 4A:AB:4F:08:66:76:02:3F:E5:B8:B1:1C:64:C8:7F:E9:AF:B7:79:8E
Authority key identifier: 87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2
Certificate issuer: /CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
Certificate serial: 019E8EA537C253704043AB0E10D47CDE3D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
Manifest number: 15D3
Signing time: Wed 03 Jun 2026 18:00:52 +0000
Manifest this update: Wed 03 Jun 2026 18:00:52 +0000
Manifest next update: Thu 04 Jun 2026 18:00:52 +0000
Files and hashes: 1: NejKy8jZv7LHCtY85OZ0XTQsrYw.roa (hash: 6i32lnkgvTEvsNHdmqz1vGOoJv3YKsgonD5vJZrkPQ0=)
2: h5axwx_d4r1emPj7t3mKvEdJPPI.crl (hash: /DZEMYqoNDIy9ZRvi/FB2B27PgpXsltbRR5f1nrDJXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:a5:37:c2:53:70:40:43:ab:0e:10:d4:7c:de:3d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
Validity
Not Before: Jun 3 18:00:52 2026 GMT
Not After : Jun 4 18:00:52 2026 GMT
Subject: CN=4aab4f086676023fe5b8b11c64c87fe9afb7798e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:df:7e:95:49:1c:d8:a5:28:08:27:e7:9e:26:
30:40:03:19:27:2e:c3:bd:da:35:6c:ae:0f:c4:15:
f5:f9:37:72:e8:e4:71:22:36:b5:bf:85:c4:af:65:
32:63:c3:71:cc:5d:7b:29:d6:cc:55:7d:c4:96:12:
c4:93:00:4d:bc:ea:5f:6e:64:cb:99:7f:b0:34:53:
9f:56:8e:fb:81:c7:34:7f:16:10:cf:77:7c:72:28:
47:c5:6b:75:c1:3f:e7:d7:58:37:27:f7:33:9b:3f:
9b:1c:15:fe:ce:84:22:4a:c6:64:b1:bf:5b:c8:11:
c2:ea:d5:90:3b:14:7c:c9:69:1a:6a:71:ec:e7:2d:
c7:82:6d:d0:c1:5a:70:bd:c8:c6:37:42:de:be:99:
46:bf:8d:3d:7d:09:9d:f5:4e:d3:4d:ea:e0:30:c5:
8e:71:38:6d:ec:d4:3e:f3:01:de:ba:2e:e7:00:55:
46:df:28:a6:2e:a6:87:7d:2e:19:47:d7:e5:f0:39:
c8:0e:4a:9e:3c:9e:25:3b:06:05:97:b0:fd:18:b4:
4f:46:21:04:c9:09:2e:bf:42:32:cc:c5:8e:f6:ec:
4c:fc:ae:1c:c8:ed:d4:bb:90:0f:39:c2:68:d4:49:
c0:a7:4b:0f:79:ea:55:23:23:1e:c3:00:b7:2c:ad:
a9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AB:4F:08:66:76:02:3F:E5:B8:B1:1C:64:C8:7F:E9:AF:B7:79:8E
X509v3 Authority Key Identifier:
keyid:87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5e:b9:a0:e3:39:ef:96:17:d1:8e:69:1b:7a:48:71:c8:0e:
36:3d:a1:95:2e:2e:a2:ef:b2:1e:97:a7:65:e9:14:c5:7f:d3:
e0:de:ed:66:b1:01:bd:04:28:5a:ef:1f:76:ad:a2:19:ea:55:
b7:46:6d:eb:98:38:f4:33:1e:ab:55:75:d4:f7:5d:a2:cd:ed:
67:d4:6a:24:0c:52:85:20:12:60:b2:eb:9e:d7:65:59:29:90:
ed:9e:1d:85:d4:3d:76:0b:31:f3:8b:b0:d1:3f:e8:96:57:1c:
be:b6:4f:3a:9f:f4:bf:ef:5f:1d:b0:67:af:41:d3:8d:e6:45:
ac:e7:d7:7c:e0:ab:92:ce:b3:98:a4:d9:f9:68:78:54:5f:3c:
4b:71:bb:64:96:34:42:ad:eb:19:96:5c:57:08:d6:e2:26:8e:
b5:81:40:99:3d:2b:52:9f:8c:bb:9a:5a:c8:52:b5:8c:a3:18:
4f:e2:f0:5c:72:ac:04:8c:ed:b0:04:d5:3f:50:2f:b7:30:17:
91:0c:0a:7e:3e:2c:7a:f0:0a:62:5c:9a:0f:8b:97:ea:3f:d5:
37:f2:10:6d:8f:18:c8:a8:fd:fc:b2:8a:76:55:17:35:cd:8d:
69:e3:88:4f:79:70:34:74:cb:78:26:24:a5:4f:cf:54:5e:27:
d7:19:42:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 21:02:27 2026 by rpki-client