Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
File: h5axwx_d4r1emPj7t3mKvEdJPPI.mft (raw, json)
Hash identifier: Njt/hEt+vbMdFzIqY4xDmk1Jna/tJ1z83DTgyOcW9vU=
Subject key identifier: AC:D4:22:64:BE:06:1F:87:AF:BB:B5:15:80:55:2D:6C:2F:48:81:9D
Authority key identifier: 87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2
Certificate issuer: /CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
Certificate serial: 019D38D3D3C6A98A257AC5C087C749F6A926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
Manifest number: 1522
Signing time: Sun 29 Mar 2026 09:01:39 +0000
Manifest this update: Sun 29 Mar 2026 09:01:39 +0000
Manifest next update: Mon 30 Mar 2026 09:01:39 +0000
Files and hashes: 1: NejKy8jZv7LHCtY85OZ0XTQsrYw.roa (hash: 6i32lnkgvTEvsNHdmqz1vGOoJv3YKsgonD5vJZrkPQ0=)
2: h5axwx_d4r1emPj7t3mKvEdJPPI.crl (hash: XltMdtHsoDTXnGakKNv8nJ11Tg+fipv35r4A6kj2DD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:d3:c6:a9:8a:25:7a:c5:c0:87:c7:49:f6:a9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
Validity
Not Before: Mar 29 09:01:39 2026 GMT
Not After : Mar 30 09:01:39 2026 GMT
Subject: CN=acd42264be061f87afbbb51580552d6c2f48819d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:13:46:4f:ac:38:30:f3:eb:52:cd:25:f2:26:
bf:74:0f:88:8a:f5:42:71:3a:e5:be:79:f1:a2:25:
7b:38:53:24:64:2f:65:97:9f:74:11:95:98:f7:66:
e2:d8:eb:b5:e1:d1:d8:d4:45:50:2c:cd:51:06:9f:
cd:c4:fc:28:81:36:7f:3a:f7:60:f9:ff:63:f5:90:
c4:eb:e1:4d:d3:f4:00:c5:69:50:14:3b:50:18:88:
3c:9a:39:7f:3c:1a:53:31:08:ba:2d:cb:1e:ac:38:
b4:e0:5e:54:b2:44:c0:47:f8:30:0f:75:09:e7:3d:
29:66:78:74:60:f8:3e:74:e5:3c:33:40:12:40:77:
da:fb:60:a9:47:d2:61:13:57:a5:9f:44:13:38:5f:
8b:70:da:06:cd:49:78:cd:6c:d0:7e:c4:fd:a9:84:
56:07:4e:68:1d:5c:17:c8:d5:21:15:ce:21:77:6a:
8d:35:f3:e7:69:86:0d:87:a1:65:d4:d8:2f:5a:b4:
73:a0:bd:a9:49:dd:0d:d5:5a:65:06:c3:29:d7:05:
48:a2:90:65:65:2b:77:ed:68:1c:34:d2:d6:29:0f:
20:51:ce:38:6d:01:72:38:c2:40:2b:04:25:2c:41:
bb:6f:a0:f6:86:bd:1f:bf:43:9e:7f:28:de:47:53:
5e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D4:22:64:BE:06:1F:87:AF:BB:B5:15:80:55:2D:6C:2F:48:81:9D
X509v3 Authority Key Identifier:
keyid:87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ab:f9:b9:dc:a9:8a:f5:cd:44:52:33:e5:7c:7e:47:c0:c0:
e9:ed:dc:31:97:35:27:f1:0a:12:82:75:9f:68:b9:3c:f2:18:
db:b3:08:3f:4a:94:ff:26:6d:f3:e5:8b:f9:47:20:77:b3:b3:
01:8a:8d:9d:df:eb:67:e4:e2:a5:d6:5d:03:29:45:54:fd:5a:
40:e1:e2:20:6a:cc:46:23:d3:87:9a:18:6a:a9:82:5b:c2:c3:
9c:1d:25:ca:c8:54:2d:7c:1e:0d:b3:0d:19:08:f4:d7:9a:02:
8a:3b:a8:c0:62:7d:b2:e8:9e:7f:ee:67:5e:bd:ed:ff:71:da:
1a:cd:62:50:6f:c3:13:67:12:2b:c0:79:18:70:3e:09:c4:85:
55:66:9e:22:a9:3e:95:9b:ef:97:86:4a:0a:b4:12:e8:b0:13:
34:21:b3:68:13:c5:69:f2:5f:c7:b1:2e:b5:17:64:a6:6d:d7:
5b:c3:4b:57:52:00:6c:c7:ac:0b:af:08:2e:02:bd:ec:54:84:
29:a4:eb:4f:f2:43:0c:66:e8:ca:01:29:50:35:24:ec:33:6c:
35:07:c5:bc:b9:18:12:1d:bd:3a:28:b5:94:06:b6:7f:36:de:
ba:0a:d4:33:2c:9c:cc:4b:58:2a:e9:39:03:24:51:85:f2:50:
7f:61:49:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:01 2026 by rpki-client