Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
File: D_HA6RHM5MRT_sKxaPbBPTbg34U.mft (raw, json)
Hash identifier: kQ+pnUTVhNFatweczr2NyEiDcY1jnOoBF6UT3saspAE=
Subject key identifier: B0:D7:52:E6:40:CA:3D:9F:05:A9:44:4A:01:C3:FB:CD:DA:67:CB:33
Authority key identifier: 0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85
Certificate issuer: /CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85
Certificate serial: 019E8EA58F86DE8AE0251FDDC3E69B989758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
Manifest number: 0158
Signing time: Wed 03 Jun 2026 18:01:15 +0000
Manifest this update: Wed 03 Jun 2026 18:01:15 +0000
Manifest next update: Thu 04 Jun 2026 18:01:15 +0000
Files and hashes: 1: A2gg-MX124Lpmk4q6amGH364pI8.roa (hash: vW20LJAGKrZU5294D/w3GbyCDoxlRHd2AtS8gCcCOJ4=)
2: D_HA6RHM5MRT_sKxaPbBPTbg34U.crl (hash: 8U3hgN0oFWQkNd82h0jHoyVQcBc9frkaKwWbA5zd94s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 18:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:a5:8f:86:de:8a:e0:25:1f:dd:c3:e6:9b:98:97:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85
Validity
Not Before: Jun 3 18:01:15 2026 GMT
Not After : Jun 4 18:01:15 2026 GMT
Subject: CN=b0d752e640ca3d9f05a9444a01c3fbcdda67cb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:5d:7f:24:2f:95:68:50:13:db:e4:e0:7c:
42:bf:f7:9c:6a:a0:1e:68:1d:27:a9:30:1a:ff:37:
e6:62:b9:b0:f0:75:d0:23:1f:76:c8:1b:97:34:4c:
bc:b9:45:fb:b7:1b:b2:94:b8:b7:73:49:f0:52:28:
98:d4:2a:71:e3:29:c2:a7:d1:92:13:c2:de:ef:fb:
b1:23:0b:e2:2e:00:d5:34:4f:4a:c1:c3:fb:6b:79:
e6:51:8c:55:e8:69:07:66:e8:a8:75:08:2c:53:a3:
da:35:e0:73:0d:4f:06:96:8e:68:91:6f:08:6d:07:
64:79:e9:34:f7:6e:1e:6e:86:96:9b:db:65:8e:fd:
d8:13:a0:f7:c4:55:bc:b9:7c:13:30:df:85:1e:89:
3d:2e:7c:bd:52:c1:0e:b1:26:c6:24:09:e8:74:9b:
86:d8:d8:f9:68:ab:02:16:9e:27:39:13:a3:0c:5b:
76:78:e5:0c:d2:fc:fa:60:c1:ae:aa:f9:1b:6e:3d:
2e:96:f5:71:b1:cc:db:80:b4:6f:27:3a:13:a0:31:
44:61:5f:c8:1b:40:6d:10:67:65:04:a1:5d:c6:f4:
48:d0:22:f6:13:7e:fc:3f:7b:d0:b3:39:0f:67:1c:
b7:1e:45:e2:56:b5:f1:ad:98:f4:ae:56:30:78:ef:
57:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D7:52:E6:40:CA:3D:9F:05:A9:44:4A:01:C3:FB:CD:DA:67:CB:33
X509v3 Authority Key Identifier:
keyid:0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9a:da:42:e0:07:f8:a3:93:c2:72:0f:e2:a0:07:3d:0b:78:
82:ef:b1:73:d5:57:78:48:33:ab:b7:c7:30:7c:7a:38:0c:4e:
d5:32:04:76:00:16:64:87:bf:eb:e5:02:84:ea:eb:95:c6:55:
af:21:b5:4b:a6:d1:27:4f:1d:33:a7:30:d4:f6:33:42:62:51:
97:48:50:54:35:1f:dd:29:df:2b:8e:c3:a3:99:74:cc:44:26:
b8:8a:f1:06:05:63:a5:b6:ac:46:66:86:f5:d5:1f:31:10:73:
e1:78:75:53:30:57:18:7a:e7:35:51:26:fe:26:15:ce:63:cb:
02:59:91:33:e5:01:c1:22:bc:51:c8:47:7b:e2:2b:45:47:28:
55:57:1e:0b:c6:06:0a:d8:1d:b3:ec:5a:60:d1:7e:0f:11:b9:
bd:06:b5:74:41:aa:77:10:19:dd:9c:09:c8:a3:98:5f:ab:49:
59:08:ff:99:44:bb:50:2d:dc:cc:58:36:ca:07:4f:7f:7c:eb:
96:01:8f:7c:43:32:e5:b5:19:99:bb:ca:e4:ff:a2:a0:ec:25:
4e:44:1f:c8:96:f4:11:ed:4c:e4:e7:de:ba:b2:34:d3:de:3f:
55:03:e1:36:31:92:34:44:29:29:a1:33:9b:86:4b:5b:7e:1a:
bc:de:c6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 04:17:26 2026 by rpki-client