Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
File: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft (raw, json)
Hash identifier: sJO46sWOEwcREBs8cza3l1NNFlw7Qb34URFITfb48g0=
Subject key identifier: 40:41:0D:72:6F:15:D6:FB:F3:2F:E2:04:C8:4E:F9:55:DB:8E:D7:BF
Authority key identifier: 84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
Certificate issuer: /CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Certificate serial: 019DF201DB5AAF2FBDEE56D404104A2DF6A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
Manifest number: 18F7
Signing time: Mon 04 May 2026 08:01:40 +0000
Manifest this update: Mon 04 May 2026 08:01:40 +0000
Manifest next update: Tue 05 May 2026 08:01:40 +0000
Files and hashes: 1: 867F4OQuQLWhRY4aKxKeoxD01B4.asa (hash: +fRCR0HY7fbE+pyBbt7W5yHcfIjIo6aJjDfzPZQv280=)
2: au_k5KTkHwmYgyGwQL9kaGDMGdc.roa (hash: TQ4e7aFpXjYOcX/z8GmwxlZOtaffODMat2Hj3Al3L2Y=)
3: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl (hash: VHiqQ/xAQQ02bkQPpOWrVMmMwJK4Mx1KUJI3boDhhbM=)
4: iqLo87tMFOB-XBrWIzdU46MRBuE.roa (hash: IzYBLEWXA56LUWCfb8F/l/nPeES5nSXV/ENxm4IRlhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 May 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f2:01:db:5a:af:2f:bd:ee:56:d4:04:10:4a:2d:f6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Validity
Not Before: May 4 08:01:40 2026 GMT
Not After : May 5 08:01:40 2026 GMT
Subject: CN=40410d726f15d6fbf32fe204c84ef955db8ed7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5a:ae:31:00:b4:46:1c:09:51:93:d9:12:a9:
46:77:56:95:a4:9e:b3:5d:31:f9:e6:6a:b4:5e:66:
0f:1b:a0:c3:de:f9:5e:40:62:a9:e9:42:b4:38:5c:
a1:6f:36:11:fb:45:e4:a0:aa:86:0a:dc:e1:e9:2b:
2e:52:ba:0b:ae:f4:7c:63:c8:cf:c3:60:9f:6a:52:
fe:16:2e:99:06:33:0f:cf:16:27:18:ba:9f:56:92:
62:d4:6c:7a:d8:f6:f2:97:df:db:21:ad:2b:e6:3d:
3e:3b:e4:82:17:f3:ce:69:a3:51:ba:cd:7d:66:f0:
f0:fc:da:f3:b7:a1:52:52:3a:08:3c:1a:a7:fd:31:
9b:11:04:18:a5:74:d1:16:cf:7b:04:ef:d6:43:fe:
fe:34:b3:31:b3:28:57:59:5f:2b:6c:5f:e0:24:37:
39:4b:5a:f8:98:bb:4b:15:05:b4:93:c7:aa:3f:52:
48:af:09:f1:dc:04:77:a5:ab:c4:41:17:44:7f:31:
e4:1e:ba:b2:cc:e2:cc:66:fc:c2:b4:ea:cc:fd:58:
ff:11:38:4b:9c:23:cc:62:63:02:d2:d8:7a:cc:e6:
09:43:4f:ad:e2:87:20:d6:db:2b:53:02:66:10:a3:
4d:32:b0:f0:ed:97:58:80:93:92:98:24:da:45:49:
33:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:41:0D:72:6F:15:D6:FB:F3:2F:E2:04:C8:4E:F9:55:DB:8E:D7:BF
X509v3 Authority Key Identifier:
keyid:84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:92:b4:56:b5:ee:da:1e:10:21:5e:b1:2b:f1:20:f4:51:11:
ec:e3:34:7c:7d:50:a1:c4:c7:d8:9c:2f:6f:c4:62:a8:41:6e:
c6:53:a0:8c:9b:36:ca:37:e2:f5:87:3b:e8:bc:9c:ca:40:23:
61:6b:e8:2d:01:97:98:c0:9f:09:7b:65:7e:b1:9d:69:2d:7b:
aa:d9:fd:5e:4e:e1:19:65:39:bf:b6:aa:4d:0f:de:c3:d8:47:
be:83:72:8e:8c:5b:47:40:82:8b:53:74:02:d7:57:bc:9f:5f:
88:a5:3d:5c:c4:6f:f7:dc:98:d7:53:c1:26:f1:ce:eb:ff:34:
14:cc:3f:ae:88:0e:13:42:f0:46:74:7c:9c:09:1c:91:a0:e2:
26:c0:74:28:2d:c9:1e:be:7a:44:fc:e0:7b:70:49:83:a2:b5:
de:2c:c5:40:f7:41:a5:ea:0e:45:94:91:da:ba:d8:20:5b:07:
b8:23:7d:13:7f:d5:42:7b:a4:3a:ea:31:c8:db:7e:02:9c:8f:
ed:73:f5:44:b5:95:33:fb:27:7c:9c:c3:4a:2d:a5:e9:45:6e:
77:19:7f:b2:46:4f:a2:db:64:b9:d8:2a:68:7b:a4:38:75:65:
ff:a6:18:b5:72:5a:cf:44:f1:55:56:d2:bb:96:af:de:f8:33:
62:ce:85:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 12:20:04 2026 by rpki-client