Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
File: hTodtQq3cdy1KTZ92VGmfKzEhSc.mft (raw, json)
Hash identifier: BFA7HdM95EjZ1qk/LOYY1JxTiPI70//pQr+NWfbZsx0=
Subject key identifier: 2D:EA:FD:9D:4C:7C:2E:22:79:9C:E5:37:4F:E4:44:E9:FB:72:34:BD
Authority key identifier: 85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
Certificate issuer: /CN=853a1db50ab771dcb529367dd951a67cacc48527
Certificate serial: 019E8E6DD26FA91CCFCA30BE509229C62FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
Manifest number: 193F
Signing time: Wed 03 Jun 2026 17:00:22 +0000
Manifest this update: Wed 03 Jun 2026 17:00:22 +0000
Manifest next update: Thu 04 Jun 2026 17:00:22 +0000
Files and hashes: 1: ClZipqAtGVJ2H4srpt_UxqUYg7k.roa (hash: gRSN7asX/fb1bF2/3SBjZi8n62BnbOxEncNI/Hx/1K0=)
2: hTodtQq3cdy1KTZ92VGmfKzEhSc.crl (hash: FgUBIYy7xmRF1yPea3DkkJBvJ7m/9YXEiQt4qJVcbT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:6d:d2:6f:a9:1c:cf:ca:30:be:50:92:29:c6:2f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853a1db50ab771dcb529367dd951a67cacc48527
Validity
Not Before: Jun 3 17:00:22 2026 GMT
Not After : Jun 4 17:00:22 2026 GMT
Subject: CN=2deafd9d4c7c2e22799ce5374fe444e9fb7234bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:84:ae:55:12:10:58:62:6e:76:72:65:ea:64:
30:40:53:30:f2:74:79:be:b8:e8:4f:69:43:c6:91:
be:bb:0f:35:97:7e:60:b7:58:81:c1:ac:88:96:6b:
c3:db:b8:b6:4e:d6:31:d8:29:2c:36:83:c7:7f:45:
70:c5:41:a2:46:04:5c:ce:63:6d:c8:df:7d:9f:c2:
f0:a5:30:00:0a:14:0c:17:0c:71:d3:d4:46:c5:2e:
ca:18:ab:2b:bc:d1:a6:45:12:f0:48:4e:d8:d0:bf:
ee:29:ea:ee:23:e1:7b:c4:9c:25:e6:20:b5:74:a7:
5e:e2:ed:b3:6f:3d:94:5d:21:3a:e6:46:60:29:aa:
8e:12:d1:8e:51:65:54:e1:94:ed:0d:f8:6e:c1:94:
3a:03:3f:32:67:99:4e:51:cf:19:a8:20:28:cc:39:
00:73:4b:4a:d1:df:82:c0:42:32:a2:3e:52:0c:53:
9d:80:1c:00:1f:88:c0:0d:d2:81:a4:d9:a1:36:4e:
a3:ec:a9:f4:0d:9e:1a:ab:ef:d7:d4:08:e0:20:6a:
18:cb:bd:54:eb:81:18:1d:7b:aa:5b:44:b9:e7:47:
1d:68:cb:44:a6:14:15:5e:d1:a2:99:62:9b:47:1c:
7c:4c:11:c0:82:c7:af:63:e3:b3:f5:9d:f5:2a:f0:
ea:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EA:FD:9D:4C:7C:2E:22:79:9C:E5:37:4F:E4:44:E9:FB:72:34:BD
X509v3 Authority Key Identifier:
keyid:85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:95:d7:63:d4:6e:73:ba:81:d4:24:61:2d:a3:f4:c8:83:82:
a9:db:dc:64:1f:6e:f0:fc:b3:e1:cd:c1:45:fa:99:eb:c2:20:
6f:2d:53:50:77:fd:4f:cb:32:23:cf:8b:ac:b2:86:f0:0c:1f:
1a:12:69:21:da:24:60:5f:44:d8:82:04:e6:74:ce:58:f9:db:
29:87:16:1d:32:43:50:a8:7d:68:e3:92:8f:7c:1a:3f:47:34:
c6:4c:36:96:f9:14:ef:c5:6f:70:27:2d:96:7b:df:e3:30:65:
d2:b3:13:02:89:39:7d:43:8d:6d:8a:38:18:7c:00:63:38:a6:
eb:fe:b9:3e:e6:ec:fa:19:81:74:bd:9e:ba:b0:f0:fd:6a:26:
eb:c3:43:92:ed:ad:2b:ef:f8:59:ce:2d:57:94:41:92:2a:df:
c7:7f:15:59:86:e3:ec:33:e0:2e:f8:c4:43:f8:2b:0e:93:b3:
76:5f:95:50:3a:47:7b:99:01:a4:00:02:39:03:d8:4d:1d:9f:
ee:1d:e1:3b:eb:aa:a8:80:88:c5:55:28:9b:35:fa:a8:41:ab:
25:47:83:ad:67:4e:bf:14:bd:da:75:8d:1f:9e:ee:f8:05:02:
6a:dd:53:28:33:11:2c:a6:4e:ff:1e:c8:8d:35:b4:81:f4:94:
1e:8b:96:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 23:34:12 2026 by rpki-client