Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
File: H6isN_lpUWlif3XgmJYzlt6WOMw.mft (raw, json)
Hash identifier: mM3JcyVwTb684UzuyWDszCe715SOWwCVW6zCIl71sEQ=
Subject key identifier: 95:A2:87:BE:AA:9D:AC:BA:21:E2:98:C5:8C:5D:77:31:F8:5E:10:C0
Authority key identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
Certificate issuer: /CN=1fa8ac37f9695169627f75e098963396de9638cc
Certificate serial: 019E3185D456CB4EF9CD3A6D8F993DC1AF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 16:01:54 +0000
Manifest this update: Sat 16 May 2026 16:01:54 +0000
Manifest next update: Sun 17 May 2026 16:01:54 +0000
Files and hashes: 1: H6isN_lpUWlif3XgmJYzlt6WOMw.crl (hash: +1IgCK4+2fYKFBJ/M+qtjVf958iYtwxP/Lec+O5Nz3g=)
2: UTSR5iQJ6IBH6DGdS5VKMlXv2h8.roa (hash: g/yB397DTMizFh5pcVuRPR6yN/SI5ugHQKZHi+BSisU=)
3: eBV3wtUeMu2mQzbDRhT7v_8FhCM.roa (hash: dfSD4t+IvLSwRtvheEfZG9CM1+g6QasEUhniYPszLJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:d4:56:cb:4e:f9:cd:3a:6d:8f:99:3d:c1:af:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa8ac37f9695169627f75e098963396de9638cc
Validity
Not Before: May 16 16:01:54 2026 GMT
Not After : May 17 16:01:54 2026 GMT
Subject: CN=95a287beaa9dacba21e298c58c5d7731f85e10c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:94:23:e0:17:95:af:a5:39:9e:22:86:d3:1f:
43:25:71:41:03:01:8c:c6:8d:6b:6b:34:22:a0:1b:
75:a6:16:87:ad:aa:47:f2:7a:4d:eb:ea:64:fa:0d:
66:d9:d4:d6:31:1b:55:ed:7a:67:b6:cc:d3:8a:b5:
65:d3:2a:26:23:9e:b5:49:99:4e:8a:ef:b8:2c:22:
29:26:84:95:b5:bf:fb:c8:7f:d5:b7:74:11:36:29:
77:ab:28:59:7b:5a:d9:b0:41:a3:e0:e1:4c:fc:13:
f6:a7:3f:07:29:74:f4:27:11:17:ff:b3:b8:86:ce:
06:c1:dd:2f:6c:f6:0a:b9:6b:e2:24:e5:c4:e6:d1:
6d:87:89:0c:3f:26:1a:a1:4d:fd:91:a9:18:91:09:
d8:f2:48:17:80:f9:fe:7f:ca:63:40:af:bf:5b:ba:
af:d1:a1:be:c8:0d:ec:c5:31:16:4b:84:f6:b5:76:
86:99:13:2c:c0:fb:37:76:52:ef:f0:a1:b0:90:ae:
a1:cc:e6:a1:8d:40:f7:47:74:6b:ca:62:c6:71:1b:
7a:28:38:80:70:f8:8d:ef:e1:61:52:d3:05:8b:76:
b7:66:f4:39:5e:40:27:49:71:57:61:4a:d4:fb:86:
63:72:c7:11:f6:6b:aa:fe:88:4b:49:7d:a7:1d:79:
30:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A2:87:BE:AA:9D:AC:BA:21:E2:98:C5:8C:5D:77:31:F8:5E:10:C0
X509v3 Authority Key Identifier:
keyid:1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:ac:10:ff:c6:d1:b3:79:df:49:c1:21:b0:74:11:f7:f2:53:
96:6e:fe:56:28:f5:1c:e4:1d:8e:38:76:32:8a:d6:d6:d3:49:
9c:c7:d8:1c:10:5d:c2:ed:65:95:23:3d:77:0e:80:96:f4:3b:
00:9a:cc:68:c1:19:b7:b1:72:ed:4d:8f:4b:74:10:72:bb:9e:
5a:68:97:ce:b4:ae:6f:1e:c2:54:24:5a:75:ca:7a:ea:db:b0:
60:2f:bd:78:eb:00:0b:d2:ed:c4:00:1b:eb:ec:34:d5:40:b5:
97:af:32:47:50:3a:24:03:8c:56:cd:b2:d8:08:a1:7e:6f:56:
08:38:32:b3:d5:f9:2c:25:dc:99:35:c7:18:0d:11:a9:9d:ea:
50:7c:a5:16:87:94:f3:42:8b:2f:86:af:35:f8:19:fd:84:b8:
0b:87:c2:e1:24:f0:49:76:f8:98:63:80:92:28:92:b1:7d:a1:
5c:bb:e8:b5:cf:d8:ee:fc:d9:1c:0b:18:9e:87:10:38:63:6d:
5e:ba:c7:c3:6a:da:3b:7d:a0:a4:d7:a3:bc:25:1c:ae:4a:2c:
c4:2b:de:87:e7:2c:bb:ee:d0:63:b1:0e:1f:99:e4:07:3b:62:
32:a0:c1:8b:27:27:90:08:70:5d:86:46:97:ee:bb:a7:98:c1:
fe:63:04:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xhdRWy075zTptj5k9wa8PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYThhYzM3Zjk2OTUxNjk2MjdmNzVlMDk4OTYzMzk2ZGU5
NjM4Y2MwHhcNMjYwNTE2MTYwMTU0WhcNMjYwNTE3MTYwMTU0WjAzMTEwLwYDVQQD
Eyg5NWEyODdiZWFhOWRhY2JhMjFlMjk4YzU4YzVkNzczMWY4NWUxMGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZQj4BeVr6U5niKG0x9DJXFBAwGM
xo1razQioBt1phaHrapH8npN6+pk+g1m2dTWMRtV7XpntszTirVl0yomI561SZlO
iu+4LCIpJoSVtb/7yH/Vt3QRNil3qyhZe1rZsEGj4OFM/BP2pz8HKXT0JxEX/7O4
hs4Gwd0vbPYKuWviJOXE5tFth4kMPyYaoU39kakYkQnY8kgXgPn+f8pjQK+/W7qv
0aG+yA3sxTEWS4T2tXaGmRMswPs3dlLv8KGwkK6hzOahjUD3R3RrymLGcRt6KDiA
cPiN7+FhUtMFi3a3ZvQ5XkAnSXFXYUrU+4ZjcscR9muq/ohLSX2nHXkwNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWih76qnay6IeKYxYxddzH4XhDAMB8GA1UdIwQY
MBaAFB+orDf5aVFpYn914JiWM5beljjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDZpc05fbHBVV2xpZjNYZ21KWXpsdDZXT013LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81YmMxY2MtZDAyYy00OGVlLTk5MzUt
MDIzYjZjMDc5M2YxLzEvSDZpc05fbHBVV2xpZjNYZ21KWXpsdDZXT013Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi81YmMxY2MtZDAyYy00OGVlLTk5MzUtMDIzYjZjMDc5M2Yx
LzEvSDZpc05fbHBVV2xpZjNYZ21KWXpsdDZXT013LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2KwQ/8bR
s3nfScEhsHQR9/JTlm7+Vij1HOQdjjh2MorW1tNJnMfYHBBdwu1llSM9dw6AlvQ7
AJrMaMEZt7Fy7U2PS3QQcrueWmiXzrSubx7CVCRadcp66tuwYC+9eOsAC9LtxAAb
6+w01UC1l68yR1A6JAOMVs2y2Aihfm9WCDgys9X5LCXcmTXHGA0RqZ3qUHylFoeU
80KLL4avNfgZ/YS4C4fC4STwSXb4mGOAkiiSsX2hXLvotc/Y7vzZHAsYnocQOGNt
XrrHw2raO32gpNejvCUcrkosxCveh+csu+7QY7EOH5nkBztiMqDBiycnkAhwXYZG
l+67p5jB/mMEDw==
-----END CERTIFICATE-----
Generated at Sat May 16 22:02:34 2026 by rpki-client