Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
File: hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft (raw, json)
Hash identifier: F5YDWjiZkjObrANT/f3uuhIOkuEXLCXmW9IAMF8+9Bo=
Subject key identifier: 53:2E:76:33:84:A8:5B:C8:8F:E0:E7:D0:74:90:44:6A:35:B1:70:AC
Authority key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
Certificate issuer: /CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Certificate serial: 019DDC55BFFFF67E067354D43F1418F35CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
Manifest number: 05C1
Signing time: Thu 30 Apr 2026 03:01:40 +0000
Manifest this update: Thu 30 Apr 2026 03:01:40 +0000
Manifest next update: Fri 01 May 2026 03:01:40 +0000
Files and hashes: 1: hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl (hash: v3uoaxv2JqEUObYfu1M0tseNFZfuhI6KirpL0sVBeNw=)
2: oXRKH5b-T-CRxs2hxBp_XOCDBZY.roa (hash: CXD7uTJndYpsuBoJT2/svXnMWPhH6ma+JfEwHCQE7gU=)
3: tIddSJpZ8A8bsH1Q9vYKm2A610E.asa (hash: FxJTYjqaIVsvB66XTycCPAWGxY0433SU6Z6bkpRMAQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:55:bf:ff:f6:7e:06:73:54:d4:3f:14:18:f3:5c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Validity
Not Before: Apr 30 03:01:40 2026 GMT
Not After : May 1 03:01:40 2026 GMT
Subject: CN=532e763384a85bc88fe0e7d07490446a35b170ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6a:a7:85:29:50:f7:66:38:cc:b3:04:88:a9:
ec:26:82:a5:c7:29:e3:42:a7:4d:28:99:34:14:d7:
39:b9:78:f9:60:1f:ca:62:dc:b2:6d:18:9c:86:32:
27:5c:64:30:41:2e:a1:1e:f4:1a:6c:31:d3:53:5a:
fe:1b:d6:25:64:7b:41:83:6e:b4:74:68:3a:b4:59:
d4:9a:ea:9b:4f:35:f6:2e:f4:6f:e3:e8:31:ad:bc:
b0:07:1a:cc:ed:4a:45:ab:d6:5f:51:55:de:5b:81:
e2:61:7e:ce:00:be:cd:41:d8:ae:ac:e9:7f:e2:b5:
19:70:ae:93:17:81:4c:5f:2d:c4:b9:79:03:5a:25:
14:a0:58:df:6e:87:7f:f3:4d:1d:90:47:15:fc:0e:
f8:4f:9d:60:67:7a:ac:08:3f:bd:11:6a:3d:f5:46:
d2:b6:e5:4c:dd:9b:b3:ec:8e:b3:ef:82:a8:43:a6:
0f:cb:7d:85:a8:18:16:ca:c1:4c:af:d0:b7:8e:48:
66:49:9c:39:68:3c:36:41:37:4b:d3:ba:0a:32:93:
69:cc:ae:63:4c:87:9a:e2:9a:cb:9f:72:5a:2f:7a:
d3:48:a4:76:e9:88:fb:88:7f:2c:bb:7a:2f:cf:e0:
24:5b:2e:b2:c3:f3:3b:69:4f:81:fd:0e:ba:81:d3:
1a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2E:76:33:84:A8:5B:C8:8F:E0:E7:D0:74:90:44:6A:35:B1:70:AC
X509v3 Authority Key Identifier:
keyid:84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8b:6b:b5:08:b7:b0:2f:a7:48:6d:8d:f2:45:7b:2e:bc:b7:
d2:04:09:b8:b7:ea:16:d2:8e:94:af:76:0a:6f:37:1d:dd:62:
aa:da:d8:8e:b3:e6:51:7b:8c:f0:5d:c2:96:8e:5d:f2:70:53:
46:34:78:b1:25:d3:f9:d5:4a:80:2e:dc:29:b5:e6:25:dc:f7:
07:c2:74:31:2e:13:05:59:de:5d:5f:77:e5:c2:77:99:84:d3:
ae:d4:5c:d8:cf:4a:1b:aa:e9:55:18:98:18:82:c0:17:a0:97:
b1:42:f3:79:a1:19:74:a1:a4:61:18:a4:c9:f9:c2:bb:19:32:
d4:62:e1:14:6f:f6:e9:d9:df:19:4a:da:36:7c:e9:f0:f6:3b:
4c:a7:18:68:c1:c0:bd:01:ff:b7:4e:54:c2:75:e3:0c:4d:28:
b0:2b:6e:d5:66:df:12:4c:3a:1a:18:84:20:cb:57:3a:78:6e:
1a:3d:2f:89:32:3d:4a:75:22:59:a9:6d:7c:25:00:61:fc:88:
4b:65:7d:23:7c:77:7a:14:a9:fe:43:6b:d0:8d:cb:7d:1a:b2:
3c:04:7a:79:a4:5e:d1:bd:dc:f1:9a:58:f6:51:28:a0:4b:3b:
9d:87:05:93:36:14:6a:7b:3e:00:45:9c:10:e7:d7:eb:ca:a7:
19:76:8c:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3cVb//9n4Gc1TUPxQY81zDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZDUwOTI1OWY3MDBjZGM0NDQ4ZjFmYmY1MzBjMTllNDA3
NTRlYzQwHhcNMjYwNDMwMDMwMTQwWhcNMjYwNTAxMDMwMTQwWjAzMTEwLwYDVQQD
Eyg1MzJlNzYzMzg0YTg1YmM4OGZlMGU3ZDA3NDkwNDQ2YTM1YjE3MGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2qnhSlQ92Y4zLMEiKnsJoKlxynj
QqdNKJk0FNc5uXj5YB/KYtyybRichjInXGQwQS6hHvQabDHTU1r+G9YlZHtBg260
dGg6tFnUmuqbTzX2LvRv4+gxrbywBxrM7UpFq9ZfUVXeW4HiYX7OAL7NQdiurOl/
4rUZcK6TF4FMXy3EuXkDWiUUoFjfbod/800dkEcV/A74T51gZ3qsCD+9EWo99UbS
tuVM3Zuz7I6z74KoQ6YPy32FqBgWysFMr9C3jkhmSZw5aDw2QTdL07oKMpNpzK5j
TIea4prLn3JaL3rTSKR26Yj7iH8su3ovz+AkWy6yw/M7aU+B/Q66gdMauwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMudjOEqFvIj+Dn0HSQRGo1sXCsMB8GA1UdIwQY
MBaAFITVCSWfcAzcREjx+/UwwZ5AdU7EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xMjg2ZjYtNjg4Yy00Y2ZhLWEwMmQt
MWE4OWFiN2I4Y2I1LzEvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xMjg2ZjYtNjg4Yy00Y2ZhLWEwMmQtMWE4OWFiN2I4Y2I1
LzEvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJotrtQi3
sC+nSG2N8kV7Lry30gQJuLfqFtKOlK92Cm83Hd1iqtrYjrPmUXuM8F3Clo5d8nBT
RjR4sSXT+dVKgC7cKbXmJdz3B8J0MS4TBVneXV935cJ3mYTTrtRc2M9KG6rpVRiY
GILAF6CXsULzeaEZdKGkYRikyfnCuxky1GLhFG/26dnfGUraNnzp8PY7TKcYaMHA
vQH/t05UwnXjDE0osCtu1WbfEkw6GhiEIMtXOnhuGj0viTI9SnUiWaltfCUAYfyI
S2V9I3x3ehSp/kNr0I3LfRqyPAR6eaRe0b3c8ZpY9lEooEs7nYcFkzYUans+AEWc
EOfX68qnGXaM1Q==
-----END CERTIFICATE-----
Generated at Thu Apr 30 13:46:30 2026 by rpki-client