Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
File: hR1ONNTkhTnBcEUdTiYTiIf26SI.mft (raw, json)
Hash identifier: W2hNzdL4ALBmKU64YcHLZYAEXaAiCc7wMOr1Fl+vBj8=
Subject key identifier: 8A:13:35:90:34:DF:7F:B0:5F:85:53:11:70:D6:13:3B:F9:3D:05:30
Authority key identifier: 85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
Certificate issuer: /CN=851d4e34d4e48539c170451d4e26138887f6e922
Certificate serial: 019EB6C6240E7EDF540EA166B3B066708BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
Manifest number: 1502
Signing time: Thu 11 Jun 2026 13:01:39 +0000
Manifest this update: Thu 11 Jun 2026 13:01:39 +0000
Manifest next update: Fri 12 Jun 2026 13:01:39 +0000
Files and hashes: 1: R833NOdXTD2aQWG3JavzKd06mys.roa (hash: fWZj94n90bNsji3CFK3WkNid37wFqWD8C1Qx/wwtaQQ=)
2: ZmLewUIWz9_zdShetR7Jdzl8lfo.roa (hash: fPaCPLobKeVWk/RzinoeDdlx4MxMtKzniHguRoc5v/k=)
3: hR1ONNTkhTnBcEUdTiYTiIf26SI.crl (hash: m6O6BXqV9ojX2h8Jk0HE9DtqjuTPmUOlmHL6VnkTCcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c6:24:0e:7e:df:54:0e:a1:66:b3:b0:66:70:8b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851d4e34d4e48539c170451d4e26138887f6e922
Validity
Not Before: Jun 11 13:01:39 2026 GMT
Not After : Jun 12 13:01:39 2026 GMT
Subject: CN=8a13359034df7fb05f85531170d6133bf93d0530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:6a:6f:e2:98:5e:26:bf:34:ff:b7:b0:0c:
c1:9e:c4:a2:bf:c1:72:cb:e4:50:1e:45:7f:11:1f:
3f:32:10:d9:84:cf:0a:45:fe:ff:2c:2e:6d:5f:d4:
ff:a5:0c:94:60:ff:29:4f:9c:db:c5:f1:a4:c7:b9:
bf:be:db:86:64:bd:a2:da:09:1c:32:46:bc:ca:82:
7a:1a:61:bf:aa:c5:0d:c8:d8:9a:21:8f:d2:da:d5:
0e:8d:c4:8e:af:a0:1e:49:c4:83:b5:61:c0:5d:d3:
49:01:a6:7e:f0:ea:fa:0c:ec:e9:8b:51:67:7e:05:
aa:78:b7:38:90:c9:af:e3:de:c7:ac:6c:9e:a2:81:
8b:95:ab:00:0b:d6:3d:5c:8c:6e:64:25:68:33:ee:
71:d4:ec:ca:1c:d1:59:2d:67:78:71:77:fa:27:da:
a3:82:0e:74:4c:0a:2b:cd:5d:bb:c1:11:da:e3:e6:
10:a8:1c:4b:3c:02:c9:0a:2e:f8:e0:d6:82:c7:c6:
99:02:2d:60:e0:cd:3f:aa:f8:80:06:7f:b2:33:ab:
e6:51:ce:2f:d8:d7:71:b5:d5:c7:ba:61:3e:e5:5c:
2a:f3:79:58:b7:77:6c:de:19:86:d3:04:b1:79:72:
c1:3d:a7:a6:09:6b:86:9f:82:0f:68:bb:04:71:e6:
e1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:13:35:90:34:DF:7F:B0:5F:85:53:11:70:D6:13:3B:F9:3D:05:30
X509v3 Authority Key Identifier:
keyid:85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:62:0d:e8:56:d1:c7:d6:f6:ed:1a:48:34:70:bb:cb:8b:61:
da:4e:71:1d:5d:6e:e3:c5:6d:49:48:15:f8:76:cc:05:5b:67:
e3:dd:94:9d:6d:53:66:ae:f1:0f:38:7e:4d:cd:14:b8:f5:ab:
10:be:67:c3:a3:a5:76:86:5b:96:65:94:01:82:30:a9:46:44:
9e:64:fd:18:f6:17:6d:8d:48:8e:c2:2d:be:12:c4:1d:4d:8f:
1e:74:e4:d8:4e:bb:75:a7:e5:74:b4:70:f2:9a:52:2d:e7:1e:
67:65:1a:b1:a5:01:d3:2b:f7:cc:bf:c9:67:da:37:36:e3:0e:
b1:b9:b4:76:6d:8e:4e:c0:80:5c:ca:07:a6:13:57:86:4f:16:
1b:91:28:3d:de:20:b0:88:39:d7:2d:79:bc:ae:7d:b5:96:46:
14:67:93:b2:1f:b0:ac:8f:05:46:84:ae:29:7e:92:92:aa:5c:
80:34:20:bf:a5:2f:50:cf:87:bb:ba:26:17:ce:4e:ab:2f:8b:
5a:15:38:3f:ef:18:da:3c:ca:59:47:5f:3c:2f:d7:7e:2c:d0:
07:bc:7d:ba:e3:7a:08:ce:87:86:68:66:87:31:16:7b:5b:16:
6f:ba:28:6d:b4:2e:64:79:33:9b:fb:c6:42:01:58:cd:a0:db:
f2:9e:8d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:54:06 2026 by rpki-client