Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
File: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft (raw, json)
Hash identifier: lfSgS3OJzN5BCimr3iBmbu5NPI5ciEaWfMNgwG+mfDo=
Subject key identifier: 31:24:D3:6E:5E:80:19:8B:FE:A0:BB:11:9D:FD:AD:C5:97:4C:A4:7C
Authority key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
Certificate issuer: /CN=854e8383e8208936802362a09f36085a50fcd85a
Certificate serial: 019E31BC25ADEFCEBC974D7ABE12E6D5FF27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
Manifest number: 18A6
Signing time: Sat 16 May 2026 17:01:14 +0000
Manifest this update: Sat 16 May 2026 17:01:14 +0000
Manifest next update: Sun 17 May 2026 17:01:14 +0000
Files and hashes: 1: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl (hash: djf3ewziYrrf2lxHVal80yHHvFq4mcTC0qep75tGT10=)
2: tlPMQw1c3qKVnL4XtiEzRpXRVfk.roa (hash: 2OUcGgPvEsXk+44Fs3qPgVHHqN26oV6vSG6RCh8q2/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bc:25:ad:ef:ce:bc:97:4d:7a:be:12:e6:d5:ff:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e8383e8208936802362a09f36085a50fcd85a
Validity
Not Before: May 16 17:01:14 2026 GMT
Not After : May 17 17:01:14 2026 GMT
Subject: CN=3124d36e5e80198bfea0bb119dfdadc5974ca47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:9e:c3:7b:88:0c:fd:9c:59:3b:40:e6:ac:
d3:cb:b7:bc:0e:a9:b5:18:f3:c7:26:4d:f4:15:5e:
83:eb:77:38:61:52:f6:15:5f:40:d1:9d:3d:e8:55:
bc:74:f2:d6:19:5f:82:16:3f:70:bf:ee:3c:39:81:
9d:73:e9:6b:31:04:0c:b6:fc:59:f8:7a:64:08:e6:
ff:ca:51:59:2b:32:f0:55:41:24:64:c4:18:57:7f:
31:f5:f4:2d:b0:2d:8e:5d:f4:fd:c6:64:d3:62:a0:
9d:c0:67:e1:16:57:9a:22:db:e0:f6:4e:1d:cf:bd:
7b:fc:36:52:95:43:80:5f:4c:7c:a1:2b:a8:7a:7d:
7c:1a:bc:5a:77:7b:54:f5:b7:84:fa:7f:9f:f3:b8:
92:51:ff:ff:5e:8d:2e:0b:5f:91:a3:34:0f:ee:db:
f0:af:20:e7:ca:2e:eb:a8:f1:d8:74:78:11:93:1d:
0f:85:8a:84:b8:bb:51:09:12:c2:50:8d:0b:d5:97:
4d:3c:ed:f4:08:28:eb:b6:3b:6a:82:31:28:a6:86:
04:ee:0e:4c:63:04:54:66:28:48:6c:0e:c9:6b:6d:
cc:4d:94:5b:6c:20:df:ff:ff:47:93:a0:fd:9a:a3:
e9:00:b1:ec:9b:e0:00:bf:a3:b5:1d:00:d0:ad:0f:
a9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:24:D3:6E:5E:80:19:8B:FE:A0:BB:11:9D:FD:AD:C5:97:4C:A4:7C
X509v3 Authority Key Identifier:
keyid:85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b5:85:b6:aa:0f:f4:97:f6:d7:ee:b3:fb:3c:16:44:0f:19:
8d:a8:c5:55:a2:b3:cf:7b:c8:48:a6:d9:b4:cd:e1:11:7c:86:
93:13:63:56:d0:c6:c9:23:ae:c0:72:2e:a0:bc:e8:49:2e:9a:
ec:e4:0e:71:25:32:9a:40:fb:0b:62:f7:84:98:18:ae:a7:6a:
da:2b:d7:a8:6c:99:d7:66:00:48:e4:50:f4:d4:df:99:66:96:
9f:98:af:0f:0a:8d:15:c4:d5:0d:1b:f2:c6:ba:64:82:72:05:
13:fb:97:61:0e:e7:a1:1f:08:a0:13:58:d5:72:32:6d:a0:3c:
30:db:4a:15:11:5b:80:76:5c:8d:1c:7d:5c:81:4a:f1:80:01:
17:c2:0f:49:a0:b0:a3:fc:92:d9:7d:95:0a:52:f4:88:3e:2a:
ec:f8:e6:69:b7:09:74:96:27:9d:c8:db:d3:17:7f:64:c8:a8:
46:9f:53:a9:77:ee:fc:0d:a8:be:a6:9b:c9:d2:8b:b9:c6:1e:
83:49:75:5f:e6:a2:dd:63:da:7a:b6:bb:ef:36:18:3c:91:aa:
2d:98:ca:94:3a:6a:6b:4b:6b:c3:0c:db:27:4b:1d:26:ac:07:
02:7f:4f:55:3d:4c:75:58:c4:90:75:04:39:9f:da:5c:86:41:
97:c1:57:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:18:33 2026 by rpki-client