Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
File: hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft (raw, json)
Hash identifier: hF2sQukJbbyExTdfD57yAPooMgoMnHNIepbOFAo4VFM=
Subject key identifier: C7:14:BA:4E:77:FF:16:21:61:0B:27:E2:84:C2:CB:63:47:E4:83:F0
Authority key identifier: 85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
Certificate issuer: /CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Certificate serial: 019E31177EE0619F1C4CB84E1BB2F64F692E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
Manifest number: 1036
Signing time: Sat 16 May 2026 14:01:23 +0000
Manifest this update: Sat 16 May 2026 14:01:23 +0000
Manifest next update: Sun 17 May 2026 14:01:23 +0000
Files and hashes: 1: Mm3cGWuzg7gyTt25MrA_Cb8WYyU.roa (hash: QSO9mmv4K2NyhZinj8I/GzIYb/RrAcM6Y8mv7blhZ40=)
2: hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl (hash: CkjR+HMBFy6B50+kf4opBOXczfERfXSnUQuNObY06rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:7e:e0:61:9f:1c:4c:b8:4e:1b:b2:f6:4f:69:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Validity
Not Before: May 16 14:01:23 2026 GMT
Not After : May 17 14:01:23 2026 GMT
Subject: CN=c714ba4e77ff1621610b27e284c2cb6347e483f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:77:67:67:6f:8f:ce:1d:23:ac:89:0a:59:84:
31:12:c0:a6:3b:a4:c8:13:91:51:de:30:89:aa:c1:
36:ab:f4:9e:4a:60:95:f3:20:62:2e:be:70:74:85:
e2:d7:2b:63:f9:56:c0:2f:8a:8b:53:22:f1:9e:e5:
98:84:d8:d5:7c:29:17:d4:ae:95:70:67:f2:fd:c8:
a2:de:e9:48:7b:56:b1:60:40:46:4d:20:d6:df:8e:
a2:21:ec:1f:9c:53:71:be:28:bc:fa:3d:fc:33:03:
e1:0e:af:b0:91:ff:95:5a:e4:e6:46:67:98:ba:c9:
43:f8:f8:af:17:90:a0:e1:1e:3e:f8:5d:b6:c2:72:
0a:bb:5b:75:b4:40:21:26:1e:88:2a:8f:bf:42:7f:
1b:8a:00:42:ba:67:93:35:4e:d3:2c:47:a0:70:e3:
9e:d7:f3:78:de:a7:f7:21:68:f0:12:1c:65:b1:60:
df:38:06:90:91:55:0d:0d:e9:ff:60:f4:74:a3:06:
44:56:62:d6:cc:f8:bb:d1:ec:71:1b:c4:25:88:c8:
d1:13:9a:25:76:06:09:28:3d:bb:42:31:1c:ee:59:
c2:e7:75:31:91:3a:82:3c:c1:06:af:3e:39:cc:47:
ed:dc:cb:69:d1:4e:13:f9:ee:30:55:04:2d:67:33:
6d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:14:BA:4E:77:FF:16:21:61:0B:27:E2:84:C2:CB:63:47:E4:83:F0
X509v3 Authority Key Identifier:
keyid:85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:63:2f:38:b1:9d:01:2d:cd:5d:96:f8:40:7a:47:60:14:e6:
75:bf:9c:d2:44:a2:ad:95:48:ae:87:e1:2a:2b:25:c1:76:0d:
4e:2f:a9:52:38:e3:cf:bb:93:72:15:af:d7:a7:1b:e2:67:9a:
19:e2:e9:9e:cc:ac:e3:70:78:ed:fb:4d:de:b6:ae:78:5e:10:
32:33:5a:a0:24:e1:5a:df:8a:af:df:dc:4a:25:4e:59:4a:c1:
68:cc:fb:8f:39:cc:a3:a1:af:17:b9:57:08:52:52:76:70:43:
0a:5d:f9:5a:20:d2:b5:00:39:6a:f3:f7:9c:8a:25:7e:3e:e6:
fb:cc:81:0b:3b:27:40:e9:9e:3b:35:1a:89:aa:42:69:55:36:
b2:d5:a8:c9:b0:ba:5a:44:dd:4b:5d:f7:40:04:33:be:cd:56:
86:09:ca:f7:af:c7:7e:3d:cf:14:d1:15:e4:3e:b6:2a:8e:fe:
9e:ec:73:be:47:8d:5c:2d:d5:23:a2:ab:7f:ff:48:0c:73:e5:
f1:50:4a:27:0b:17:ca:41:ab:f1:ce:a3:b7:2d:1d:8a:fa:20:
df:f0:79:a4:5f:e5:e5:5e:ad:00:28:d6:41:1c:e7:eb:57:e3:
54:f9:83:c4:68:92:53:b6:b0:b8:fb:e1:ca:3d:81:60:6f:8c:
48:54:d8:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xF37gYZ8cTLhOG7L2T2kuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZDA1ZTAxN2UzMzNkMTdiM2FlYjhjNWQ0OTQzYmU4ZGM2
N2MwODQwHhcNMjYwNTE2MTQwMTIzWhcNMjYwNTE3MTQwMTIzWjAzMTEwLwYDVQQD
EyhjNzE0YmE0ZTc3ZmYxNjIxNjEwYjI3ZTI4NGMyY2I2MzQ3ZTQ4M2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkndnZ2+Pzh0jrIkKWYQxEsCmO6TI
E5FR3jCJqsE2q/SeSmCV8yBiLr5wdIXi1ytj+VbAL4qLUyLxnuWYhNjVfCkX1K6V
cGfy/cii3ulIe1axYEBGTSDW346iIewfnFNxvii8+j38MwPhDq+wkf+VWuTmRmeY
uslD+PivF5Cg4R4++F22wnIKu1t1tEAhJh6IKo+/Qn8bigBCumeTNU7TLEegcOOe
1/N43qf3IWjwEhxlsWDfOAaQkVUNDen/YPR0owZEVmLWzPi70exxG8QliMjRE5ol
dgYJKD27QjEc7lnC53UxkTqCPMEGrz45zEft3Mtp0U4T+e4wVQQtZzNtbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcUuk53/xYhYQsn4oTCy2NH5IPwMB8GA1UdIwQY
MBaAFIXQXgF+Mz0Xs664xdSUO+jcZ8CEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGRCZUFYNHpQUmV6cnJqRjFKUTc2Tnhud0lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8wOTVhYzktYzNmYS00NjVkLTgzMWQt
NDdjOTUwMzM2ZTJmLzEvaGRCZUFYNHpQUmV6cnJqRjFKUTc2Tnhud0lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8wOTVhYzktYzNmYS00NjVkLTgzMWQtNDdjOTUwMzM2ZTJm
LzEvaGRCZUFYNHpQUmV6cnJqRjFKUTc2Tnhud0lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2MvOLGd
AS3NXZb4QHpHYBTmdb+c0kSirZVIrofhKislwXYNTi+pUjjjz7uTchWv16cb4mea
GeLpnsys43B47ftN3raueF4QMjNaoCThWt+Kr9/cSiVOWUrBaMz7jznMo6GvF7lX
CFJSdnBDCl35WiDStQA5avP3nIolfj7m+8yBCzsnQOmeOzUaiapCaVU2stWoybC6
WkTdS133QAQzvs1WhgnK96/Hfj3PFNEV5D62Ko7+nuxzvkeNXC3VI6Krf/9IDHPl
8VBKJwsXykGr8c6jty0divog3/B5pF/l5V6tACjWQRzn61fjVPmDxGiSU7awuPvh
yj2BYG+MSFTY1g==
-----END CERTIFICATE-----
Generated at Sat May 16 23:29:11 2026 by rpki-client