Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
File: hBhM6RkCNkC7klbC2NGgSfoQJSA.mft (raw, json)
Hash identifier: Nos80SAfOYq2NNwUgCwfCQm5mCQi6ziqiNCYFRyQNhk=
Subject key identifier: 60:95:58:78:61:43:B5:5D:B7:4F:22:35:AB:07:17:38:18:54:30:B5
Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
Certificate issuer: /CN=84184ce919023640bb9256c2d8d1a049fa102520
Certificate serial: 019E6ACFF1D082A0A9B0DA4D483F0D00E3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
Manifest number: 1931
Signing time: Wed 27 May 2026 19:01:13 +0000
Manifest this update: Wed 27 May 2026 19:01:13 +0000
Manifest next update: Thu 28 May 2026 19:01:13 +0000
Files and hashes: 1: Dbjfk_x94XkWbUqrQRgXiB2IZmc.roa (hash: K3KjeMVe4MzmZ6PY7GfHmSzcgyG6kpzevKCxHtsqWyY=)
2: TQnSP-doaEZ3QwoQxZQkKdn_Zm8.roa (hash: tNscAkBZYAiTq3QBweAAt6lTq4JqIfcKk5dVMuydvOY=)
3: hBhM6RkCNkC7klbC2NGgSfoQJSA.crl (hash: UhADYvo4MY7dxdus/+h5xSvm9ukdacRGxeKJ4suLE04=)
4: hPluaz2ce72z5Cezy2XMePaJEmA.roa (hash: l8ELIU5y8+HQtxJL1W6JSqmakct+AgSg22KUXwRKNOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 14:25:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6a:cf:f1:d0:82:a0:a9:b0:da:4d:48:3f:0d:00:e3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520
Validity
Not Before: May 27 19:01:13 2026 GMT
Not After : May 28 19:01:13 2026 GMT
Subject: CN=609558786143b55db74f2235ab071738185430b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c4:ee:a0:75:2e:bd:9f:5e:29:9a:e5:4e:4b:
90:1b:ff:26:cf:fd:55:29:25:c8:35:51:d8:b8:ba:
76:7c:08:c4:86:7a:39:77:5b:ef:5a:b5:d4:e0:67:
65:e6:af:26:3d:49:34:39:9d:eb:30:13:2b:a4:0a:
17:3c:9c:56:a6:00:d3:cf:be:27:e8:ea:ed:d3:77:
b4:3a:f3:bf:16:71:22:c2:d2:4d:ce:5b:2d:ea:9d:
21:65:19:67:72:0f:1f:e2:20:be:42:fc:7b:d2:d7:
3c:b5:51:96:d8:40:1c:40:bc:94:05:b4:bd:a4:2d:
7d:4c:90:e4:6e:dc:a8:89:10:49:42:32:35:f0:86:
72:2c:92:b0:d3:36:54:bd:d2:49:6f:8c:0e:42:61:
ec:c6:e8:49:4c:f6:3e:50:0f:55:df:0d:09:c1:37:
87:c9:c6:a6:9f:66:13:e8:7a:7c:3b:55:79:2e:26:
02:82:53:09:45:b2:32:5c:0d:f2:2f:c7:81:17:19:
9a:20:4c:08:a4:2d:1d:02:85:97:16:09:42:79:0c:
31:a8:1f:70:70:2d:34:3d:14:ed:d8:9a:c2:eb:da:
3e:8b:c1:0b:ad:55:c1:bc:2c:d8:89:4b:c2:6f:c5:
88:97:84:80:ce:66:10:8f:9f:be:00:18:7b:56:24:
49:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:95:58:78:61:43:B5:5D:B7:4F:22:35:AB:07:17:38:18:54:30:B5
X509v3 Authority Key Identifier:
keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:10:e8:8a:6c:08:69:43:32:ab:4c:14:a4:b3:84:64:3d:dd:
64:f7:c9:6c:fc:6e:8b:f2:3d:b7:74:4f:8e:e7:51:cb:c8:ca:
9d:04:b0:9e:f2:3e:20:c5:71:57:ee:af:44:38:d2:8c:8a:8e:
d9:0c:8e:4c:50:eb:40:73:06:12:52:c9:92:90:5a:ba:fe:7d:
8b:58:78:eb:5b:16:ff:1f:14:5c:40:50:27:f1:37:53:71:be:
8c:fa:c2:28:95:69:42:84:ed:54:88:d5:98:bf:64:58:eb:c1:
11:82:85:b3:16:16:33:cd:b4:8a:e0:91:f2:80:e2:42:02:0c:
d7:b3:c8:6a:07:b4:04:86:60:92:79:53:e4:6a:ed:7a:3a:5f:
55:a1:5f:40:62:14:8c:2a:73:e9:88:7a:01:88:e9:fa:c5:b9:
72:1b:3f:63:12:58:14:77:c1:99:b3:d2:ad:7a:ff:ad:1d:5e:
57:7a:70:a8:6a:b7:3e:c0:a5:b9:3c:59:8c:92:06:d3:63:6c:
2d:c0:2d:0c:7d:7b:24:53:7d:1e:75:82:aa:57:59:78:24:8a:
1b:1e:20:ac:0b:45:f9:67:28:75:10:c9:3e:92:1d:46:5f:e1:
c5:a4:c0:4a:ed:a7:06:0b:d5:c2:d7:0c:32:7e:fe:35:a8:20:
57:8a:4f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 21:32:16 2026 by rpki-client