Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
File: hu4gHGXWVe6c_iUflR6pG7oVRWc.mft (raw, json)
Hash identifier: o6QCniU3lh/EXihS7WE35aOC25Wec4+eH30Pb5d2Wos=
Subject key identifier: 24:72:4B:DA:14:EE:33:23:5D:D7:F4:80:F7:A4:57:B7:48:8E:4C:6B
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Certificate issuer: /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial: 019E3F40E943A6573FAF439A9B64781B1694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
Manifest number: 1928
Signing time: Tue 19 May 2026 08:01:18 +0000
Manifest this update: Tue 19 May 2026 08:01:18 +0000
Manifest next update: Wed 20 May 2026 08:01:18 +0000
Files and hashes: 1: Xy9zoi1ohlKni320yp6JqiAEau4.roa (hash: e84mTt2wqPadUhKCAZ9tM4AfKevo/rHiL4d3AYZU0CY=)
2: heKnF0nPw3navL7mvVdrP7ZenfE.roa (hash: SN8nxNReThCLTC+u68FN/Bqg6og3YUjtGA8xvnnpO7A=)
3: hu4gHGXWVe6c_iUflR6pG7oVRWc.crl (hash: c4UaR7wr3XqDEGn6y8vtaowle/Nj/Jt9YFyrAgV4RNA=)
4: o_t0N0oazoSoRUIX38zmHacjpmI.roa (hash: 5Xwms+xTtZNdTeon1Aug9x31utWCflJ+A+WQraSsVuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 May 2026 07:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:40:e9:43:a6:57:3f:af:43:9a:9b:64:78:1b:16:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
Validity
Not Before: May 19 08:01:18 2026 GMT
Not After : May 20 08:01:18 2026 GMT
Subject: CN=24724bda14ee33235dd7f480f7a457b7488e4c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:96:57:9d:d8:88:dd:99:fb:ee:7c:92:e4:
33:78:39:3d:6b:2c:71:1d:26:b3:72:aa:6b:f4:16:
7f:06:38:da:b2:bc:5b:bd:40:63:46:c9:94:f6:b6:
4b:3f:c9:37:f0:6b:e8:a8:ed:5d:87:c5:99:d5:93:
8d:50:70:8a:24:20:5e:57:8d:c7:dd:77:ea:0e:16:
ad:5f:1e:41:03:40:b4:e4:cf:6d:75:38:2a:f9:14:
8a:b6:e8:4e:4c:3a:83:8c:65:c1:75:00:d9:82:18:
bf:7d:ee:9e:41:48:22:82:73:a4:74:77:8c:e2:32:
3e:82:80:d3:75:9d:1a:1e:ac:72:1f:62:7d:5c:91:
61:ad:07:60:35:85:e4:11:f9:2d:42:b0:a9:4c:2e:
b4:3c:58:85:29:89:05:87:fb:d7:d0:08:59:a6:7f:
97:c5:7a:2c:d8:e9:a6:04:dc:1e:49:fe:74:cc:fa:
b1:c0:70:0d:6f:1a:2d:3a:eb:39:a9:97:13:51:43:
c4:88:e2:e2:8f:79:58:70:67:69:b3:7e:fd:b8:e0:
6a:06:d4:bb:c9:b5:29:f1:47:8b:da:49:43:dd:fe:
bf:77:fd:95:6a:3a:eb:52:23:18:db:7b:51:d5:c5:
9c:b7:4f:a2:be:db:f3:c5:54:c7:ee:49:75:47:e3:
ac:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:72:4B:DA:14:EE:33:23:5D:D7:F4:80:F7:A4:57:B7:48:8E:4C:6B
X509v3 Authority Key Identifier:
keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fd:3e:43:2a:d7:27:be:25:12:c9:99:7e:f3:1e:80:3b:d2:
7d:5e:11:c7:51:fb:0e:a9:c8:98:be:d2:3e:84:31:34:16:1f:
28:f8:d2:95:ab:f4:de:c5:eb:76:ac:cb:06:b4:6d:4c:15:a6:
ad:0f:fb:36:01:60:97:ef:a0:bc:e8:0e:af:d1:60:85:43:16:
a7:43:7b:8f:7a:e3:f8:ce:01:1e:8c:13:ce:6d:61:f5:8d:5c:
22:7e:44:b4:13:af:4b:1d:d5:99:d9:3d:4e:23:22:60:56:c3:
1b:2b:34:7c:14:7b:f5:da:29:4d:87:10:4b:b7:5e:de:bc:0d:
f5:94:c2:a9:c9:8c:d5:85:1d:96:f7:be:f4:26:13:e3:4f:50:
9d:d0:79:99:f2:ed:74:f6:0e:4d:36:e0:cb:ce:99:a5:80:cb:
b7:09:3f:c2:69:41:30:5a:df:5b:d8:b6:a1:14:12:45:f0:03:
98:2f:8e:45:a5:8a:a5:d1:1f:16:4b:4d:ea:15:cd:ee:93:cf:
49:a0:d7:92:de:37:66:bc:e6:51:b6:cb:6a:96:39:d9:3a:4f:
4a:75:c9:88:3d:07:3a:47:07:55:7c:3b:e8:5f:2f:36:6b:fd:
3b:19:e3:43:af:88:e2:32:ab:68:3e:33:8c:8c:19:b5:8d:99:
45:26:82:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 10:21:22 2026 by rpki-client