Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
File: hT8dWhiK5rK18qoTjbj5mqWq16E.mft (raw, json)
Hash identifier: bkebVUZhFHl1YQ0ZpDSIvDr/xwyssmHpaSU65WH2v+Y=
Subject key identifier: 8E:36:0D:34:7C:3A:C2:01:7F:9F:EC:A4:BC:1E:A9:41:86:C4:E3:17
Authority key identifier: 85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
Certificate issuer: /CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Certificate serial: 019E31BC2F7D8CF27A40D8947FB2DC9FC6A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
Manifest number: 024B
Signing time: Sat 16 May 2026 17:01:16 +0000
Manifest this update: Sat 16 May 2026 17:01:16 +0000
Manifest next update: Sun 17 May 2026 17:01:16 +0000
Files and hashes: 1: FC_VFDWxRgvoLdyaf52ezfjlzY4.roa (hash: ikf5D2Q+V7XdSE1hWi8KX7L8XUe1goHfTjIB4LBsAqg=)
2: hT8dWhiK5rK18qoTjbj5mqWq16E.crl (hash: hZAtCAnd8UcgQN1E+lWNCSYSlFHv7MdJXxh/ATSwwKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 17:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bc:2f:7d:8c:f2:7a:40:d8:94:7f:b2:dc:9f:c6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Validity
Not Before: May 16 17:01:16 2026 GMT
Not After : May 17 17:01:16 2026 GMT
Subject: CN=8e360d347c3ac2017f9feca4bc1ea94186c4e317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:94:38:e6:1d:03:c9:9c:d5:ed:db:fc:82:6f:
ae:db:7f:45:be:47:7f:5a:21:cd:f3:08:b3:33:1b:
b6:2e:97:4d:ce:9b:8d:49:de:f9:85:ad:19:46:5a:
06:1e:0f:8d:53:40:2e:b0:80:9c:f7:1e:65:d5:57:
15:ec:bf:6e:19:ad:19:94:54:63:19:ac:f7:04:af:
11:6d:44:79:3a:54:2d:12:f7:b5:a4:04:5f:5b:d0:
13:98:84:45:c0:12:ba:61:5c:cd:6c:41:cc:2b:08:
75:10:ea:b6:fb:dd:9b:3b:0c:db:28:4f:e9:3f:1a:
62:17:46:e3:73:6e:98:53:93:37:d4:cc:bd:a1:f1:
a9:ac:bd:3d:77:f0:61:11:f3:36:af:10:ef:6f:21:
1f:40:3c:98:d5:3d:3f:c7:0e:61:1d:96:22:83:10:
f6:92:7b:e1:6a:2e:d2:62:c3:42:6a:53:b0:35:65:
c3:e6:20:b7:07:8a:bd:a7:33:23:14:00:d7:79:33:
d6:45:fb:fd:56:11:94:ef:d5:1d:1e:df:70:11:e7:
40:9d:a9:49:30:2b:53:de:6c:af:e1:0a:a9:c6:1d:
fc:a6:aa:a3:ba:43:f7:cb:b9:cc:a9:2b:a7:37:1c:
a0:60:88:0e:5f:1e:e6:a3:63:29:96:42:ec:3a:9e:
93:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:36:0D:34:7C:3A:C2:01:7F:9F:EC:A4:BC:1E:A9:41:86:C4:E3:17
X509v3 Authority Key Identifier:
keyid:85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:50:4a:67:3b:c3:40:31:96:f2:2f:a6:27:75:98:b7:08:ad:
aa:e9:76:cd:f1:bb:98:55:f8:3e:88:4f:67:ce:cb:49:31:b8:
04:6a:71:6f:f4:c4:7c:57:3f:09:ef:7f:30:b6:7e:41:44:0b:
4a:47:8d:d9:5f:37:1a:61:75:15:a5:4e:38:f6:d7:7b:13:8d:
98:7e:52:e2:25:72:4d:91:cd:38:90:4d:d9:60:bb:49:3d:31:
aa:09:30:56:be:a5:2b:69:0d:8a:fa:fd:3d:12:8c:8a:00:8f:
15:f5:e0:9c:12:21:01:94:be:6d:62:a6:e5:6f:0b:4a:d1:7c:
52:de:2a:f5:92:55:56:da:8f:d5:a2:92:14:bc:08:38:5d:b8:
5a:42:09:0e:e2:1e:98:71:ef:7e:ad:ff:e5:fb:50:85:cb:29:
89:53:b9:f9:0f:1b:d8:c3:4b:34:85:3f:bf:c7:3b:ee:7b:69:
4d:ab:9e:87:2f:cc:62:dd:0c:05:2f:0e:29:f9:87:ac:7e:ea:
d8:60:f2:de:fe:53:00:58:2d:97:23:39:8d:0b:7a:72:22:17:
41:5a:54:6f:a3:52:b2:69:bb:5d:8c:a5:d1:12:23:bc:a9:fd:
38:0b:b3:f7:9f:69:1a:74:f8:ca:a0:3c:3e:03:04:f4:85:36:
93:ff:ab:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:40:40 2026 by rpki-client