Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier: av9UyYDHxXyhgEdJhwAW7QY4mXovVEsTaMZ4ibwtT0M=
Subject key identifier: 47:34:20:14:61:D2:15:E9:B0:E3:61:65:35:00:1C:3F:C8:33:11:F1
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 019E3117AE6EDE2CE25D3B4A0E50285CD941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number: 15A4
Signing time: Sat 16 May 2026 14:01:35 +0000
Manifest this update: Sat 16 May 2026 14:01:35 +0000
Manifest next update: Sun 17 May 2026 14:01:35 +0000
Files and hashes: 1: aBOBuL_H29H0y-_-QBP0Ehj1DT0.roa (hash: O7ZWbL6IufsmlkGlAPRYtWsGACsMquG9gC8M6gOxrwY=)
2: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: YuTRth7VCynGpV4QRrVLtBcjHgfTuW+HSMlki9m27vk=)
3: y0DK2UjH_DKReYw5NUdmHs1btyA.roa (hash: VfLGmY9ACuSYXNETyrRKCoYE5Ubu9KeR/Haw0EJrQro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:ae:6e:de:2c:e2:5d:3b:4a:0e:50:28:5c:d9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: May 16 14:01:35 2026 GMT
Not After : May 17 14:01:35 2026 GMT
Subject: CN=4734201461d215e9b0e3616535001c3fc83311f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:87:70:fb:88:c1:e1:92:b7:4b:1a:a7:95:
f7:2c:73:d8:11:61:be:53:18:ff:bd:02:e7:d2:8d:
54:5e:ea:11:08:93:8a:f9:88:fc:d2:b7:8b:c7:82:
c2:62:ef:0d:6d:86:58:7d:6d:06:40:d9:08:a8:0d:
9b:5f:4c:16:8b:02:0f:3a:5d:16:ac:a3:a0:6b:2f:
97:ce:38:85:44:f9:7e:97:de:60:62:be:af:3b:19:
5b:95:4d:1c:39:fb:59:34:da:47:73:4a:e5:e6:be:
f6:83:eb:76:8f:94:99:48:61:d4:13:7f:7d:73:fb:
7b:74:8a:2e:13:34:ca:54:7a:00:e3:63:31:e8:b1:
81:16:11:5f:e7:cb:7e:e8:22:9c:69:5a:c6:f5:89:
e9:e4:32:f1:31:da:f2:73:83:08:2e:2a:2a:af:bb:
74:cc:74:3c:d0:67:4d:3d:6b:c6:ef:dc:62:20:57:
b5:e3:07:dd:5a:6c:64:c1:b3:27:d5:ee:da:ce:1d:
1b:96:6f:ac:36:fd:fd:7d:2d:9b:2e:9b:8d:5e:1d:
dd:80:a8:42:bd:bb:63:79:e1:33:e5:e7:ea:65:b1:
df:33:78:39:93:bc:5a:98:0f:d4:d3:a0:dd:c2:99:
37:c2:43:3a:77:d7:58:b4:5a:a3:92:98:7e:aa:76:
9f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:34:20:14:61:D2:15:E9:B0:E3:61:65:35:00:1C:3F:C8:33:11:F1
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:8f:57:de:ea:67:03:49:88:fe:88:2b:e6:4b:88:95:71:77:
fc:71:5e:c4:11:53:ef:9d:e4:72:85:10:19:e5:2a:56:ff:29:
31:cc:22:72:fb:28:63:80:bf:c4:f7:c5:1f:65:d4:4b:68:92:
61:2e:18:d6:9a:74:64:67:b5:72:e1:4a:21:5a:56:95:52:45:
cf:9c:80:bb:ae:7c:52:5c:2c:3e:50:b1:fb:7e:2c:5f:f2:54:
17:87:51:b7:4b:43:bf:07:f1:e1:17:ae:a3:5f:2c:1b:5f:cb:
f5:69:47:e9:e5:ba:78:42:ea:c6:7a:e4:49:34:49:51:92:7f:
79:d7:1c:42:f2:52:e7:62:7d:fb:c3:f4:50:ae:73:61:4a:af:
bd:6a:68:e2:8d:00:df:41:41:26:06:aa:a1:0a:45:25:18:b4:
70:d9:af:34:dd:75:a4:04:87:d7:98:b4:87:bf:23:e0:c9:11:
77:45:cb:f1:d4:5e:48:a7:e9:e4:83:ea:a4:e3:c2:d3:ca:ed:
7e:a5:ba:ef:45:85:4a:60:c9:21:04:05:ff:ad:d3:75:4c:26:
43:0d:0e:2b:03:8f:10:b7:f3:6d:82:33:cd:e0:05:2e:da:cd:
da:0a:83:10:48:70:27:31:9b:19:12:73:db:d8:66:57:66:43:
1a:42:0c:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xF65u3iziXTtKDlAoXNlBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MTI3MmU0ZTgxODZiOWNmM2QxZWI0MjY2NWM1M2NlNzE0
ZjRkNGIwHhcNMjYwNTE2MTQwMTM1WhcNMjYwNTE3MTQwMTM1WjAzMTEwLwYDVQQD
Eyg0NzM0MjAxNDYxZDIxNWU5YjBlMzYxNjUzNTAwMWMzZmM4MzMxMWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdWHcPuIweGSt0sap5X3LHPYEWG+
Uxj/vQLn0o1UXuoRCJOK+Yj80reLx4LCYu8NbYZYfW0GQNkIqA2bX0wWiwIPOl0W
rKOgay+XzjiFRPl+l95gYr6vOxlblU0cOftZNNpHc0rl5r72g+t2j5SZSGHUE399
c/t7dIouEzTKVHoA42Mx6LGBFhFf58t+6CKcaVrG9Ynp5DLxMdryc4MILioqr7t0
zHQ80GdNPWvG79xiIFe14wfdWmxkwbMn1e7azh0blm+sNv39fS2bLpuNXh3dgKhC
vbtjeeEz5efqZbHfM3g5k7xamA/U06Ddwpk3wkM6d9dYtFqjkph+qnafGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEc0IBRh0hXpsONhZTUAHD/IMxHxMB8GA1UdIwQY
MBaAFIUScuToGGuc89HrQmZcU85xT01LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lZDk0YjEtYjU3My00NWU0LTllMjEt
M2Y0MmM3MTc4MGJjLzEvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lZDk0YjEtYjU3My00NWU0LTllMjEtM2Y0MmM3MTc4MGJj
LzEvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABY9X3upn
A0mI/ogr5kuIlXF3/HFexBFT753kcoUQGeUqVv8pMcwicvsoY4C/xPfFH2XUS2iS
YS4Y1pp0ZGe1cuFKIVpWlVJFz5yAu658UlwsPlCx+34sX/JUF4dRt0tDvwfx4Reu
o18sG1/L9WlH6eW6eELqxnrkSTRJUZJ/edccQvJS52J9+8P0UK5zYUqvvWpo4o0A
30FBJgaqoQpFJRi0cNmvNN11pASH15i0h78j4MkRd0XL8dReSKfp5IPqpOPC08rt
fqW670WFSmDJIQQF/63TdUwmQw0OKwOPELfzbYIzzeAFLtrN2gqDEEhwJzGbGRJz
29hmV2ZDGkIM/w==
-----END CERTIFICATE-----
Generated at Sat May 16 22:01:47 2026 by rpki-client