Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
File: hD0a_PE70hF9R99oPkCmMocATP4.mft (raw, json)
Hash identifier: apeqLAriEFSi9tCEXMHjIA4Pfwz840mCUz5hYLSEtQw=
Subject key identifier: 22:84:0C:AE:5A:8A:1C:C7:40:10:41:8B:C4:B2:A7:BF:84:1C:E8:1F
Authority key identifier: 84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
Certificate issuer: /CN=843d1afcf13bd2117d47df683e40a63287004cfe
Certificate serial: 019ED42B5E96535B9BBBA23CDB2A3C59A2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
Manifest number: 160E
Signing time: Wed 17 Jun 2026 06:01:12 +0000
Manifest this update: Wed 17 Jun 2026 06:01:12 +0000
Manifest next update: Thu 18 Jun 2026 06:01:12 +0000
Files and hashes: 1: blJ-TZh-82zY8BmhlGXDYcWlXEM.roa (hash: Fd7qkgfgnAB5yGlcwTOLNMtcHfXu1EK11nyoGzaI4T8=)
2: hD0a_PE70hF9R99oPkCmMocATP4.crl (hash: 91L3FCvw+iFgxhONMDBNzLbkBFClfbij4niDl4bSDjs=)
3: uGcdeOeH2FGE8oSm_emFftbBDBI.roa (hash: K6Jsrsz0fx7XMWqDVYW8cVOMG7U2AmGR+nHljnd4RYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:2b:5e:96:53:5b:9b:bb:a2:3c:db:2a:3c:59:a2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843d1afcf13bd2117d47df683e40a63287004cfe
Validity
Not Before: Jun 17 06:01:12 2026 GMT
Not After : Jun 18 06:01:12 2026 GMT
Subject: CN=22840cae5a8a1cc74010418bc4b2a7bf841ce81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b3:28:e1:d6:3e:cc:fa:d1:e4:e7:6e:19:e4:
bf:47:96:1e:cb:2a:81:4c:b7:94:a2:f3:c2:ae:50:
79:39:6f:62:63:a7:c7:fe:da:7d:ed:79:68:f5:3b:
9d:a6:0b:ef:84:69:7e:09:dc:01:78:7e:43:fc:fa:
1d:75:d0:43:8f:e5:21:f1:2c:1c:c4:b4:07:83:d9:
da:2c:a0:99:30:1f:d7:d8:35:80:f4:3f:e0:a2:48:
4b:9c:82:46:51:2b:e4:d2:69:3b:78:8b:69:3a:eb:
1c:98:04:bb:3c:e2:f4:23:5a:91:f0:36:b4:0b:a6:
8a:e7:f3:51:1c:c3:30:af:d7:f0:3a:4b:3a:5c:91:
a2:8f:58:3f:5a:3f:5f:7c:24:3a:03:56:7a:af:a0:
53:41:57:ce:48:00:e3:da:c1:ad:d0:33:5c:ec:9b:
32:b1:5f:1a:25:e9:ee:05:a6:59:61:8f:e4:f2:f7:
ee:21:51:ca:ee:5c:57:81:38:1c:aa:70:7d:1a:d9:
26:e6:aa:25:58:c5:60:dc:74:d6:6f:81:65:06:39:
ca:82:17:b0:93:af:72:76:91:21:04:11:c9:62:5f:
8e:b2:06:c5:8e:81:9c:a2:60:0a:6b:be:ab:d1:54:
bc:e8:49:fd:b3:a4:f2:19:cc:ae:72:19:6d:be:02:
bd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:84:0C:AE:5A:8A:1C:C7:40:10:41:8B:C4:B2:A7:BF:84:1C:E8:1F
X509v3 Authority Key Identifier:
keyid:84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:4e:c7:a9:b3:20:98:b6:db:53:d7:65:4e:7e:c0:1a:54:a4:
fe:f3:da:04:ca:60:32:57:70:80:a5:63:3c:38:04:14:73:6c:
9e:d9:7b:12:a0:2c:58:02:c5:2f:03:d6:4b:31:2e:12:94:93:
7e:2c:b8:14:62:58:30:22:0c:a9:20:3a:27:02:c1:58:7d:a0:
8b:ae:30:44:d6:3d:42:4a:8b:cc:72:08:e5:a9:59:a1:e7:64:
d6:f2:49:39:6a:6f:56:ad:86:3f:1e:7f:53:98:e5:36:cd:75:
53:3b:74:92:ea:63:58:0f:55:86:33:36:57:d5:fe:22:ff:0b:
d4:61:c2:b3:52:fc:90:62:a3:e2:ee:20:e0:4f:cc:31:cb:ff:
79:37:11:c8:73:90:e2:b1:21:f8:f2:52:15:9f:2e:ae:d2:ba:
44:01:70:98:e8:67:d0:1e:87:67:4a:56:89:9e:2c:84:b9:54:
57:10:a0:24:05:27:d3:26:20:01:23:ce:f6:21:d9:ba:f6:e6:
20:91:09:f3:64:53:b8:13:4f:53:22:37:d6:91:81:96:06:a9:
2f:54:19:e4:3a:71:60:06:d0:b5:0f:29:15:17:ef:1e:64:fc:
4c:61:6f:f5:a4:b6:ab:19:f1:c0:ef:bf:33:b5:d0:4b:f5:04:
a8:4c:aa:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7UK16WU1ubu6I82yo8WaLjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0M2QxYWZjZjEzYmQyMTE3ZDQ3ZGY2ODNlNDBhNjMyODcw
MDRjZmUwHhcNMjYwNjE3MDYwMTEyWhcNMjYwNjE4MDYwMTEyWjAzMTEwLwYDVQQD
EygyMjg0MGNhZTVhOGExY2M3NDAxMDQxOGJjNGIyYTdiZjg0MWNlODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bMo4dY+zPrR5OduGeS/R5YeyyqB
TLeUovPCrlB5OW9iY6fH/tp97Xlo9TudpgvvhGl+CdwBeH5D/PodddBDj+Uh8Swc
xLQHg9naLKCZMB/X2DWA9D/gokhLnIJGUSvk0mk7eItpOuscmAS7POL0I1qR8Da0
C6aK5/NRHMMwr9fwOks6XJGij1g/Wj9ffCQ6A1Z6r6BTQVfOSADj2sGt0DNc7Jsy
sV8aJenuBaZZYY/k8vfuIVHK7lxXgTgcqnB9Gtkm5qolWMVg3HTWb4FlBjnKghew
k69ydpEhBBHJYl+OsgbFjoGcomAKa76r0VS86En9s6TyGcyuchltvgK90wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKEDK5aihzHQBBBi8Syp7+EHOgfMB8GA1UdIwQY
MBaAFIQ9GvzxO9IRfUffaD5ApjKHAEz+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8xNzMzMDYtMmRiZC00YWQ4LWJkNTEt
YjFmM2JjYzY3YWFlLzEvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8xNzMzMDYtMmRiZC00YWQ4LWJkNTEtYjFmM2JjYzY3YWFl
LzEvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOU7HqbMg
mLbbU9dlTn7AGlSk/vPaBMpgMldwgKVjPDgEFHNsntl7EqAsWALFLwPWSzEuEpST
fiy4FGJYMCIMqSA6JwLBWH2gi64wRNY9QkqLzHII5alZoedk1vJJOWpvVq2GPx5/
U5jlNs11Uzt0kupjWA9VhjM2V9X+Iv8L1GHCs1L8kGKj4u4g4E/MMcv/eTcRyHOQ
4rEh+PJSFZ8urtK6RAFwmOhn0B6HZ0pWiZ4shLlUVxCgJAUn0yYgASPO9iHZuvbm
IJEJ82RTuBNPUyI31pGBlgapL1QZ5DpxYAbQtQ8pFRfvHmT8TGFv9aS2qxnxwO+/
M7XQS/UEqEyq2Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 13:00:41 2026 by rpki-client