Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
File: hTYUYRmwRFOQguMmzKkDIAuNSxo.mft (raw, json)
Hash identifier: SsfbaOd5rMU4T8UdK9VQZt3Je9C00NOioNrCTe08kHk=
Subject key identifier: E2:A3:C7:62:8A:42:7A:9D:1A:0E:70:DA:64:0C:EC:C7:D4:C5:7F:99
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial: 019EC29257D0837A82A575A50B724B3763EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
Manifest number: 12A6
Signing time: Sat 13 Jun 2026 20:00:31 +0000
Manifest this update: Sat 13 Jun 2026 20:00:31 +0000
Manifest next update: Sun 14 Jun 2026 20:00:31 +0000
Files and hashes: 1: 4IwzD6JWssSfDrS7OsowJYf8F3g.roa (hash: 3STzPQwFjgmuSyiPKC+VcXtn9kHY3QHNznY54Mamy30=)
2: SgMOoWz5gJhb0nyT-ZKsGgLzAOg.roa (hash: zgTRF9Sx7egnoTtrUbB6SPfcPU50038KU3DAntDwjks=)
3: hTYUYRmwRFOQguMmzKkDIAuNSxo.crl (hash: J8WmZBhCLsKxaBuREem8Yyvl/LxXMvuRDu/gPvGq6OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:57:d0:83:7a:82:a5:75:a5:0b:72:4b:37:63:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
Validity
Not Before: Jun 13 20:00:31 2026 GMT
Not After : Jun 14 20:00:31 2026 GMT
Subject: CN=e2a3c7628a427a9d1a0e70da640cecc7d4c57f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:64:72:d2:b6:4d:f4:6b:b4:0e:30:68:d3:
5a:f8:ed:96:3c:d0:39:fb:a7:41:0c:2f:71:7d:ce:
f5:09:1e:67:31:8e:bf:d5:85:c2:5a:c7:f1:c7:f8:
2a:39:0c:4e:a9:67:db:0b:f5:6e:a8:c7:16:ff:91:
8b:b1:e4:d1:58:51:2b:3f:4b:bc:83:ff:b4:13:30:
4e:10:e6:8a:4f:ca:6a:79:cb:fb:d6:df:3b:61:c7:
6b:1c:7b:60:6a:6e:3a:81:fd:1a:63:9c:ab:70:78:
46:c7:66:ec:bc:a7:fa:87:51:72:03:6a:31:66:ca:
6b:88:24:6e:9d:e0:c1:b9:b6:38:e7:95:2a:43:cb:
74:de:8c:61:41:3c:ca:58:e8:17:82:6c:c0:d5:7e:
4f:63:31:9c:31:2e:52:e2:c7:c4:cc:0c:26:55:aa:
37:65:79:fb:70:7a:ca:ad:e1:ea:90:f2:46:a1:ab:
6c:03:ef:b4:98:b7:0f:ad:f3:d9:f5:06:7f:e7:b9:
80:c9:76:6a:30:87:be:bb:5b:4c:33:17:b1:a8:fb:
c6:cd:f1:34:f0:f2:e6:8c:b7:87:bb:2d:55:48:b1:
3b:be:3f:45:7a:68:97:c3:56:dc:24:4a:62:e7:db:
ca:00:fa:04:ae:3c:41:2c:16:b7:37:be:21:95:ef:
31:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A3:C7:62:8A:42:7A:9D:1A:0E:70:DA:64:0C:EC:C7:D4:C5:7F:99
X509v3 Authority Key Identifier:
keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:94:ac:a1:6c:a8:64:d3:eb:21:f1:62:08:ad:b7:f7:60:17:
38:85:3c:91:f3:67:61:1c:1a:0f:9b:e1:4b:15:4e:e5:62:79:
ce:31:06:19:6b:1b:36:c2:3f:cd:87:f3:3b:f0:37:54:50:f4:
02:7e:69:36:c6:6d:6c:53:bd:dc:39:2c:ea:8c:dd:17:a5:8c:
5b:c3:2f:3e:36:71:7d:04:ee:02:02:e9:74:d2:92:10:46:78:
5e:f2:27:46:2c:70:b1:7c:dd:d6:c2:cd:03:0e:e1:90:7e:23:
85:e0:c5:b3:f3:4d:7e:6c:54:4d:06:50:ea:0a:f5:3f:44:99:
00:0b:78:08:cc:9a:ed:8d:e0:b8:13:b2:27:b3:84:3b:e7:18:
c7:0f:c0:17:7c:1c:8a:4b:18:16:e4:42:4f:9a:c7:c4:95:b0:
51:77:47:1c:b0:08:58:06:b0:da:d3:c4:7d:5e:38:c8:1d:11:
c6:f1:02:f8:64:b1:b7:23:3a:f0:86:29:63:75:f3:5a:a7:de:
02:09:81:d6:9e:e6:e8:37:fd:ca:7b:82:7f:04:86:10:78:bc:
da:52:60:ee:95:09:d5:ba:a7:67:6e:11:df:09:4b:c9:5e:88:
56:96:73:9b:61:6e:be:db:f0:b1:86:f2:63:1c:66:70:23:bd:
c7:bb:51:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:40:25 2026 by rpki-client