Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.mft
File: rhVFyl4w95yXBeJw8eh_r6-5pjI.mft (raw, json)
Hash identifier: 3lIs7stmmzssInKr4JbX8K/7voHVN5Dp8zWbvDaL9to=
Subject key identifier: 19:D7:22:11:96:7B:E8:0D:94:74:93:16:C8:A5:48:92:04:05:D2:92
Authority key identifier: AE:15:45:CA:5E:30:F7:9C:97:05:E2:70:F1:E8:7F:AF:AF:B9:A6:32
Certificate issuer: /CN=ae1545ca5e30f79c9705e270f1e87fafafb9a632
Certificate serial: 019EBF23F241664183BA42719EBD4FC9AA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rhVFyl4w95yXBeJw8eh_r6-5pjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.mft
Manifest number: 0158
Signing time: Sat 13 Jun 2026 04:01:04 +0000
Manifest this update: Sat 13 Jun 2026 04:01:04 +0000
Manifest next update: Sun 14 Jun 2026 04:01:04 +0000
Files and hashes: 1: Q-4xy1lFuJPS1HBEiepclcPTuBk.asa (hash: gVcBXJQ9XX31XjFRDkaY8dMZNMEC1KZe+1TPQeZlpsw=)
2: rhVFyl4w95yXBeJw8eh_r6-5pjI.crl (hash: wCXS6OYDs0yQS059WHSLO+m8qcpU3zhr0uQuGUOq7vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rhVFyl4w95yXBeJw8eh_r6-5pjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:f2:41:66:41:83:ba:42:71:9e:bd:4f:c9:aa:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1545ca5e30f79c9705e270f1e87fafafb9a632
Validity
Not Before: Jun 13 04:01:04 2026 GMT
Not After : Jun 14 04:01:04 2026 GMT
Subject: CN=19d72211967be80d94749316c8a548920405d292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:0b:80:5b:a6:38:99:7e:ed:91:e2:4a:e0:
58:48:22:55:b9:a6:ce:63:54:ff:b2:71:a0:95:56:
9b:b2:d7:56:c0:78:ab:ee:fd:6f:3a:08:6b:da:4e:
03:1d:9c:e2:fd:21:db:2e:b5:98:ea:26:22:8f:e9:
75:88:3e:43:96:de:ec:c0:2e:ff:0c:ce:87:cb:23:
30:17:a1:70:8d:b6:1e:9a:a2:8d:b2:8f:20:7c:88:
05:8b:da:07:0f:41:27:68:13:80:ba:b6:e3:69:55:
a3:b9:41:cd:c1:da:a6:c7:68:ec:64:9f:71:10:94:
d3:76:b2:2c:04:b7:a5:c4:32:ea:d7:3b:dd:8f:9e:
87:03:13:98:cd:f4:68:b9:92:a2:4a:e6:91:ae:fd:
f6:ea:ef:09:75:4d:6c:f5:19:e5:49:f7:de:28:77:
76:c8:4a:aa:a7:a6:6a:b9:d5:09:e0:2d:b8:23:d9:
6f:89:d2:29:cf:59:a5:36:e9:72:9b:0f:0a:3a:d2:
60:b1:e4:45:e8:d5:67:4b:ca:a3:1b:cf:01:29:14:
31:b2:87:0f:2f:85:7c:2b:07:d6:79:68:ae:c2:ee:
94:d0:13:6c:6e:bb:bf:05:78:77:52:75:54:b1:92:
90:4b:ca:ec:1c:86:8c:72:1f:2e:27:8d:b4:1b:bc:
9f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D7:22:11:96:7B:E8:0D:94:74:93:16:C8:A5:48:92:04:05:D2:92
X509v3 Authority Key Identifier:
keyid:AE:15:45:CA:5E:30:F7:9C:97:05:E2:70:F1:E8:7F:AF:AF:B9:A6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rhVFyl4w95yXBeJw8eh_r6-5pjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:52:91:bc:b8:60:7b:e0:01:8d:58:ff:48:49:c8:74:74:72:
4d:50:09:10:93:4e:83:f4:87:bb:99:b1:ad:d4:68:a4:3d:0f:
e9:e4:3e:fa:eb:6d:6c:cb:b5:8f:0d:b0:2d:a4:18:42:6d:aa:
2c:f0:4d:4e:6b:3a:a5:a3:3b:37:b6:69:93:f5:e0:bf:22:1c:
1a:96:88:01:d1:9d:89:26:0e:97:df:2c:14:72:4e:0e:4e:45:
f5:23:28:c7:28:87:7d:f0:d1:68:00:2e:1b:07:4b:30:e9:d2:
28:79:bd:66:df:02:d5:52:7e:e2:4e:bc:2e:cf:fe:8d:a7:bc:
44:33:90:4f:e2:8e:7a:53:15:74:8b:4c:f2:54:84:df:8a:e6:
74:ab:bd:14:c2:f3:0b:b8:48:f7:0e:5c:c1:b6:e4:47:2c:a2:
cd:e5:d8:99:a7:cb:f7:4b:86:9d:e0:74:58:6a:65:b6:8c:ed:
6f:03:60:64:b2:e8:11:14:6b:97:8c:1b:b9:83:0b:eb:83:78:
c2:1a:b4:94:c3:6f:ed:95:92:55:cc:64:86:8e:c4:25:40:4a:
fb:95:51:98:b1:a7:ef:e5:f3:f2:85:9f:02:a1:cd:81:2d:f4:
e5:0f:1a:48:2d:f7:8e:ac:be:6d:51:d9:60:01:9b:e2:53:44:
75:bf:fe:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:21:39 2026 by rpki-client