Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
File: h5TVZDYKUh21mK7m5qL41mkhtsU.mft (raw, json)
Hash identifier: OemYwKSjyu+zwn+GOZhB++a/n81jeBsZ7yCeguLJC1g=
Subject key identifier: FC:43:72:B7:F3:88:02:B6:85:E2:79:E4:C8:CC:CF:7C:DD:B3:F5:09
Authority key identifier: 87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
Certificate issuer: /CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Certificate serial: 019EC036C7034784010700BB13E3379878C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
Manifest number: 01DD
Signing time: Sat 13 Jun 2026 09:01:15 +0000
Manifest this update: Sat 13 Jun 2026 09:01:15 +0000
Manifest next update: Sun 14 Jun 2026 09:01:15 +0000
Files and hashes: 1: h5TVZDYKUh21mK7m5qL41mkhtsU.crl (hash: N/sgAWjjUDS8uIN2CwnDZA/4VPjBhrTmnmxsX809pW4=)
2: l_d_CxebXDc82wsd4U0BFVkGTh0.roa (hash: uFClusAny8IXHB2cwB2oabcg7BQ3SgYHOlNBk9mPDms=)
3: qGufgpnXsdA505UL9rLMl_XkECY.roa (hash: J3gwk0cVtFF6iJ602SqYnRybno+t/W1jMS3C5xgfXqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:c7:03:47:84:01:07:00:bb:13:e3:37:98:78:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Validity
Not Before: Jun 13 09:01:15 2026 GMT
Not After : Jun 14 09:01:15 2026 GMT
Subject: CN=fc4372b7f38802b685e279e4c8cccf7cddb3f509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b7:84:8f:0c:a8:cc:b6:8b:93:dd:09:67:b2:
12:51:99:94:e4:5a:f5:98:5a:19:b3:2b:92:7e:48:
38:e6:cf:41:08:36:6e:b1:ae:f8:f6:1e:ef:dd:65:
4d:ed:d4:b9:84:3a:29:c5:b5:e6:79:bf:76:af:4a:
55:61:5e:2b:b0:1f:9f:2f:6a:2c:f5:0f:db:17:f4:
77:ab:35:8c:44:d8:d8:f6:17:8e:39:48:93:12:07:
28:23:1d:b4:74:b5:be:f1:3e:3d:44:1f:4c:6c:64:
79:c7:14:4f:71:f6:05:69:d3:21:32:b1:ca:eb:ba:
2d:a1:4e:54:96:9d:90:74:6f:60:47:99:fc:6a:cc:
52:19:1c:c1:32:3f:fe:3e:79:ec:06:19:67:cd:0e:
e4:b3:d6:c5:56:17:53:67:97:07:24:5b:15:f4:79:
da:59:c1:64:48:70:8e:9b:94:66:05:c5:1c:14:0a:
d8:34:c0:d6:26:3b:be:07:45:aa:55:9f:25:03:52:
6d:b6:af:c4:8d:c5:d4:1d:4f:a8:7a:66:ca:1e:67:
43:dd:88:5a:86:fa:77:26:b3:d8:8f:8d:e2:e5:bd:
ee:dd:06:a2:b0:bf:13:00:0d:7c:3d:d5:99:c7:ab:
89:d5:de:fb:4e:7b:49:27:aa:9a:a2:d2:10:cc:7e:
1b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:43:72:B7:F3:88:02:B6:85:E2:79:E4:C8:CC:CF:7C:DD:B3:F5:09
X509v3 Authority Key Identifier:
keyid:87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fa:a3:ee:63:10:73:ff:2c:4f:3c:50:23:21:6d:09:be:f7:
98:1f:40:80:1f:64:b4:56:44:13:53:05:20:9b:40:1f:39:80:
b7:10:01:27:19:51:21:86:45:26:5f:75:d1:9b:64:24:a7:ce:
e5:7a:59:8a:cb:ed:4a:5d:30:55:e8:ba:9b:9e:ca:d4:03:7f:
dd:73:5e:d7:34:99:6c:d4:3d:c7:1f:56:1a:5b:e5:f6:45:dc:
e5:be:9e:af:bd:3e:82:6f:cb:a9:01:44:16:43:1a:52:6c:3b:
f1:0f:97:14:c3:43:9f:40:11:82:d3:66:8d:bf:51:bb:9d:b4:
ca:a9:8d:c8:97:62:e9:8f:b9:c8:72:f3:77:5f:52:86:28:a3:
93:e4:13:19:55:a8:4e:de:ea:6e:57:bb:21:96:8a:ca:18:4b:
21:a0:a8:02:a0:f9:76:21:c8:fe:cc:b0:d5:90:eb:02:d7:8f:
e2:ae:57:fe:e8:a8:a4:f3:53:94:9c:1e:d1:a9:eb:cd:41:8e:
fc:69:96:72:1f:13:ca:d4:6d:fa:15:de:6f:39:02:37:07:c4:
2d:9c:aa:ba:c4:b2:59:b1:d1:52:ae:c8:42:e4:77:43:aa:c7:
78:4c:60:14:26:7c:0b:5a:b1:4b:83:8c:ac:bf:24:c0:e8:bc:
11:e5:94:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:14:38 2026 by rpki-client