Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier: TV3p2ShPwnVu3dBPrPt1xBbGM/08kP2GBzb9TwKoQlw=
Subject key identifier: F1:2D:20:9D:5C:44:32:67:89:68:B6:02:0A:51:15:1B:BE:07:6D:54
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 019EBFFFB46E243C74DA6A99EB02357A6AC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number: 15EE
Signing time: Sat 13 Jun 2026 08:01:06 +0000
Manifest this update: Sat 13 Jun 2026 08:01:06 +0000
Manifest next update: Sun 14 Jun 2026 08:01:06 +0000
Files and hashes: 1: aBOBuL_H29H0y-_-QBP0Ehj1DT0.roa (hash: O7ZWbL6IufsmlkGlAPRYtWsGACsMquG9gC8M6gOxrwY=)
2: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: Ww6fTnGDPPCA9XpJeebLoxywCUXWaZm0/VJR5H9yqb4=)
3: y0DK2UjH_DKReYw5NUdmHs1btyA.roa (hash: VfLGmY9ACuSYXNETyrRKCoYE5Ubu9KeR/Haw0EJrQro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:b4:6e:24:3c:74:da:6a:99:eb:02:35:7a:6a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: Jun 13 08:01:06 2026 GMT
Not After : Jun 14 08:01:06 2026 GMT
Subject: CN=f12d209d5c4432678968b6020a51151bbe076d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:7b:89:22:00:2f:da:cc:79:ae:55:07:41:
a6:a6:05:4b:e2:ba:c9:3f:6f:6a:b9:e2:b2:34:9b:
9d:cb:94:93:e4:bb:e7:fb:d3:b9:b0:10:d7:ad:b9:
98:50:43:47:da:37:a4:51:bc:9f:13:ff:bb:3b:3b:
35:f1:53:88:f7:06:31:4a:4e:2a:72:a8:f1:f0:d7:
b4:48:e0:55:03:93:25:b2:d6:91:0a:dc:f1:62:71:
a0:de:0e:b3:b8:4b:ca:f2:c3:44:c6:e8:ba:10:d2:
c8:8b:2c:2f:6f:71:89:4f:aa:84:aa:f0:74:e1:4a:
91:cb:81:83:cb:34:41:15:a7:25:8d:c5:f7:ad:9b:
52:fc:7f:10:e9:ae:80:1b:6a:8f:30:f6:cb:cc:bd:
cf:d2:e1:a9:c3:34:14:4c:4d:c3:b2:8c:52:5d:fe:
57:8d:49:44:18:e5:92:28:86:8f:ab:38:68:25:0f:
dc:37:03:f2:12:37:15:62:85:26:82:23:85:95:f6:
bc:95:39:3c:b7:49:70:2a:3c:55:d9:34:1e:42:71:
59:76:49:7d:e8:bf:80:81:d1:7c:3b:29:6c:66:c9:
41:a3:07:00:7a:f8:09:be:e1:29:76:c1:02:4b:0d:
9d:28:0c:95:f0:b0:72:da:b8:4e:0c:1c:e8:75:4e:
71:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2D:20:9D:5C:44:32:67:89:68:B6:02:0A:51:15:1B:BE:07:6D:54
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:79:ca:66:fb:50:27:b7:42:0a:04:0e:3f:1c:56:37:88:0b:
fc:bc:9e:6e:a3:d6:63:cb:bd:24:15:f5:aa:00:2e:e7:9e:4b:
ac:06:80:40:6b:43:0e:6a:a4:0d:62:71:20:a0:5d:f1:49:3c:
3a:31:57:cd:70:83:23:01:6e:ce:ed:f0:f1:0b:f9:57:32:70:
ce:07:4f:7e:b3:c2:2d:2a:31:bd:34:83:a3:3b:90:0b:fe:da:
49:5b:0e:29:46:e9:2d:1d:04:bd:89:63:fb:25:c7:43:3f:71:
55:4b:45:76:ef:91:a2:ca:f5:69:65:13:03:18:83:dc:4e:97:
e9:c5:6a:47:7b:29:a6:27:d9:bc:c0:29:8f:e7:c2:b7:30:9c:
06:45:ed:28:31:92:01:9d:73:b3:86:d6:50:0f:34:56:a0:52:
14:fb:7a:07:aa:ed:37:30:94:cb:fa:62:a4:95:d6:40:e7:78:
cc:ab:6f:3a:e0:c2:68:57:87:d6:63:c5:d3:ef:14:5a:c7:26:
16:3b:30:e9:25:cb:10:66:d7:19:c1:e2:5d:6f:1c:49:a9:9e:
e0:32:11:ea:c4:c5:0a:d2:5f:20:60:9c:0a:b0:8e:3a:54:18:
ff:07:3f:a0:5f:e7:3d:05:69:ff:31:89:1a:b4:0e:1e:68:11:
e6:d4:c9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:44:27 2026 by rpki-client