Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
File: HnZ5Q1c9azXrrOGi80jKPwBWwas.mft (raw, json)
Hash identifier: NBBoRVmH5TV8aBUj7b6v3rrlHx27vfTAxZNhnHSoWOY=
Subject key identifier: 60:A9:09:15:E4:96:89:A7:A4:DA:B4:EC:B6:A5:EA:79:EA:70:04:D0
Authority key identifier: 1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
Certificate issuer: /CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Certificate serial: 019D992B65080C15AD7D5FCFEA0BDAEFB30F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
Manifest number: 12C1
Signing time: Fri 17 Apr 2026 02:00:51 +0000
Manifest this update: Fri 17 Apr 2026 02:00:51 +0000
Manifest next update: Sat 18 Apr 2026 02:00:51 +0000
Files and hashes: 1: HnZ5Q1c9azXrrOGi80jKPwBWwas.crl (hash: /tZluhfpVN6pxnfN5kmGituth83aYtBnJo6din+E/8g=)
2: Mf1194Aopq2OZBBw1XTJN0U0WJk.roa (hash: EerdCJA6wDLqsDQLxIrvcJIQv1/d05AYSbYm/2RHb1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:65:08:0c:15:ad:7d:5f:cf:ea:0b:da:ef:b3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Validity
Not Before: Apr 17 02:00:51 2026 GMT
Not After : Apr 18 02:00:51 2026 GMT
Subject: CN=60a90915e49689a7a4dab4ecb6a5ea79ea7004d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:19:12:79:0d:1e:f2:81:8e:9c:6e:f2:a7:ac:
bb:e1:db:43:87:ee:b0:76:3e:9f:da:72:43:05:92:
06:85:90:b3:b6:1d:34:51:27:2a:a3:ce:df:70:c4:
99:25:ee:1c:b7:8a:0d:c4:40:93:ec:35:1b:7c:a7:
1c:c2:8d:8b:75:5b:e8:aa:e7:ee:99:66:52:bd:61:
e1:3d:ef:8e:e8:1f:86:0c:0c:25:ae:1d:7a:54:b7:
d2:86:ac:39:b8:10:00:83:9f:2b:68:e5:7b:0b:ab:
61:92:b3:42:0b:d5:26:8a:8d:cf:f8:13:9c:36:a8:
4c:5a:23:d5:3c:7e:05:2f:0e:93:7c:82:ee:c0:44:
f1:71:b1:4e:1f:45:be:09:f2:e1:ad:4a:50:40:0e:
85:a7:19:5c:25:b4:85:af:4a:23:4e:64:cb:91:56:
8b:04:7b:3b:2e:86:34:63:f9:92:79:26:65:30:8a:
6d:f4:63:c2:15:5b:fd:78:78:99:d5:69:bb:c6:6e:
63:9a:84:59:16:68:2f:e3:b0:c8:9b:a1:81:e8:f4:
4d:17:72:bd:9f:c4:ac:5e:a7:ea:da:fd:a6:20:70:
13:82:23:40:17:82:a6:11:4d:cb:1f:c0:9f:63:e8:
17:52:c1:0f:43:a0:2d:50:bd:f0:07:78:a7:e5:60:
e7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A9:09:15:E4:96:89:A7:A4:DA:B4:EC:B6:A5:EA:79:EA:70:04:D0
X509v3 Authority Key Identifier:
keyid:1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:5f:f5:b7:e2:98:18:81:ae:44:55:f1:ae:7a:2c:1c:1b:41:
c0:f9:97:07:98:a5:8a:fe:bf:c5:1e:7b:cd:e3:96:4d:81:e0:
c3:ab:41:e7:74:ba:5f:d3:f3:64:59:41:ba:2c:0b:79:ff:8c:
63:94:e3:5f:77:be:cd:bb:2c:cf:cf:76:a2:9a:dc:5b:86:ad:
5a:e5:82:6f:2f:ad:b7:5a:3e:b9:30:89:a4:8d:0f:a8:ed:55:
04:45:9f:6b:8f:a3:8f:d6:c0:d7:ad:37:0d:52:47:40:95:84:
4c:d6:77:d6:82:85:e9:98:fc:a1:40:39:1f:6e:3c:66:94:40:
92:5d:4c:e9:70:21:73:63:85:69:03:50:ed:bc:32:79:09:1c:
30:52:c3:57:8a:7c:c5:e3:02:66:68:5e:3a:06:ec:ac:b3:84:
b9:b4:be:92:12:a4:a5:e2:0d:56:9e:34:59:99:45:5d:4e:d3:
88:97:1b:e5:ad:ee:9a:7d:22:a3:25:54:71:1b:27:45:ee:c5:
1a:0c:aa:c8:de:4d:32:53:a3:65:a2:71:8a:9a:43:7d:1e:16:
62:2f:6d:d6:fa:98:c4:96:be:de:66:ab:2d:ae:5e:32:eb:15:
ca:8d:f4:9a:9c:66:17:24:8a:2f:89:bc:2a:a7:32:b7:46:c0:
a6:65:1e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:02 2026 by rpki-client