Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
File: hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft (raw, json)
Hash identifier: AoTZ5WW9Yt+efWBIyma9tSEjcA4vh6RxdxbBR48Dyto=
Subject key identifier: 4D:16:34:D5:85:F4:6F:8B:62:9A:5B:8F:8D:91:32:07:11:0E:FB:78
Authority key identifier: 85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
Certificate issuer: /CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Certificate serial: 019DA3E6886006FD4DD83640A1D092DBCA54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
Manifest number: 10C6
Signing time: Sun 19 Apr 2026 04:01:27 +0000
Manifest this update: Sun 19 Apr 2026 04:01:27 +0000
Manifest next update: Mon 20 Apr 2026 04:01:27 +0000
Files and hashes: 1: hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl (hash: om8Hy3FByVLINj7x+S/SrducnJPQjsRMNLq7VVq/0/I=)
2: uTsU6Mnw9DaqmrDw2a85FI0gVOo.roa (hash: QxKS8bSN/E8e24rYpMJlqnlvbfWN9J/AEQcwrR8l3P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:88:60:06:fd:4d:d8:36:40:a1:d0:92:db:ca:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Validity
Not Before: Apr 19 04:01:27 2026 GMT
Not After : Apr 20 04:01:27 2026 GMT
Subject: CN=4d1634d585f46f8b629a5b8f8d913207110efb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0c:82:2b:c4:70:43:4d:de:3f:45:5c:44:9a:
f0:9f:a7:ea:43:94:08:50:0b:a4:f7:90:b4:d9:13:
bf:de:18:1b:1d:5b:d1:44:b3:5f:5c:e7:dd:ed:dc:
c6:26:5a:99:fb:a4:99:8f:7f:22:54:4c:32:d6:5d:
ef:73:bf:bb:c2:e9:66:a0:31:1f:4f:83:36:66:14:
f5:0e:1d:d2:aa:30:de:cf:db:84:ea:86:26:bf:1c:
7b:81:78:d5:fd:83:3d:09:69:04:81:78:c1:c4:d7:
02:db:49:dd:7b:64:50:ec:fa:2f:3d:7d:d2:b7:b8:
a1:60:b7:7a:78:fa:f9:bc:2a:61:b3:f2:74:42:a6:
ab:1a:bd:44:38:59:06:52:9e:69:7b:0c:42:03:af:
10:e1:cf:29:a6:0b:cd:c3:94:7f:da:97:89:a8:94:
33:1d:0f:67:41:d2:5d:18:52:e8:5b:d4:97:31:19:
ee:4c:5f:fb:57:97:f8:e6:0a:7a:c2:b9:20:5f:e0:
e3:77:b8:30:cb:79:c2:f9:e0:16:d7:22:10:d0:71:
99:c0:e4:fe:01:68:cc:ae:0b:f8:ae:dd:a3:a9:f9:
72:15:c0:b1:92:3f:e2:25:95:eb:c8:9b:04:53:00:
d8:5c:26:8e:56:4a:fb:15:99:10:fa:88:24:1d:49:
30:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:16:34:D5:85:F4:6F:8B:62:9A:5B:8F:8D:91:32:07:11:0E:FB:78
X509v3 Authority Key Identifier:
keyid:85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c6:45:58:94:9f:dc:37:53:19:e0:c2:62:fb:b4:a1:8f:6f:
d8:7f:b1:07:56:af:0c:85:b5:99:b4:42:ca:90:7c:ed:ea:48:
03:16:85:78:ec:dc:08:a4:32:6a:24:1f:38:c3:18:55:be:95:
94:ef:63:c0:bb:ed:45:14:33:df:2f:f1:34:a0:f4:59:c9:a3:
04:9e:60:c4:35:54:ba:a3:49:e0:50:bb:e4:9e:1f:c6:35:70:
94:5d:e7:52:40:2b:17:18:3d:98:92:48:1c:9e:2a:39:2f:62:
39:0a:4b:98:66:55:69:4a:f4:cb:85:c7:8a:10:53:3d:5e:58:
c2:19:5f:27:f8:e7:08:7d:61:74:1f:3a:c7:e8:1c:67:5b:0e:
87:0a:bd:13:0b:1c:9a:d4:c7:6c:e3:ca:33:1f:b8:15:e3:b3:
b5:11:07:95:3d:38:34:8b:32:c7:71:7f:f3:a5:de:3b:1f:ed:
d7:0a:b4:bc:43:9f:4b:23:0c:00:3c:3d:fc:df:7b:19:a8:9a:
3a:86:d2:99:23:d4:1d:2f:a8:06:38:f4:dd:0f:2a:4f:41:44:
e4:1f:c3:fa:ac:65:7f:f9:32:1e:2e:29:57:fe:ed:62:bb:a9:
f4:2e:5c:fd:f3:90:3f:c4:fb:e5:84:cf:e6:fd:a0:35:16:e0:
93:69:b5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:03:13 2026 by rpki-client