Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
File: HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft (raw, json)
Hash identifier: hA3LY58p18RQ2eW9lg6PFiaXaTPHRnE1X97Axf7OvLE=
Subject key identifier: 6C:FE:48:6B:36:96:73:97:87:46:13:6B:D7:1E:C5:C9:BE:AE:00:B9
Authority key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
Certificate issuer: /CN=1c766b058c096753a34ad625d53275cd2dba5b33
Certificate serial: 019D98BD47F041DB73AFC7156260913A3C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
Manifest number: 1606
Signing time: Fri 17 Apr 2026 00:00:34 +0000
Manifest this update: Fri 17 Apr 2026 00:00:34 +0000
Manifest next update: Sat 18 Apr 2026 00:00:34 +0000
Files and hashes: 1: GNlEKqFh-Tv2hz0SznfgxA4czj8.roa (hash: 43aHiWheagiqIIyy3ZQAw5+wp/fUUv/1/kOcWYJ6M+c=)
2: HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl (hash: avCF/1Ow7EI4rsWY0lt+Lr6cAmsOdCQKEnr6zJkpeZk=)
3: lJxYVzr-KS-fYsC57OKvflP8A4c.roa (hash: 4pvbPMsGzdgVlC585Dyoz1kyokZkz2DdP27jl7Yydb4=)
4: r-1SzrZjoEXcWaVFk74aF23TjJ0.roa (hash: sRjFv0mWTbb1HZj7c7GM888be2VPScRA9imdmTy3Guc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:47:f0:41:db:73:af:c7:15:62:60:91:3a:3c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c766b058c096753a34ad625d53275cd2dba5b33
Validity
Not Before: Apr 17 00:00:34 2026 GMT
Not After : Apr 18 00:00:34 2026 GMT
Subject: CN=6cfe486b369673978746136bd71ec5c9beae00b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:12:68:f6:26:7a:a3:de:d1:40:fa:e5:8a:2a:
40:9a:08:a1:0c:97:ae:b5:1d:84:cc:db:d5:47:2b:
37:38:a2:71:03:24:fe:8d:46:32:67:30:e4:b9:57:
5e:bb:9d:fc:93:54:11:a8:92:ed:ee:58:0c:9a:ee:
d2:5a:d1:a6:45:d3:1e:84:bf:87:a0:cc:94:d9:5a:
0d:fa:27:47:b4:30:66:ed:d7:35:32:8a:0f:24:43:
18:96:1d:67:d9:21:03:be:68:ae:99:21:c6:cb:a4:
8f:85:8a:11:4f:01:5e:d7:67:bf:57:96:04:74:1a:
89:26:cb:97:9c:51:aa:01:ab:a1:95:85:1a:76:cd:
a7:6a:94:1b:60:81:5f:48:20:09:e4:59:24:46:1b:
99:2d:2d:62:c4:8d:fc:9b:07:ae:d2:73:30:cf:f6:
3e:73:ef:b8:be:a3:7e:50:95:0f:bc:bd:c9:ff:b7:
84:93:7c:b2:38:e3:f1:b9:95:5a:4a:af:ab:88:6f:
01:10:e8:c3:3d:8f:e3:3a:58:e6:c9:64:ca:5d:b2:
f3:72:5f:39:6e:37:f1:d1:0f:0c:e5:56:87:75:08:
24:ac:5c:49:4e:5b:f7:9e:43:63:1e:6e:72:20:dc:
7f:27:34:aa:e5:da:fb:8d:2e:ac:1b:34:27:f7:a1:
56:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FE:48:6B:36:96:73:97:87:46:13:6B:D7:1E:C5:C9:BE:AE:00:B9
X509v3 Authority Key Identifier:
keyid:1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:40:a9:33:75:59:d7:39:35:09:e2:f2:41:99:41:83:b1:95:
de:49:bb:f9:81:a6:68:07:05:44:63:22:1f:8d:d7:4c:79:c8:
54:0f:42:29:c3:59:11:52:00:28:2d:e5:a3:70:57:38:cb:67:
e0:7d:54:5d:06:8d:1b:1a:c0:e9:2e:2d:c0:a0:a2:9b:56:95:
56:60:e6:2f:0d:4f:82:80:37:35:48:95:a4:fb:cd:69:80:c2:
65:fe:68:88:51:ed:97:0a:54:56:d2:9a:c5:88:74:bd:d2:f7:
1d:f2:30:c4:8d:45:a8:75:30:4d:ef:76:c2:42:8f:31:2c:ef:
72:73:5e:a8:30:f8:57:29:c8:f3:1e:6a:6e:e7:c3:b0:e9:8c:
71:9e:77:00:f5:b9:83:ff:89:84:98:5f:ac:79:90:69:d2:46:
b5:11:82:c7:a0:52:c0:a6:71:58:a4:5d:e1:c7:f7:56:43:37:
79:a9:69:25:28:8d:72:71:dc:84:3a:b1:1e:e4:1f:0b:10:7a:
c9:00:e6:86:9f:8c:d9:e2:b0:46:85:12:24:22:0f:c6:ee:19:
8a:bc:77:7e:70:d5:86:ef:b1:1f:8f:df:7e:86:9c:88:c3:22:
93:08:af:66:24:a3:57:ec:ba:90:a2:78:f0:78:47:fe:f3:63:
26:ae:22:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:47:21 2026 by rpki-client