Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
File: hg2fAamLUU69PCcj1_frRIMm9eI.mft (raw, json)
Hash identifier: gz5YqckHP9nCu9gfsmNEO6WNaYGnWGx+2ApszbTO8hc=
Subject key identifier: 3B:D3:CD:43:BF:D0:BA:0A:7C:37:91:52:87:15:D3:B8:22:3D:15:6D
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial: 019D99CFD140128A97DA3135CCE5394D9427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 05:00:26 +0000
Manifest this update: Fri 17 Apr 2026 05:00:26 +0000
Manifest next update: Sat 18 Apr 2026 05:00:26 +0000
Files and hashes: 1: 7mhV_rdVlcfkhURFQ4wNrLsuU1c.roa (hash: VRlZTooxFrT0D1E6AOYVVz4EsX/5w5g/g1JyVqO9SPM=)
2: h_hShADtBIzeK-Szx9l4bfm8jag.roa (hash: hsH1pDZZoflDWpuxdoPCV7EaJcM0R+/7hC4hgh317+4=)
3: hg2fAamLUU69PCcj1_frRIMm9eI.crl (hash: ba8LpVKC8L2JoGuwxI09ooVq0ByNYWhHdSv+RFSjaR8=)
4: mBU4ZRokNQYo8hY7jxPLO4xVWjE.roa (hash: fbuOZHgRTTEjubl87/wnr5NfhswtzCz7CKZVt7r/aRI=)
5: rPAahRiAFhKEWjnyhz4z-0lkvXU.roa (hash: zzqyB+t4YAf4zoHDwM87ojkF2fRZqc5eAp62HCRrYX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:d1:40:12:8a:97:da:31:35:cc:e5:39:4d:94:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Validity
Not Before: Apr 17 05:00:26 2026 GMT
Not After : Apr 18 05:00:26 2026 GMT
Subject: CN=3bd3cd43bfd0ba0a7c3791528715d3b8223d156d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cb:7c:1f:13:7f:2b:21:90:15:1b:1b:d2:d0:
17:dc:1a:af:14:9a:eb:22:89:7a:2d:36:d1:e3:04:
cd:de:19:68:d9:94:60:52:2d:57:37:c5:72:18:08:
11:ab:49:53:07:39:89:33:6f:9c:ab:47:07:71:2c:
ea:42:4e:22:62:5c:20:b5:06:76:af:1c:68:d7:03:
8e:19:bc:fc:06:0b:be:af:63:61:e8:2c:6a:30:a3:
6a:b0:c8:6f:19:37:01:b3:91:4d:44:76:2d:3b:80:
28:d6:95:3f:82:2d:6d:a8:b0:5d:79:84:6e:2d:d9:
ed:16:ba:78:d6:fb:3b:17:f5:68:9f:46:2b:59:9a:
d3:24:15:ac:b1:69:d4:9c:30:f1:c9:fa:bb:e0:3e:
37:32:9d:a6:dc:d7:37:01:d6:85:86:b9:ab:ae:01:
c6:b5:fb:f7:ef:48:ad:95:63:4e:de:88:cd:9c:58:
8c:92:52:04:1f:59:b6:48:1f:a6:1b:45:1f:b5:07:
4e:f8:e8:7b:99:19:27:d3:0a:eb:41:3b:e3:a6:d1:
ad:a1:67:a8:78:42:98:09:1b:24:ca:45:4b:43:e6:
66:7e:76:55:e4:87:85:fc:a0:be:8b:03:88:48:df:
c5:3f:05:20:56:8c:50:2e:52:ae:67:f0:b1:49:9e:
39:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D3:CD:43:BF:D0:BA:0A:7C:37:91:52:87:15:D3:B8:22:3D:15:6D
X509v3 Authority Key Identifier:
keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:65:84:8a:c1:ba:61:b2:5f:90:36:71:90:cf:0f:3c:a1:17:
e3:12:b1:35:a1:8f:d7:6c:1b:19:bf:f5:5c:c0:db:f7:2a:35:
90:7d:99:3c:58:03:ba:51:24:7f:8c:13:43:b6:e3:1f:2f:e1:
39:a5:48:bf:0d:ac:e3:56:97:a9:1e:6c:6c:4b:b3:36:dd:83:
49:b3:c0:e1:d5:cf:90:a4:72:e5:f2:77:9c:cd:99:ae:13:5f:
d5:2e:ee:bc:88:97:4d:87:10:4c:cd:b9:72:1e:8f:97:76:70:
a0:04:f9:00:c8:26:b2:9e:c6:40:ab:dd:d0:fe:c9:f4:e3:4f:
7c:74:2c:2f:da:9f:e3:f8:76:36:a3:db:86:c6:97:7d:50:9b:
6b:a5:5b:30:1d:1d:73:5e:98:bf:d1:43:68:21:56:18:9f:33:
93:29:3d:51:07:52:9c:4f:37:51:37:48:44:4d:7a:41:f8:d5:
5a:38:1c:31:4c:72:c2:b5:d3:32:51:86:ea:63:fe:e0:23:d6:
b4:be:04:1d:28:40:34:ea:6a:77:d5:c1:ef:f9:b8:e3:69:ce:
fa:cb:a5:42:8f:ad:3a:6f:16:4d:4c:82:05:6c:61:6a:d8:61:
e6:be:d3:13:26:ba:f2:f3:7c:1b:f1:53:c4:78:c6:c9:d1:9f:
db:4d:b9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:40 2026 by rpki-client