Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
File: hA6dA48bwAXzsJxdyoIK2BCUiz4.mft (raw, json)
Hash identifier: MqCDbodQiLbf2oaHOUKLm+kdCfPJZYQTvvgAFvk93jc=
Subject key identifier: 47:E7:0E:94:5C:F1:56:05:9D:59:06:83:57:2A:A4:EF:A7:EB:F1:49
Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
Certificate issuer: /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Certificate serial: 019D98BDB3CD9F3B4CFE95244B02522C342D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
Manifest number: 1890
Signing time: Fri 17 Apr 2026 00:01:02 +0000
Manifest this update: Fri 17 Apr 2026 00:01:02 +0000
Manifest next update: Sat 18 Apr 2026 00:01:02 +0000
Files and hashes: 1: hA6dA48bwAXzsJxdyoIK2BCUiz4.crl (hash: hJZ2/Wy0uw+P5ms9TAGajO3rCdfvquexIkIMOHLPic4=)
2: q8Sc-hb4z8RPWefbF866BBRja54.roa (hash: c2mi+bk32KaktYwhBDhcFoed5UYVyYxJQtaR6VL5ZBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:b3:cd:9f:3b:4c:fe:95:24:4b:02:52:2c:34:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Validity
Not Before: Apr 17 00:01:02 2026 GMT
Not After : Apr 18 00:01:02 2026 GMT
Subject: CN=47e70e945cf156059d590683572aa4efa7ebf149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:f1:8d:5c:7f:f3:c3:9b:1c:fb:86:f2:2d:
ee:03:99:1c:35:07:c5:f0:b6:f6:ed:78:84:de:b7:
4a:a4:91:f6:81:a4:ae:64:37:86:ca:17:32:a5:35:
a4:4e:78:99:04:c8:e1:e0:7d:84:7d:ab:8c:d1:0f:
94:c1:04:c0:02:53:67:7a:83:af:7d:18:f1:3f:dc:
fe:2f:f5:28:df:4d:5f:c0:7a:a7:a0:a4:b2:69:f7:
f6:d7:0d:b7:ce:ae:bb:cb:24:5d:8a:61:4e:d1:e4:
e5:85:95:06:ed:a7:e6:e1:05:0b:c5:0d:9e:5a:30:
97:6c:e4:c0:4d:b0:19:a1:f6:d6:1a:d8:d7:69:aa:
85:9f:10:4f:31:5a:ea:f5:cd:78:79:0b:ad:0e:78:
49:91:d0:5c:d3:06:15:68:e8:55:4a:6b:5e:cc:26:
72:8a:e7:84:9f:0f:53:41:d0:b0:ea:b8:da:1f:4c:
6f:14:19:07:85:8b:2d:27:c4:e2:6d:f1:ca:6a:c1:
7d:96:4f:47:cc:c1:9d:1a:ba:40:a1:5c:24:b2:b7:
aa:de:1b:63:fc:13:e0:76:67:3d:4f:18:bc:5e:42:
15:e5:ba:a4:ba:af:1d:db:f3:5a:79:04:7b:04:03:
17:92:f1:dd:5c:99:cb:29:ee:f3:d9:04:e5:bd:8b:
de:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E7:0E:94:5C:F1:56:05:9D:59:06:83:57:2A:A4:EF:A7:EB:F1:49
X509v3 Authority Key Identifier:
keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b3:55:86:f5:f6:4a:ed:ef:59:72:33:fc:f9:5e:1c:57:0a:
b3:a1:d8:52:b6:69:51:93:b2:71:02:54:1a:25:8d:a9:66:81:
8a:61:a6:e2:8b:e6:09:46:a5:d8:d9:ea:b8:af:67:ee:2c:16:
63:07:4b:5e:f8:fb:c2:a3:98:0c:e8:16:02:02:d5:5c:38:7b:
1f:80:0d:53:c3:b2:3a:b3:03:ee:24:fd:32:a1:30:5c:3b:c8:
7f:fd:c1:bf:7b:90:8e:bd:c7:62:d9:05:0c:17:c5:da:d7:a1:
7e:a3:41:67:59:fd:bf:7f:fd:6a:85:05:bd:5a:ba:6f:88:e5:
ab:65:0f:d5:7c:a0:c2:46:77:cf:bc:e3:61:99:2e:2a:53:d5:
e1:de:ad:ff:3a:cc:6a:c7:0f:1f:50:71:eb:c4:2c:51:cf:ad:
af:75:a2:28:2a:da:cd:c2:0f:7e:44:7b:26:77:02:9f:5e:79:
e4:7d:c3:86:9a:6e:a7:87:f7:e4:c6:3a:07:24:d6:d5:ad:ed:
f8:64:5c:ae:f9:90:92:7e:ce:6b:20:9d:d4:b1:f7:41:98:51:
fb:7f:60:5c:39:03:c7:1d:c6:c4:6f:09:5b:6d:fc:a7:f4:12:
86:c2:36:fc:92:70:56:78:e5:8b:05:04:9d:b6:61:e4:14:c1:
4d:77:bd:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvbPNnztM/pUkSwJSLDQtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MGU5ZDAzOGYxYmMwMDVmM2IwOWM1ZGNhODIwYWQ4MTA5
NDhiM2UwHhcNMjYwNDE3MDAwMTAyWhcNMjYwNDE4MDAwMTAyWjAzMTEwLwYDVQQD
Eyg0N2U3MGU5NDVjZjE1NjA1OWQ1OTA2ODM1NzJhYTRlZmE3ZWJmMTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2rxjVx/88ObHPuG8i3uA5kcNQfF
8Lb27XiE3rdKpJH2gaSuZDeGyhcypTWkTniZBMjh4H2EfauM0Q+UwQTAAlNneoOv
fRjxP9z+L/Uo301fwHqnoKSyaff21w23zq67yyRdimFO0eTlhZUG7afm4QULxQ2e
WjCXbOTATbAZofbWGtjXaaqFnxBPMVrq9c14eQutDnhJkdBc0wYVaOhVSmtezCZy
iueEnw9TQdCw6rjaH0xvFBkHhYstJ8TibfHKasF9lk9HzMGdGrpAoVwksreq3htj
/BPgdmc9Txi8XkIV5bqkuq8d2/NaeQR7BAMXkvHdXJnLKe7z2QTlvYveBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfnDpRc8VYFnVkGg1cqpO+n6/FJMB8GA1UdIwQY
MBaAFIQOnQOPG8AF87CcXcqCCtgQlIs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yZjM4MGQtODQzZi00MmUyLThmYjMt
Y2U5ZTFiODI5NjdkLzEvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yZjM4MGQtODQzZi00MmUyLThmYjMtY2U5ZTFiODI5Njdk
LzEvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7NVhvX2
Su3vWXIz/PleHFcKs6HYUrZpUZOycQJUGiWNqWaBimGm4ovmCUal2NnquK9n7iwW
YwdLXvj7wqOYDOgWAgLVXDh7H4ANU8OyOrMD7iT9MqEwXDvIf/3Bv3uQjr3HYtkF
DBfF2tehfqNBZ1n9v3/9aoUFvVq6b4jlq2UP1XygwkZ3z7zjYZkuKlPV4d6t/zrM
ascPH1Bx68QsUc+tr3WiKCrazcIPfkR7JncCn1555H3Dhppup4f35MY6ByTW1a3t
+GRcrvmQkn7OayCd1LH3QZhR+39gXDkDxx3GxG8JW238p/QShsI2/JJwVnjliwUE
nbZh5BTBTXe95w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:49:22 2026 by rpki-client