Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
File: hEcK8NideFuhi6YX3Anj9yxZlvM.mft (raw, json)
Hash identifier: ahCK5fuYPaDtx4W2gb0HjdMMya0N7IfL/ahnpDA1+iM=
Subject key identifier: B6:C3:AE:B6:1D:ED:D4:D3:D9:57:5B:80:FD:68:64:F9:D9:54:22:4B
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial: 019DA30A5AF7BE81A308C6BF273F07562DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
Manifest number: 0A54
Signing time: Sun 19 Apr 2026 00:00:57 +0000
Manifest this update: Sun 19 Apr 2026 00:00:57 +0000
Manifest next update: Mon 20 Apr 2026 00:00:57 +0000
Files and hashes: 1: hEcK8NideFuhi6YX3Anj9yxZlvM.crl (hash: qVO6pnCdF6GDHPHpA0cr//63IwP0rcn0to2Pl5sxsf4=)
2: vRy4dtwuzcoaMObZOrhsdgekFn8.roa (hash: EEHH4lnEcaLiLMDse86Umm3P044hYY8hcdkDDqvn/M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:5a:f7:be:81:a3:08:c6:bf:27:3f:07:56:2d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Validity
Not Before: Apr 19 00:00:57 2026 GMT
Not After : Apr 20 00:00:57 2026 GMT
Subject: CN=b6c3aeb61dedd4d3d9575b80fd6864f9d954224b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9b:1c:f6:59:5a:f1:94:48:64:b7:2b:1b:f1:
09:cc:c7:4c:e9:ba:21:c8:9e:bb:a5:bf:d5:24:19:
80:4d:e3:22:28:58:11:16:e3:6f:63:12:bd:f4:b3:
29:be:0d:09:09:38:1d:c2:2d:16:54:a5:e4:8d:4c:
3c:98:8f:45:d2:e5:02:4b:25:bb:9e:78:ef:04:24:
13:a0:65:49:1e:78:e5:a0:79:7e:5e:67:9c:09:a4:
63:08:46:82:96:d7:aa:8e:af:14:3f:ae:a2:15:33:
69:77:27:61:bc:18:75:0e:00:51:65:05:c7:14:81:
b6:5c:02:e5:f7:f8:37:d2:e0:c5:53:e0:66:32:cb:
e9:90:b3:32:a5:ee:73:b1:95:ad:4b:86:82:80:a4:
98:77:7c:c3:ef:70:07:65:5e:a0:94:b2:75:a5:59:
66:a3:59:cc:06:04:19:64:1a:be:51:08:c8:ed:89:
db:0d:25:2e:95:b6:26:85:a8:4d:06:b6:21:8c:d4:
04:6f:f6:89:8c:d5:f2:5c:12:2b:d6:92:b0:2e:e2:
ec:de:f7:24:f9:94:3a:55:81:1c:e1:f2:7c:84:8e:
8b:1c:e5:fe:73:36:5a:7a:5a:32:48:89:94:db:06:
dc:75:7e:6b:85:db:8a:cd:b7:97:d1:1f:d2:d9:b0:
5d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C3:AE:B6:1D:ED:D4:D3:D9:57:5B:80:FD:68:64:F9:D9:54:22:4B
X509v3 Authority Key Identifier:
keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:af:f8:a9:28:f1:c7:19:9b:d0:54:2a:4f:12:75:dd:2a:c7:
52:30:a1:4a:43:b1:fd:55:97:0a:77:fa:a0:07:8d:1c:92:6e:
d6:6d:67:5f:a4:39:11:f0:2b:45:4b:96:ee:f4:96:e0:98:cb:
07:a8:c9:63:50:14:1b:74:38:11:e3:38:81:7f:6a:a1:03:72:
36:e3:e9:74:66:c0:8c:29:fa:ac:2d:21:ce:34:38:83:ad:3f:
21:f9:e6:24:a9:62:d8:6f:ad:de:b1:9b:52:9e:4f:af:6b:04:
d5:f5:a0:00:f0:40:d5:ed:28:12:0b:ff:0a:29:a9:63:72:f7:
26:b6:cf:46:ac:e8:39:6f:1e:c3:39:24:ec:54:03:c9:c3:72:
0c:e0:dd:57:35:92:8b:d3:74:d3:61:3b:b1:10:6f:41:bd:b6:
b4:c3:23:a5:00:32:07:ab:ca:df:2f:fa:14:75:d3:68:69:7f:
8d:d3:5c:45:52:c0:e2:ed:74:4f:20:42:43:8d:e0:25:36:aa:
b3:da:46:5f:da:9c:08:b7:95:64:5f:58:b3:c6:16:3b:e7:eb:
42:13:2d:70:41:fa:b5:91:ea:54:23:00:3a:e0:5a:54:8b:37:
c0:e7:c2:34:c1:f4:e9:46:68:c8:42:06:4f:37:ad:48:a3:f2:
36:64:b0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:59 2026 by rpki-client