Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
File: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft (raw, json)
Hash identifier: 8g8FuZBjzzmmRgEpvqSJun1F+BjvSbyXRDcS9Ep2v5c=
Subject key identifier: 81:72:E9:6E:CE:F5:BF:89:DA:E3:5E:62:73:7F:8F:CD:9D:A0:35:19
Authority key identifier: AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
Certificate issuer: /CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Certificate serial: 019D99999319B4F84982102704C02F432211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
Manifest number: 11CF
Signing time: Fri 17 Apr 2026 04:01:11 +0000
Manifest this update: Fri 17 Apr 2026 04:01:11 +0000
Manifest next update: Sat 18 Apr 2026 04:01:11 +0000
Files and hashes: 1: Tv6SVFm1dqSZBNkOQRefsTpNMZY.roa (hash: +Lydi0u3DmQC51EDG4oe1+EHym7x1Ea0qYfFm6X8wzQ=)
2: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl (hash: 6IsOa00XZf5rKq32DadWYb5dPzAo/vymXLnexuw7X2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:93:19:b4:f8:49:82:10:27:04:c0:2f:43:22:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Validity
Not Before: Apr 17 04:01:11 2026 GMT
Not After : Apr 18 04:01:11 2026 GMT
Subject: CN=8172e96ecef5bf89dae35e62737f8fcd9da03519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:02:f3:67:48:0f:ce:b3:20:60:4c:1e:d9:29:
d2:53:95:28:47:e1:81:4b:68:f0:4b:85:48:3b:83:
d7:cb:6b:7f:6e:b2:a1:5c:6c:31:3e:09:40:4a:82:
a2:f6:83:d0:8b:f7:f3:f6:f2:f5:ea:01:19:04:1c:
6c:1b:a6:12:bd:16:4d:24:44:52:65:f9:be:21:d0:
00:8b:f2:d9:62:70:24:16:30:9d:5a:85:33:c2:83:
52:d4:b9:15:14:57:59:ea:ad:69:05:5d:74:03:58:
3f:de:d8:6f:56:12:f8:3d:9b:66:57:d0:75:15:04:
09:e1:07:39:0d:02:28:f3:36:1c:63:e1:59:fb:21:
f3:0d:db:5d:83:dc:8b:d3:36:a7:55:57:10:c4:b6:
a0:60:2f:75:78:e1:7c:9c:64:90:dc:18:cb:86:87:
fb:85:a2:f7:bf:15:61:5f:83:be:32:94:c6:65:e1:
3f:fd:27:72:25:5d:5a:a5:0e:a9:f6:ee:59:3e:da:
ef:bf:10:3a:c5:a7:e9:c7:b6:be:73:3e:57:3b:bc:
02:de:44:1d:28:99:96:e4:ee:75:f8:4d:43:66:8d:
ad:68:1e:26:c7:e7:a9:d5:3d:a8:1a:88:47:55:84:
c9:d3:7a:33:3e:39:72:2f:e2:af:b6:6c:95:5e:47:
53:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:72:E9:6E:CE:F5:BF:89:DA:E3:5E:62:73:7F:8F:CD:9D:A0:35:19
X509v3 Authority Key Identifier:
keyid:AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c6:21:33:5c:6a:03:29:da:a7:e3:cc:1b:57:70:5e:61:41:
80:6c:d6:64:2c:06:b1:0c:a7:8b:97:c0:58:bc:e3:0b:07:07:
f7:85:8f:42:67:e8:13:64:9d:9b:2f:07:1f:14:e0:13:d1:d8:
b5:d0:4a:44:da:54:cc:60:66:eb:6e:83:ef:36:a4:4f:f0:89:
17:6c:b2:a1:31:29:94:15:83:84:41:a5:10:3d:0b:08:01:63:
a9:cc:91:d3:20:13:97:6b:10:89:79:d2:0b:76:74:f9:fb:ba:
26:fc:da:bf:3e:f1:96:74:91:ff:90:30:1d:e5:e2:1a:c6:24:
e9:d9:fc:25:13:54:a4:e6:d3:97:14:a7:cf:b1:c6:17:af:10:
aa:bc:b2:11:46:7c:de:7b:11:2c:e4:62:99:f0:a9:1f:ba:19:
f4:29:97:29:3c:af:63:e5:9f:4e:9b:3f:a6:39:ae:64:4c:d3:
a7:c5:67:d4:b6:2a:73:d8:9e:b3:38:c4:43:2d:2a:c2:ba:10:
95:26:28:cd:2c:60:e3:21:ac:03:af:a4:db:0b:8c:c7:2e:e5:
98:0c:9f:11:ca:57:59:f1:1b:bc:02:0f:1c:07:dd:7e:3a:84:
d3:db:44:f2:bd:30:49:38:0c:95:56:31:fb:ae:c9:4b:94:b0:
30:e8:5e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:30 2026 by rpki-client