Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
File: h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft (raw, json)
Hash identifier: VQ0fhH+aAtrDoLXDaMWsvYHbNN4S5JpWiXMF5s82ZFQ=
Subject key identifier: CC:55:40:B9:1B:5D:F1:64:42:48:51:79:4F:8C:15:08:ED:F4:A3:0B
Authority key identifier: 87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
Certificate issuer: /CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Certificate serial: 019D98F4A87F27364E3CF46B91D25CF60140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
Manifest number: 146E
Signing time: Fri 17 Apr 2026 01:01:03 +0000
Manifest this update: Fri 17 Apr 2026 01:01:03 +0000
Manifest next update: Sat 18 Apr 2026 01:01:03 +0000
Files and hashes: 1: aMxhZsLMDx304AXjnZldJIQi_VU.roa (hash: nX4KFrnvKm65Zf0OrETssJJWMj+/5dAoLpEa4nDLRE4=)
2: h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl (hash: q+F5DoiqiDgJNAsIAbISp7shusxGXuuDOTYSrdPAK/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:a8:7f:27:36:4e:3c:f4:6b:91:d2:5c:f6:01:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Validity
Not Before: Apr 17 01:01:03 2026 GMT
Not After : Apr 18 01:01:03 2026 GMT
Subject: CN=cc5540b91b5df164424851794f8c1508edf4a30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:19:4f:f1:42:1d:53:dd:9c:82:4e:4c:a7:71:
5a:3b:f8:fe:bb:f4:3a:c9:30:8b:4e:1e:ba:a3:68:
f6:36:cb:83:13:e9:2b:72:96:7e:01:80:18:89:24:
2d:16:02:1a:c4:24:f6:4c:fc:e1:eb:ed:32:38:60:
df:a1:f8:14:c1:aa:d3:e4:8b:4b:d4:87:27:4f:c5:
75:4e:a8:08:c9:98:f0:60:b5:be:4b:ee:f4:62:87:
3a:e0:b3:87:50:b9:b7:63:19:bb:2c:ba:30:1e:fd:
0d:cc:15:cb:23:a8:61:ad:2a:f3:33:54:ac:5c:7e:
91:a2:bb:54:8b:e3:3b:7b:89:cf:a7:e4:e8:c9:c2:
d6:6f:d9:09:70:25:66:dd:8e:8a:22:53:d5:b4:53:
7b:e6:46:fc:02:95:5c:d8:76:b5:5d:5b:14:1d:6a:
4c:3e:8d:d6:30:55:a9:9f:b4:3a:ed:49:7b:4e:18:
35:d0:41:24:b8:60:68:f2:54:1f:b6:a8:9d:4a:29:
ca:c1:6e:b1:7d:b6:9b:31:d2:e2:59:74:8f:68:e8:
d7:40:3a:28:e0:77:6e:a5:87:e1:99:08:36:ca:6f:
77:b8:a9:05:23:bc:90:06:96:47:ce:89:39:05:b1:
94:ed:f5:e0:c0:f4:6a:c3:21:a6:9d:65:fb:6f:dd:
cf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:55:40:B9:1B:5D:F1:64:42:48:51:79:4F:8C:15:08:ED:F4:A3:0B
X509v3 Authority Key Identifier:
keyid:87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2d:43:1e:13:4b:38:e7:78:e8:ad:a4:0c:68:18:c8:d1:0b:
aa:bc:bd:01:bd:8b:6a:45:99:23:40:62:af:be:23:62:9a:50:
76:e1:be:83:08:d2:fc:3d:11:42:d3:ab:57:87:40:1f:ef:6c:
02:2f:5a:ba:45:b9:b5:96:0d:a6:69:26:3d:ad:2a:e5:11:f7:
07:1e:37:f3:38:c2:dd:86:7d:9b:e3:45:bd:9c:82:40:be:09:
82:cd:16:48:bb:50:eb:b2:7b:81:fb:37:5a:a7:9d:c6:51:01:
d4:bf:ae:86:f6:2c:53:f2:fb:5d:30:32:69:04:e4:ea:56:7d:
06:f1:19:8a:80:a0:63:a3:b1:b1:ee:de:3a:7b:3d:00:64:9e:
c1:74:d4:e3:09:98:71:21:fa:fe:d0:35:52:42:8f:d5:ed:b4:
a0:d5:af:ff:bf:0e:86:bf:0a:59:9d:83:f5:28:36:36:23:5f:
d7:e5:2e:21:7a:55:83:e1:77:ac:71:46:2f:7a:49:c9:fa:2c:
a8:80:a1:6c:87:8e:f3:af:3b:3d:8f:52:2b:61:82:cd:89:4f:
0d:1c:12:a8:6a:ea:54:4b:e6:94:58:60:9e:14:fd:11:10:8e:
32:7e:b5:06:70:ef:09:57:a6:5a:a6:95:2f:2b:57:d2:14:3e:
0c:7d:d6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:26 2026 by rpki-client