Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
File: Hsub1e2W5p3aj8Kh_gIUetro9xM.mft (raw, json)
Hash identifier: oT8CuIFY+iTlxWetxPAO8u5RcAzeaUF3RnzCHpnF+sM=
Subject key identifier: D7:E9:0D:D6:7F:E0:B4:A9:BF:54:27:FB:CE:91:A0:44:09:D0:3C:57
Authority key identifier: 1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
Certificate issuer: /CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Certificate serial: 019D9A3E4B01B20DFA61E08FA00DE4AA64B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
Manifest number: 073F
Signing time: Fri 17 Apr 2026 07:01:06 +0000
Manifest this update: Fri 17 Apr 2026 07:01:06 +0000
Manifest next update: Sat 18 Apr 2026 07:01:06 +0000
Files and hashes: 1: G-LosfPXxnZLjoawTLkLFlJf6Uo.roa (hash: 222el1T6oNBycXKI0rskbTnyDdqNQ8vPbLot/EwZDqs=)
2: Hsub1e2W5p3aj8Kh_gIUetro9xM.crl (hash: abnGASutNv8XNCf79EZpKS4TdzJYiDtwWM8w7YLsGl8=)
3: QlBIuHXJV34-HRgZJecpCSsUU10.roa (hash: 4zPQ9GZzH+rReoGUvyDkVlboTCPsAVjyxr06dsvIUCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:4b:01:b2:0d:fa:61:e0:8f:a0:0d:e4:aa:64:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Validity
Not Before: Apr 17 07:01:06 2026 GMT
Not After : Apr 18 07:01:06 2026 GMT
Subject: CN=d7e90dd67fe0b4a9bf5427fbce91a04409d03c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:b5:c2:b4:00:17:de:15:20:3e:67:c2:bc:
25:d9:b5:b8:b2:9d:2b:9c:38:f9:c4:3d:ad:dd:ec:
d2:92:b2:9f:09:ac:f5:07:3b:77:f9:c0:bd:ab:dd:
da:43:ac:62:8f:c6:42:84:8e:cf:95:09:4c:c6:f2:
69:aa:88:e4:8d:f2:1b:1a:c1:50:76:08:cd:7a:e7:
f3:dc:02:17:ef:22:1f:45:45:82:59:89:0e:2f:76:
09:f7:89:21:91:b1:45:c9:c9:94:34:88:27:64:e1:
ab:ac:e2:c3:18:96:fa:cc:5b:a0:a8:7f:73:54:90:
6a:d0:96:ab:91:4b:c0:e9:f5:5f:1f:53:f2:32:d5:
2f:4a:3d:c2:65:aa:d8:8a:86:5e:ed:8f:a8:88:3e:
28:61:0b:6b:c4:e1:f4:67:52:52:36:2d:20:8a:02:
5c:2a:cd:ab:47:c1:cb:a8:c6:99:46:32:78:d0:5d:
34:f0:b6:d5:e2:08:23:7b:ff:79:e9:65:77:81:ad:
13:3e:dc:de:9c:54:63:77:8c:81:36:30:75:31:eb:
ac:ff:83:3d:49:c4:9d:9c:7c:7f:68:13:ee:2f:e4:
07:82:00:b2:ae:01:8b:eb:82:33:ea:2b:ad:ee:65:
7c:b2:19:9a:88:94:37:a9:bc:68:6d:44:ae:fc:ef:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E9:0D:D6:7F:E0:B4:A9:BF:54:27:FB:CE:91:A0:44:09:D0:3C:57
X509v3 Authority Key Identifier:
keyid:1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ca:13:b9:83:44:1a:92:00:09:c2:f3:59:63:12:9b:f2:4c:
52:9e:b5:bb:23:8a:30:f3:5d:4a:fd:f9:30:4d:39:5d:ad:dc:
81:6b:af:1a:f0:8b:11:ea:f1:c5:27:0c:66:14:3c:5e:a8:56:
83:a5:6e:83:84:0f:5a:46:fa:9f:25:ee:e9:b5:83:cc:20:f0:
29:d5:51:6d:e1:64:12:b8:eb:e8:69:48:e8:0b:f7:98:2f:7c:
aa:74:37:c4:84:82:ef:a3:ed:87:53:d2:33:9b:2b:2b:28:51:
82:db:c5:a4:19:a7:c4:96:44:23:a6:6a:6b:95:85:bb:0c:1b:
00:0d:02:ed:c4:05:6e:15:93:86:ad:4f:02:46:2c:25:7e:16:
a3:09:2e:c3:8b:bc:da:06:ca:1e:83:7b:eb:5e:49:4a:ac:ea:
13:ec:a1:5e:d9:ff:54:0b:8e:e9:d5:cf:60:13:b2:81:f7:61:
00:18:f7:a2:b5:79:dd:0b:96:67:a0:ab:a8:45:7b:bd:35:9b:
c9:61:c2:e2:c1:76:35:67:19:fc:90:ad:97:29:91:22:86:e0:
f6:1a:a1:44:71:7c:14:fd:ce:10:2c:21:eb:5d:da:31:a4:9b:
bc:df:4e:fe:ae:03:6b:cf:fa:c8:00:94:bc:4e:c5:a4:f2:b0:
87:93:b9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:40:37 2026 by rpki-client