
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
File: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft (raw, json)
Hash identifier: sUREaZc65EbDZT+kn19/KmMpVIfk9g1dSROIIDRUqH8=
Subject key identifier: 0F:42:1F:43:30:8A:5F:8A:7A:EF:C8:51:13:B9:4C:AD:85:69:A1:E8
Authority key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
Certificate issuer: /CN=8794395ac822dfe01165216c7781ffd61db28d5b
Certificate serial: 019D99625A8681AF42A4AD93489CC96D46E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
Manifest number: 0746
Signing time: Fri 17 Apr 2026 03:00:52 +0000
Manifest this update: Fri 17 Apr 2026 03:00:52 +0000
Manifest next update: Sat 18 Apr 2026 03:00:52 +0000
Files and hashes: 1: L7s0ED57mNbRMv5scEab-MWU-0g.roa (hash: UTR/1aEsEtkTlQxKjpcPzSUv65QlBCtFASF3Ua17FGM=)
2: RBE0mA4HScE-lPJMqTTmYcsD2Hw.roa (hash: YHl21kGfBScrHLWB8nH7LfwSKrFDkFd1MvbGkxb2nBQ=)
3: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl (hash: zwG4NzjLzBeVImPE3bq0WtN6Z2KHl9OAqy1b7HjDDDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:5a:86:81:af:42:a4:ad:93:48:9c:c9:6d:46:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794395ac822dfe01165216c7781ffd61db28d5b
Validity
Not Before: Apr 17 03:00:52 2026 GMT
Not After : Apr 18 03:00:52 2026 GMT
Subject: CN=0f421f43308a5f8a7aefc85113b94cad8569a1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7b:b3:46:e4:c5:6d:48:da:7e:50:db:62:96:
a4:5c:80:b8:5d:1b:eb:17:19:3e:09:da:d9:f4:40:
b2:9f:9c:9c:f2:d3:87:88:3e:eb:8e:4e:99:7f:fb:
d6:f9:dd:25:16:5f:0b:e0:30:8b:4d:40:df:97:6b:
c7:5a:09:42:e2:50:22:a2:ce:bc:07:a9:bb:e1:09:
db:67:b2:7b:70:a2:34:16:16:af:23:3f:c7:eb:3d:
5e:8d:f8:5d:a7:89:d6:6b:4d:f2:10:64:4c:5d:d6:
59:8f:79:c1:5c:88:b4:64:fb:2d:10:c7:6c:ba:f2:
7d:bb:67:f3:57:63:29:3c:43:2a:79:5b:b5:75:a4:
9a:15:2e:18:60:68:38:10:69:98:b3:d0:8b:a0:6b:
13:ce:af:c8:a4:4d:31:0d:8c:3c:b6:2b:6e:80:70:
f0:a1:55:23:1b:6a:cd:66:65:34:6b:6e:f4:28:03:
e5:67:2c:90:dc:be:5e:be:db:52:cf:f8:b8:c9:47:
ab:a8:c2:b8:b3:1f:36:ee:92:50:27:b7:61:be:b9:
b3:c4:7e:85:ca:bd:6b:6b:85:7c:51:36:23:0f:d6:
9a:ab:0c:e7:43:99:f8:5b:7c:c0:f7:75:22:e6:d3:
9e:08:d9:2f:9a:2d:3f:7e:e3:9b:2c:4c:da:45:0d:
e2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:42:1F:43:30:8A:5F:8A:7A:EF:C8:51:13:B9:4C:AD:85:69:A1:E8
X509v3 Authority Key Identifier:
keyid:87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8b:d3:59:6f:e6:c5:68:1d:10:01:9c:61:34:04:20:56:3b:
5e:da:b3:be:5d:0b:a4:66:9f:d7:79:5e:47:69:5d:45:03:95:
43:69:43:9d:8e:7e:85:70:73:d9:06:ba:f8:c1:4c:18:67:56:
d1:86:a6:ea:b4:5c:af:57:99:ea:c4:e1:19:0c:24:d1:76:c5:
eb:52:be:df:7a:88:05:a6:ad:83:e9:c3:7d:20:11:00:8c:56:
3a:72:bf:29:3d:99:4a:d4:d5:fa:45:08:44:67:50:93:43:c6:
20:1d:bf:61:d6:6c:d9:e0:c4:b1:3b:4c:7a:15:82:2b:45:fc:
81:1b:47:5d:48:2f:c7:c8:9f:73:7e:09:13:07:7f:7c:2f:17:
ba:ba:d1:dd:83:d8:56:bc:37:99:cb:1e:61:4c:73:02:61:1b:
58:68:16:df:d0:a7:b9:15:0d:a5:af:1e:45:8b:d9:84:ea:8f:
ba:19:fd:50:34:e4:ca:38:47:4a:1f:22:55:b5:e9:9a:49:53:
25:56:41:07:c5:0c:48:c6:76:8b:28:3e:95:38:81:ca:57:61:
7c:68:27:c2:28:1f:87:8b:40:79:02:8e:36:62:e3:f4:6c:a8:
61:70:55:c0:38:f6:6b:a5:cc:ea:5c:a1:e2:d5:5b:a6:0a:90:
49:6b:2a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:15 2026 by rpki-client