Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
File: T_hs8z4V6kCJ2inip4gddG34Ju8.mft (raw, json)
Hash identifier: qxnDpNBSSdeVtLnaIhRJNDOezd3E3tgth7ti04PaCPA=
Subject key identifier: 22:6C:38:E1:2E:52:06:A2:C5:B7:FE:5F:7B:1C:24:DF:BB:66:E1:7B
Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
Certificate issuer: /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Certificate serial: 019D9A3E4BE2F556136355AC46079AD53C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
Manifest number: 1224
Signing time: Fri 17 Apr 2026 07:01:06 +0000
Manifest this update: Fri 17 Apr 2026 07:01:06 +0000
Manifest next update: Sat 18 Apr 2026 07:01:06 +0000
Files and hashes: 1: 1v3IPl8M1eJPBhCAK7u4vq4rUaI.roa (hash: fKYCNJCehScelohhLM2BpKiOwF7K+yob2FjJd+Ycr6M=)
2: T_hs8z4V6kCJ2inip4gddG34Ju8.crl (hash: 0MvU576soWF+bRYY/BjWZMNX967BqhJysMWPIggfLM4=)
3: pxD_Y88xrQvnAVjSRtOa0jsr7OQ.roa (hash: +SNLZHSRdVfvPSo1qQ3dQv0AK0ZdBnAQ1eRjccxs6zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:4b:e2:f5:56:13:63:55:ac:46:07:9a:d5:3c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Validity
Not Before: Apr 17 07:01:06 2026 GMT
Not After : Apr 18 07:01:06 2026 GMT
Subject: CN=226c38e12e5206a2c5b7fe5f7b1c24dfbb66e17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:32:b0:eb:29:63:db:54:5b:8d:b4:95:f5:
73:4b:fc:6d:af:75:20:54:80:76:aa:02:4a:3c:ed:
90:ad:40:e2:6d:60:8d:8b:c9:79:5e:6f:36:81:0f:
80:6c:87:67:8f:76:5e:64:36:b4:65:b6:66:88:67:
f8:b5:dc:a3:a1:e0:00:90:94:e4:19:4f:12:26:f4:
41:5f:4b:86:95:f5:fb:aa:c9:13:a1:a8:38:95:8b:
2c:ce:89:7b:2d:77:75:e6:85:45:b0:1c:95:c4:87:
f0:7d:f1:0f:a5:58:6f:36:7b:2f:c0:6a:cd:c7:86:
45:2a:e5:2b:61:9d:23:96:c9:f0:c4:84:8f:77:ae:
c8:57:50:8f:60:76:d2:17:6f:db:89:04:f3:eb:8a:
81:5e:69:90:5f:b4:54:96:a3:49:5e:6a:0c:98:a9:
6e:72:43:62:ae:5a:55:de:b3:31:d2:c4:3f:1c:82:
d2:22:0b:e2:98:65:59:23:37:60:bc:e7:38:01:f5:
3d:c5:05:90:70:b9:c5:c1:91:20:f8:6d:a1:43:6a:
f4:5d:b4:b6:a3:05:ae:7d:8e:4a:e1:10:a8:6f:40:
72:ad:76:03:65:30:fe:48:de:88:c2:c2:12:50:22:
1c:6a:9d:15:ed:6f:b2:55:05:55:3f:20:b3:0a:39:
05:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6C:38:E1:2E:52:06:A2:C5:B7:FE:5F:7B:1C:24:DF:BB:66:E1:7B
X509v3 Authority Key Identifier:
keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:df:e3:7b:4f:6a:9a:2b:95:fc:66:e5:a4:9f:59:16:24:8e:
68:e6:08:80:85:aa:08:d8:0e:14:77:3e:d4:9d:bf:33:cc:b3:
cf:88:45:c7:bf:75:3e:5f:01:24:51:28:51:43:68:08:ed:5c:
5a:0d:ce:d0:09:6c:72:98:dc:04:2b:43:7c:e0:e9:d6:c7:db:
03:94:1b:64:5c:e0:32:e4:ed:07:13:4e:39:68:96:c4:a9:f0:
63:c9:f3:08:c7:a3:48:f7:b2:bc:80:13:4a:35:3e:ee:13:c6:
05:c0:49:6a:72:4f:13:89:e6:53:3e:c4:11:2d:5a:0d:9d:ad:
5e:5c:fe:50:db:17:74:f0:e5:a4:8b:f4:a7:a4:02:9c:87:8a:
1b:8e:3f:9c:8f:16:71:7d:ea:db:67:d0:23:ae:b1:28:52:ff:
a0:34:f1:84:3a:d7:fe:55:ec:df:27:7d:8a:f8:21:90:2b:c7:
f8:a7:8a:a9:f9:39:09:61:ba:58:3b:d1:89:8b:87:60:7d:63:
37:95:b7:11:95:83:9f:64:7e:c1:e5:ed:54:83:83:9d:d1:51:
74:cc:60:0e:bc:85:3f:3f:c4:ac:47:55:a7:52:f4:95:9b:fb:
60:8d:f2:75:cd:41:1f:1b:50:4a:3c:52:4c:15:a2:91:8b:0a:
20:b9:ec:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:27:32 2026 by rpki-client