Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json)
Hash identifier: OA/2ds39PmKY67AbbvCs7F+3gLjYdG8sm1OGyNp2UmQ=
Subject key identifier: 2C:5D:25:D0:EA:13:70:6D:EA:43:F6:29:2D:1E:D4:B9:0A:D8:7A:00
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial: 019D985033FE7C24D47A688235FE12D0E3B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
Manifest number: 17DB
Signing time: Thu 16 Apr 2026 22:01:26 +0000
Manifest this update: Thu 16 Apr 2026 22:01:26 +0000
Manifest next update: Fri 17 Apr 2026 22:01:26 +0000
Files and hashes: 1: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: 2ZKSFjmVf4CZnR29XOEmuFtZcnjKROh+LYlFDHRdLoA=)
2: LNkknaOANYr2AA8ZuXpEtPtOI2U.roa (hash: NdnyraokPSONSOY68l5BBrIXI7N+cymphtjpwfbN+j8=)
3: VMnWGp7firuAUsWhbCng8rrrFlw.roa (hash: Fy/4ogGN6QuHkOB3ALl0+4oSCn6tCK4BbOxmnXohTkE=)
4: Vav1Ve0V_wYLXop_F-tg15-s9Ck.roa (hash: 2kpbPB/kpBJfWefdjXYSzZRTk/oD3Mu5OJcsFnMDxdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:33:fe:7c:24:d4:7a:68:82:35:fe:12:d0:e3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Validity
Not Before: Apr 16 22:01:26 2026 GMT
Not After : Apr 17 22:01:26 2026 GMT
Subject: CN=2c5d25d0ea13706dea43f6292d1ed4b90ad87a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:bb:9c:3e:7e:b0:43:ad:5c:5c:a6:44:b0:
4f:9a:a1:d8:6c:56:3c:0f:67:6a:f6:4f:98:dc:c1:
30:51:e1:a8:15:69:84:15:c0:6f:5c:05:fc:1c:a4:
5a:73:44:40:eb:16:29:e4:54:8b:1d:52:b8:99:3a:
c3:cd:5c:47:ca:7b:8a:1f:a7:6e:1b:48:6a:0e:2c:
b0:32:7f:82:83:cd:60:cf:1a:6f:a9:3b:a9:64:22:
28:3b:c9:39:cd:eb:f1:00:6c:19:ef:03:2d:f0:d7:
46:57:b1:2c:3c:f8:b3:6c:9a:5f:3b:41:88:c3:e7:
b2:2d:c2:63:a8:9c:c5:77:71:f3:73:77:fa:46:f4:
71:2f:c9:bf:9d:e1:34:fa:d0:b1:a1:fa:99:87:70:
1f:38:e7:97:49:bf:7a:c5:84:e6:3b:0f:da:6c:8b:
8e:fb:86:97:eb:5a:d6:ad:6d:d5:c4:ff:dc:e5:08:
e3:91:90:c7:cf:f1:dd:3d:2a:c1:88:e6:36:ff:7e:
cc:02:3a:71:ca:f7:c1:82:a9:3f:4c:d7:fe:e7:cd:
a0:6b:c8:2a:c4:a4:76:36:32:41:1f:44:17:23:31:
f4:90:ce:aa:31:ce:e8:4d:c6:3a:8a:17:fa:bc:d1:
45:f4:ba:a1:d6:c9:dd:d5:b3:70:c1:e0:12:0d:22:
50:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5D:25:D0:EA:13:70:6D:EA:43:F6:29:2D:1E:D4:B9:0A:D8:7A:00
X509v3 Authority Key Identifier:
keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:0b:54:bd:95:30:f0:00:f3:2d:ee:e1:1b:11:f3:6d:b8:14:
4f:34:ca:e3:62:f2:15:c3:57:93:47:0d:d2:7b:74:5d:a6:23:
3f:72:1a:7c:fd:3e:49:0e:6b:1e:c3:72:7a:02:bf:56:8e:20:
f2:d4:33:0d:4b:53:13:e0:8a:b2:ea:04:93:99:01:e1:d4:3f:
20:85:3d:6f:f9:23:8a:7f:bb:07:93:64:9f:2d:09:8a:4d:07:
e0:7a:fb:27:db:35:6a:24:b5:dd:69:fb:85:41:a8:56:46:b4:
b3:bb:e2:2c:81:1e:4d:eb:47:db:7c:4e:1f:10:62:b2:d0:54:
21:70:0c:83:37:47:58:82:c9:ec:fe:67:f8:b5:55:5f:ca:1b:
ac:e7:d0:0c:0d:fe:a3:94:d8:83:06:dd:8a:c9:b7:d7:03:fc:
60:ef:05:e2:6f:51:d9:42:14:cb:c7:53:1d:75:db:79:5f:f3:
0b:8d:43:39:09:6f:af:f6:ab:a1:da:1f:79:ba:e9:52:c6:4a:
93:f3:9c:a4:1b:b5:de:08:be:e4:4a:b2:06:3a:a5:bf:18:78:
0c:60:47:0f:4c:d1:5e:98:b1:79:95:2b:b9:8c:91:4f:09:49:
c5:8d:6f:91:67:2f:f9:bd:27:8d:97:f1:cf:fe:7d:f0:c2:6d:
a1:ed:d0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:45:26 2026 by rpki-client