Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
File: hGr1TmVYz8hiUpRuRpKrknd8DhA.mft (raw, json)
Hash identifier: 7GXMulfRtcV6eL6wIkRpvmVr70wjkU3pyl1ky4a8RRQ=
Subject key identifier: CB:C4:90:3F:F6:16:2B:F3:31:25:CB:C9:E7:F4:F6:AF:B1:1A:DD:E1
Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
Certificate issuer: /CN=846af54e6558cfc86252946e4692ab92777c0e10
Certificate serial: 019D98BDF949736ED19AD964A1A3C206DDA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
Manifest number: 14E5
Signing time: Fri 17 Apr 2026 00:01:20 +0000
Manifest this update: Fri 17 Apr 2026 00:01:20 +0000
Manifest next update: Sat 18 Apr 2026 00:01:20 +0000
Files and hashes: 1: DzxlgYolYmYrOw6dLtHYtuvzTW4.roa (hash: snxX9+Dmsgw6Tf7GTwWvTcPR+yOEzI9Wj8zN8W2eCBE=)
2: OQLmyHIHKnOQqtsOG6o6hyfLKFE.roa (hash: OAPut5klxvnwxvXekYncRq9ZTcquwuK9N/4Pis2RPnI=)
3: SU9l9n5tTaHoiwwtJtq99KggAas.roa (hash: 7Jnaa+yaZEgfZ0pJI5V9JYe56J0Eyz54F3utpVXqqBs=)
4: hGr1TmVYz8hiUpRuRpKrknd8DhA.crl (hash: DP/mkr1S+/OXycGrZgnwjtXW5z3QibsuIRvurSOSrpI=)
5: y18u9oMcyFjkgl_LFXqULX8NytA.roa (hash: B5vX5oLv2822UN69f2wG7jEHSe1FzIcV1zpP+Ish8P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:f9:49:73:6e:d1:9a:d9:64:a1:a3:c2:06:dd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10
Validity
Not Before: Apr 17 00:01:20 2026 GMT
Not After : Apr 18 00:01:20 2026 GMT
Subject: CN=cbc4903ff6162bf33125cbc9e7f4f6afb11adde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a7:e1:4c:20:b2:a5:2a:36:e6:b4:5d:dd:85:
4c:fe:d1:70:c8:ae:ad:16:34:c6:61:ac:2a:0b:77:
c1:a3:34:25:fd:43:b5:3f:f3:37:ef:43:38:0b:df:
1b:7b:31:9a:32:92:c6:7b:ca:5d:c8:dd:73:f2:dd:
7e:e8:c0:64:7a:06:51:e1:da:ef:13:62:80:7b:4a:
e8:51:28:7a:01:f8:94:a5:1e:aa:fb:95:01:11:8d:
ba:de:8a:8e:1a:02:6e:06:1a:67:47:ab:c1:4a:5a:
68:dd:11:e7:be:6d:28:d1:c0:a4:b9:8c:ae:e5:00:
8f:7f:e2:3f:8d:82:ce:2d:0b:32:98:43:21:d8:09:
3c:61:d7:ec:65:13:6e:40:1d:94:f5:ce:e8:b0:80:
fe:a4:38:1e:29:5e:71:e0:c9:bd:4f:ae:78:6d:d4:
6c:01:5b:ad:71:1c:95:19:bd:79:e2:b7:f4:a0:2e:
fe:6c:c4:7a:78:c3:07:f4:b4:df:8d:d3:45:d8:7e:
19:2f:f3:bf:9e:bf:48:3b:2a:f8:6f:a3:93:3a:3c:
7e:c9:fb:ee:fd:e2:11:18:46:e1:c9:b4:82:7c:5f:
43:26:a7:16:b0:d7:03:d4:34:6f:61:a9:30:b9:de:
09:3b:55:cc:69:1a:8a:cc:95:33:0e:e5:29:9b:7c:
93:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C4:90:3F:F6:16:2B:F3:31:25:CB:C9:E7:F4:F6:AF:B1:1A:DD:E1
X509v3 Authority Key Identifier:
keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6e:54:96:e7:7f:bc:88:ec:6e:ea:92:26:ea:d1:9d:30:37:
c5:0f:b7:87:93:cb:46:11:4b:2b:8b:42:4f:e4:47:e4:47:e9:
2d:fc:8a:52:8e:39:c9:60:aa:42:cd:e8:c7:3f:c1:60:11:6c:
35:82:0d:4d:9c:72:35:40:40:4d:56:a1:5d:5d:cf:76:5a:fa:
5a:e3:a1:54:df:d2:1a:6d:e9:6c:64:8b:b5:d1:67:bf:4e:9d:
b5:74:67:79:ac:c9:9b:27:1a:83:93:62:63:30:dd:64:53:11:
d1:7b:5b:e5:50:54:4e:56:86:bd:11:7a:77:0c:d5:95:a6:83:
42:4d:d7:14:05:fb:b7:c8:8a:54:ab:36:c7:56:d2:51:57:dc:
06:0a:56:25:fb:7e:5c:48:3f:c7:51:ff:fc:9a:e5:5a:bf:3b:
78:95:c2:23:4e:8e:d1:0b:c5:a7:e2:70:e3:4b:92:f3:0a:c5:
6b:19:f0:a6:bd:04:67:b4:ae:07:5d:c2:d5:b9:78:84:2c:e4:
92:d5:66:88:06:69:07:a9:e0:9c:48:59:5d:31:4d:b4:e7:92:
65:3d:93:9c:2a:bf:07:7b:54:b6:c5:18:08:d3:18:c5:48:9d:
74:7f:c3:54:4e:ed:e9:2b:1a:70:d0:95:4d:99:cc:40:df:f8:
3c:d1:3d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:01:18 2026 by rpki-client