Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
File: Hal8rn3msp5W8CWa9TyVkmA0pQI.mft (raw, json)
Hash identifier: n/9Wk1WEGOdupzRe/T+Uq4MA3clgHgclRHPGWf4QD68=
Subject key identifier: 2A:47:FA:6A:79:71:74:A3:4B:FA:7F:10:F9:EF:B6:97:2F:CD:4B:38
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Certificate issuer: /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial: 019D9AE335B7E118996E8E301F6376E6BCE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 10:01:14 +0000
Manifest this update: Fri 17 Apr 2026 10:01:14 +0000
Manifest next update: Sat 18 Apr 2026 10:01:14 +0000
Files and hashes: 1: C5XEOKd3fauF5wNLgFLgU_UqhDk.roa (hash: gq6WkJtrJKgQndCeB0nR0Q6T7/UN9Av/CBIcRy+j3B8=)
2: Hal8rn3msp5W8CWa9TyVkmA0pQI.crl (hash: +nQY8NpiJOPN66jMCuNduqjbsGcLZoc93W72JMLT04g=)
3: JhmZ_DzVJE8577BFE3vDvK9OMd0.roa (hash: z7gGITh/3gzv8G0JyKWvKpwEUXXNZ5dN/ko+JOVacoE=)
4: WCOH2ijRWITUQhmT6F4yfxrnSS4.roa (hash: 2qWBhToAV4o84zS0ph5XP7s0uUrVjIEKx5W2Lfxk5UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:35:b7:e1:18:99:6e:8e:30:1f:63:76:e6:bc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
Validity
Not Before: Apr 17 10:01:14 2026 GMT
Not After : Apr 18 10:01:14 2026 GMT
Subject: CN=2a47fa6a797174a34bfa7f10f9efb6972fcd4b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3d:cb:47:8c:b9:0a:52:d5:69:b7:04:f5:31:
b6:3f:7a:62:0b:5a:e1:80:99:42:65:4a:e2:1b:9c:
95:9e:fb:24:af:8e:9d:95:56:8a:e0:83:e9:47:44:
e8:82:4d:15:96:2c:16:54:66:ef:71:cd:51:18:e2:
67:d0:cf:c7:27:cd:37:b8:d3:89:a3:41:b2:cc:e2:
e4:2e:99:92:fb:e1:d8:f0:f5:01:32:ee:ae:6e:7e:
e6:23:9c:f1:95:21:6a:95:a1:5f:ac:83:4e:94:25:
1e:ba:75:83:93:f3:19:54:b7:30:ff:f3:8d:4e:43:
63:c0:38:cd:5d:42:41:8f:83:26:2d:10:fc:11:db:
41:c4:88:1f:aa:d7:29:87:bb:d6:0f:92:76:c2:d0:
68:a5:23:55:75:85:e8:c0:07:e6:4f:83:e3:c0:39:
de:87:e8:05:97:52:6c:fa:69:a6:d5:88:85:cc:e6:
6f:00:32:49:e3:a4:c7:de:a5:44:69:15:c2:e6:6f:
c6:6c:59:42:76:ad:86:20:c6:10:b3:12:c7:0e:10:
10:54:8d:01:3b:7a:6a:9a:72:d5:ee:3b:13:3b:04:
df:44:7b:7e:85:93:55:02:92:2b:62:95:f7:ba:0a:
e6:29:3a:a9:3e:52:12:93:52:89:38:d7:57:f1:f3:
97:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:47:FA:6A:79:71:74:A3:4B:FA:7F:10:F9:EF:B6:97:2F:CD:4B:38
X509v3 Authority Key Identifier:
keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:18:da:8e:7d:10:8d:53:0f:76:b2:31:a6:90:7e:97:2a:4b:
33:d7:91:9f:7c:be:56:1d:22:87:18:15:80:0d:1b:f4:f1:cf:
96:af:75:3c:ef:49:97:03:60:ae:17:fc:92:41:78:be:91:f3:
1e:2f:1e:b4:f4:83:2c:e6:07:89:c2:31:be:a8:ce:32:e8:e1:
f6:52:43:da:6f:8d:63:43:87:83:46:a8:18:10:5e:69:c6:11:
cd:b3:62:7e:1e:f6:7e:10:ce:9e:59:47:f0:b7:75:78:b6:a6:
a0:ea:04:3a:52:29:54:e1:34:d0:f8:4d:3b:97:dd:d8:d3:86:
78:07:b1:2c:bd:13:81:dc:39:42:b4:98:5c:95:7c:8f:81:a8:
7b:24:bf:ed:b6:fa:1d:8a:ba:e5:07:ce:8b:7f:6d:bb:82:19:
7a:ee:c1:5d:a5:24:c2:3a:a1:eb:2c:ce:36:77:74:4c:26:da:
6b:4d:d3:01:4c:e6:e0:a6:09:07:54:82:dc:e1:4a:9c:c5:34:
09:1b:60:45:10:95:b4:f2:6c:3d:e3:b1:a8:6f:5d:69:13:ab:
07:96:d2:8c:14:2f:34:5d:fa:e6:06:71:0e:63:2f:e7:80:6f:
85:42:42:2d:9e:bc:58:1d:7d:ee:4f:1b:5d:aa:63:ae:17:3d:
30:41:d3:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4zW34RiZbo4wH2N25rznMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYTk3Y2FlN2RlNmIyOWU1NmYwMjU5YWY1M2M5NTkyNjAz
NGE1MDIwHhcNMjYwNDE3MTAwMTE0WhcNMjYwNDE4MTAwMTE0WjAzMTEwLwYDVQQD
EygyYTQ3ZmE2YTc5NzE3NGEzNGJmYTdmMTBmOWVmYjY5NzJmY2Q0YjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T3LR4y5ClLVabcE9TG2P3piC1rh
gJlCZUriG5yVnvskr46dlVaK4IPpR0Togk0VliwWVGbvcc1RGOJn0M/HJ803uNOJ
o0GyzOLkLpmS++HY8PUBMu6ubn7mI5zxlSFqlaFfrINOlCUeunWDk/MZVLcw//ON
TkNjwDjNXUJBj4MmLRD8EdtBxIgfqtcph7vWD5J2wtBopSNVdYXowAfmT4PjwDne
h+gFl1Js+mmm1YiFzOZvADJJ46TH3qVEaRXC5m/GbFlCdq2GIMYQsxLHDhAQVI0B
O3pqmnLV7jsTOwTfRHt+hZNVApIrYpX3ugrmKTqpPlISk1KJONdX8fOX5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpH+mp5cXSjS/p/EPnvtpcvzUs4MB8GA1UdIwQY
MBaAFB2pfK595rKeVvAlmvU8lZJgNKUCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGFsOHJuM21zcDVXOENXYTlUeVZrbUEwcFFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84NWI2NzMtZjFhZC00M2UyLWJmZTct
MGNkNzIzNmIyOWI2LzEvSGFsOHJuM21zcDVXOENXYTlUeVZrbUEwcFFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC84NWI2NzMtZjFhZC00M2UyLWJmZTctMGNkNzIzNmIyOWI2
LzEvSGFsOHJuM21zcDVXOENXYTlUeVZrbUEwcFFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBjajn0Q
jVMPdrIxppB+lypLM9eRn3y+Vh0ihxgVgA0b9PHPlq91PO9JlwNgrhf8kkF4vpHz
Hi8etPSDLOYHicIxvqjOMujh9lJD2m+NY0OHg0aoGBBeacYRzbNifh72fhDOnllH
8Ld1eLamoOoEOlIpVOE00PhNO5fd2NOGeAexLL0Tgdw5QrSYXJV8j4GoeyS/7bb6
HYq65QfOi39tu4IZeu7BXaUkwjqh6yzONnd0TCbaa03TAUzm4KYJB1SC3OFKnMU0
CRtgRRCVtPJsPeOxqG9daROrB5bSjBQvNF365gZxDmMv54BvhUJCLZ68WB197k8b
Xapjrhc9MEHToQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:17:04 2026 by rpki-client