Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
File: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft (raw, json)
Hash identifier: zyY7yVbmjwbdUEO92NjIt9QGxo52SZpnWgEGnf3iMOY=
Subject key identifier: BC:31:0F:DC:B1:2F:2B:50:8A:C7:1B:FC:C2:10:69:15:21:BB:87:10
Authority key identifier: 1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
Certificate issuer: /CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Certificate serial: 019D9AE3096500B5778EE41C33688CC80E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
Manifest number: 0953
Signing time: Fri 17 Apr 2026 10:01:03 +0000
Manifest this update: Fri 17 Apr 2026 10:01:03 +0000
Manifest next update: Sat 18 Apr 2026 10:01:03 +0000
Files and hashes: 1: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl (hash: g8m4mAPIPfOmsNufG4cK3NkjRIxGzeeydNb4ChCcYbs=)
2: hBZaHAyGtqRnE1DvLWWpXGTmsPU.roa (hash: hJDZYJp6gaUMZ+FxtfpKN3lHq8XA9oWvb1C80fIulho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:09:65:00:b5:77:8e:e4:1c:33:68:8c:c8:0e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Validity
Not Before: Apr 17 10:01:03 2026 GMT
Not After : Apr 18 10:01:03 2026 GMT
Subject: CN=bc310fdcb12f2b508ac71bfcc210691521bb8710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:61:ae:86:b9:98:23:f1:dc:78:49:aa:fc:
32:cc:d1:a2:08:3c:b2:19:b6:20:2a:18:4c:b7:a8:
73:26:4c:fe:5c:f8:03:25:25:37:7c:09:e7:b7:58:
83:b4:5e:d2:f5:89:aa:31:c5:74:66:4b:ef:8e:99:
40:79:a5:34:0f:27:e3:55:59:40:29:21:ef:7d:51:
7b:d7:be:a3:08:bc:5d:7c:c3:2e:8c:b5:28:c7:68:
f1:09:7a:48:3c:b8:da:a0:ef:80:a1:a9:76:56:37:
13:9d:33:e5:19:a8:79:93:e6:77:25:3a:40:43:e7:
36:d1:52:28:5c:23:f4:60:7f:a9:da:a6:ac:7f:ef:
88:ca:92:05:89:97:3c:4a:e6:31:89:16:b6:5e:08:
d1:b1:c6:06:1e:8a:7d:8c:d0:bf:c9:34:9a:8c:5a:
7a:5d:31:c3:34:97:2a:5d:20:9c:43:f0:6a:e3:a4:
a1:87:43:75:eb:e2:9d:ac:d3:65:de:b9:20:55:88:
90:71:31:db:f1:07:1d:9e:a1:ac:cc:3b:5d:e7:99:
4a:90:23:75:36:75:04:b5:14:e6:bb:d2:0a:3f:cb:
45:21:58:96:fa:85:6a:cf:f8:9f:a9:3b:eb:1a:21:
98:96:2f:1d:8b:6a:d3:2b:af:dd:08:db:d6:a6:34:
90:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:31:0F:DC:B1:2F:2B:50:8A:C7:1B:FC:C2:10:69:15:21:BB:87:10
X509v3 Authority Key Identifier:
keyid:1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7b:95:1f:44:c3:9a:ce:69:e0:3a:e1:5c:7a:ed:8d:56:6d:
12:db:95:ae:e3:f9:b2:97:1e:bc:53:00:c5:78:e6:22:16:62:
c1:42:27:76:bf:bd:7b:48:cb:20:a0:e3:da:cf:05:d9:5b:51:
a2:5e:52:35:d2:c8:84:ca:3b:c8:dd:19:b3:76:22:7f:21:3a:
68:e0:e9:c1:e5:a8:d1:37:91:10:b6:dc:87:ed:0a:bb:0b:16:
82:95:29:0b:95:ce:ed:bc:21:d9:8a:1d:5b:62:a7:ee:74:c5:
f1:88:5c:81:b6:ec:64:17:e5:3c:58:be:3f:e5:02:1d:8c:4b:
8a:cc:35:73:82:ab:ad:54:b4:52:ba:ed:ec:80:a6:d5:66:58:
d5:9e:ca:3e:d4:21:11:0c:1c:46:87:3b:e2:19:44:04:9f:1f:
e4:55:bf:bd:dc:90:7f:f2:96:e9:f0:28:03:93:db:04:fa:d1:
ed:4c:09:b6:66:82:be:23:11:17:70:21:5f:eb:f1:6d:da:c6:
af:5c:5f:99:80:96:fd:7b:2f:01:c3:29:55:06:08:87:22:30:
5c:0b:bd:35:43:08:d0:78:6a:bb:21:30:ce:76:96:ba:90:e9:
5a:09:a9:19:ed:8e:06:c3:40:68:16:af:0e:89:b4:5c:a8:cc:
35:6e:8e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:19:08 2026 by rpki-client