Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
File: H0guXkEsHeu3dt7fr0XDMXTnZC4.mft (raw, json)
Hash identifier: fmHKpJkJp5iIV6RVwsffFtkkq4rdgUohyVrU/FC/hds=
Subject key identifier: 42:78:C1:2F:36:FA:5E:99:47:34:DE:5C:0B:63:7D:66:01:F3:D9:BC
Authority key identifier: 1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E
Certificate issuer: /CN=1f482e5e412c1debb776dedfaf45c33174e7642e
Certificate serial: 019D9B87E124E010D4E395E247E1CCFD60CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
Manifest number: 070E
Signing time: Fri 17 Apr 2026 13:01:06 +0000
Manifest this update: Fri 17 Apr 2026 13:01:06 +0000
Manifest next update: Sat 18 Apr 2026 13:01:06 +0000
Files and hashes: 1: 7F5MFPLGX7n9kqmK4iPr3DwuhNU.roa (hash: sUozPnCyk9y8i1GS+PfFGedUQX43402xLyKa/GCV0HY=)
2: H0guXkEsHeu3dt7fr0XDMXTnZC4.crl (hash: fy9Pt6TFShFAFpm9SITELjAUsplpbRR0KH6v+StGm2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:e1:24:e0:10:d4:e3:95:e2:47:e1:cc:fd:60:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f482e5e412c1debb776dedfaf45c33174e7642e
Validity
Not Before: Apr 17 13:01:06 2026 GMT
Not After : Apr 18 13:01:06 2026 GMT
Subject: CN=4278c12f36fa5e994734de5c0b637d6601f3d9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4e:27:92:75:01:34:34:07:16:f1:b8:c4:de:
0f:f4:09:e5:2f:cd:1c:b4:29:f3:83:27:65:4c:11:
a0:f8:71:91:c2:f4:04:2a:b0:fa:98:38:ef:c6:99:
f2:d8:6c:9b:0f:3f:24:74:66:d0:79:06:ba:cd:e2:
f5:d3:21:22:64:f7:8f:64:79:b2:86:6e:e6:40:4e:
aa:d6:cd:51:6f:cf:d5:45:17:62:96:db:8b:ce:70:
ec:68:04:e4:e4:23:0a:a5:fc:73:e5:27:20:8b:ed:
9d:cc:c6:06:99:e3:2a:ed:42:9d:4b:11:50:41:07:
44:3c:2e:26:40:66:ac:55:c6:b3:f1:1d:11:41:71:
83:48:d9:11:9d:ac:30:df:ab:4b:18:c3:72:49:89:
6e:43:4e:9f:5e:ca:7f:29:d5:b9:2f:a6:f8:0c:36:
63:c4:b9:00:ff:bf:1f:22:24:57:9c:a6:72:35:90:
d3:22:3b:0e:85:3a:52:69:a7:ae:a6:9b:4c:58:66:
23:f7:76:75:5f:e7:72:01:e9:c3:fe:c3:6a:4b:2b:
48:d1:ab:47:21:15:45:a7:fa:97:0d:4a:72:93:67:
98:ba:bb:87:6a:56:2e:88:13:be:3b:1d:9f:84:93:
1b:47:c1:33:fe:46:b1:63:11:cf:dc:7a:f1:71:04:
b9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:78:C1:2F:36:FA:5E:99:47:34:DE:5C:0B:63:7D:66:01:F3:D9:BC
X509v3 Authority Key Identifier:
keyid:1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:73:ed:38:d4:ae:a6:5c:bb:0f:dc:47:a8:35:70:21:03:f8:
30:d4:3c:c5:78:75:af:8e:37:78:0f:45:bc:7c:77:ec:14:3e:
e7:73:7b:b5:be:a9:45:e2:15:98:c6:d0:fd:f8:f7:24:09:51:
c9:60:a1:aa:0c:e6:7e:be:6d:1d:40:49:8e:11:ed:2c:e0:60:
8b:ca:23:fd:fb:c2:e1:d7:dd:17:be:93:a6:77:6b:7d:55:11:
14:5e:6b:64:dc:46:14:35:91:2a:15:ec:07:e0:99:51:ef:64:
41:fa:8c:58:9c:25:6f:d0:ae:87:c2:45:fe:30:d0:e6:c2:93:
c5:f6:1d:7e:1a:d1:5c:50:17:3f:f8:fa:8a:8f:67:5e:63:e7:
88:c5:75:3b:17:02:6f:24:0e:93:eb:c5:fe:9c:69:33:aa:1e:
14:1c:bb:a7:bb:92:49:38:c9:a1:46:3c:3f:b8:b8:d2:48:de:
bd:20:f9:ba:54:4e:2b:3b:80:bc:2c:38:6b:f6:08:e2:7c:6f:
8b:e7:cb:67:27:5c:69:1a:dd:83:b9:d8:ad:7d:25:dc:76:83:
b1:69:1b:93:52:75:13:d9:27:49:70:94:ce:39:f0:84:f2:68:
a3:f7:3e:2a:cd:ab:71:a0:a4:c3:96:7e:d6:ac:ac:bb:c6:22:
03:fa:02:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:08:18 2026 by rpki-client