Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
File: Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft (raw, json)
Hash identifier: frdFmswmKcN1bbLJDpaMPp05IIPcelmfLElvgcN1OTU=
Subject key identifier: 05:D8:11:0A:EF:3B:53:9A:D4:A0:DC:25:2A:EE:24:71:74:F6:88:B0
Authority key identifier: 1E:47:E2:BF:39:74:72:1E:AF:BF:B8:C3:1F:C5:27:30:39:D5:05:F3
Certificate issuer: /CN=1e47e2bf3974721eafbfb8c31fc5273039d505f3
Certificate serial: 019D9850B5B7B11FA881C35FA2A32969A869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
Manifest number: 0EEF
Signing time: Thu 16 Apr 2026 22:01:59 +0000
Manifest this update: Thu 16 Apr 2026 22:01:59 +0000
Manifest next update: Fri 17 Apr 2026 22:01:59 +0000
Files and hashes: 1: Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl (hash: Kz19TKcfxLRVlBLUrKaz+ZXZCBaX9a1mQLPLrrEYCKo=)
2: m3UA_nkf1VwU3ag8qI5g5Qt-9tA.roa (hash: lDuAUkNMZFlM3dVZhNno1BqGdq4IWHifd59bAym6MAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:b5:b7:b1:1f:a8:81:c3:5f:a2:a3:29:69:a8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e47e2bf3974721eafbfb8c31fc5273039d505f3
Validity
Not Before: Apr 16 22:01:59 2026 GMT
Not After : Apr 17 22:01:59 2026 GMT
Subject: CN=05d8110aef3b539ad4a0dc252aee247174f688b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:f6:b0:ce:ea:e4:38:46:ae:c3:dd:3e:e8:
99:1b:3a:8a:32:b7:4a:1d:08:b7:94:16:69:88:bb:
ca:5c:c8:a0:e9:94:2c:b0:b0:af:d4:28:28:44:dc:
b1:f0:28:7f:50:63:db:a6:f1:b8:74:4c:24:88:24:
b9:42:f9:0c:39:ea:38:60:8d:9f:b6:28:eb:62:0a:
d9:28:ca:df:0b:19:5b:9c:e1:ee:0e:46:34:16:8d:
d5:80:78:77:a9:f2:e6:22:fc:64:c5:e2:9f:70:34:
57:cb:4a:f5:aa:97:dd:09:32:5a:cb:a3:c8:f8:7a:
21:9c:53:db:67:96:ed:e3:37:3b:e1:08:7b:a0:44:
aa:a9:0e:97:b9:13:fe:ea:b5:17:eb:ea:90:78:d1:
eb:d6:37:17:36:b8:c9:93:f3:d1:23:1a:09:19:a6:
f5:44:9a:8c:36:60:34:29:9f:3c:da:3f:15:e0:4a:
07:0d:cc:0f:25:e2:f9:7f:56:75:c7:d9:f7:5b:e3:
a1:5f:f8:01:a6:03:02:70:2c:c0:5f:e3:eb:a1:bc:
28:05:34:88:38:18:be:e3:18:a3:68:3f:69:73:d9:
65:36:28:51:ff:10:70:5f:99:fc:8c:7e:f3:28:80:
e0:2c:12:c7:35:27:5a:65:31:98:e6:05:cf:60:ad:
f4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D8:11:0A:EF:3B:53:9A:D4:A0:DC:25:2A:EE:24:71:74:F6:88:B0
X509v3 Authority Key Identifier:
keyid:1E:47:E2:BF:39:74:72:1E:AF:BF:B8:C3:1F:C5:27:30:39:D5:05:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9a:f0:b1:5b:a6:e4:f0:f1:b3:d7:d5:20:a3:62:8d:e3:65:
9f:70:e9:33:6d:e9:02:ad:42:e7:ab:6a:c5:9e:a8:c9:a3:a7:
69:40:58:58:9c:ef:4b:39:c6:44:58:5f:c8:e0:5c:d9:c5:3b:
d8:cc:9c:7e:9b:42:61:29:49:cd:9b:73:e4:c3:92:03:44:87:
6f:45:18:23:52:f7:c8:ba:aa:d3:d1:ec:45:4e:00:d7:5e:64:
f0:7b:1e:a1:d1:e0:04:71:37:e7:c3:18:c0:a1:52:b5:82:d9:
c3:71:fd:6e:8d:b5:9c:53:71:c5:e6:73:13:98:a3:a3:58:65:
1d:ec:ca:f8:d7:56:44:ab:2f:e8:b2:b3:26:df:4c:3f:73:da:
59:2a:b7:e3:45:2a:3f:37:ce:a3:f2:80:00:86:44:83:c2:de:
bc:2d:6a:9e:cc:0f:16:d9:c0:5c:88:32:9c:43:80:7e:d6:db:
f3:2c:4a:b6:89:e4:49:7d:e8:2a:bf:4c:7c:37:6d:f2:5b:0d:
99:22:f9:5b:c5:bf:cb:df:b1:f1:6b:93:53:bc:6d:8d:22:f3:
4b:4c:57:d4:c3:ec:6d:2d:f4:7f:7d:2e:72:0f:86:ea:a5:fd:
12:b8:c1:dc:77:9c:7a:b9:13:89:08:4b:cd:2b:c9:84:1f:b4:
2e:48:a7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:49:32 2026 by rpki-client