Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
File: hEoXkcsH8dhhI8Y9w63P11TbEBs.mft (raw, json)
Hash identifier: RkgIUJXBeoibfMdtdiAvqi51V0EJ72omp62Gk+0fxpM=
Subject key identifier: 07:53:AE:B2:B8:34:F8:0B:A4:EF:B1:E8:D7:26:D9:C4:32:84:C6:54
Authority key identifier: 84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
Certificate issuer: /CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Certificate serial: 019D9A06DE8BE613C8371D1175BB67304430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
Manifest number: 0CD3
Signing time: Fri 17 Apr 2026 06:00:34 +0000
Manifest this update: Fri 17 Apr 2026 06:00:34 +0000
Manifest next update: Sat 18 Apr 2026 06:00:34 +0000
Files and hashes: 1: EaRvqzzZ4WLrsiOnFG9kIdBFPGo.roa (hash: PN+ow0E5ikp9C/ApCEWcQ9LIaP3NSeY86i0Td9fsxZc=)
2: JuG7AUgythULffPdDYDIoVusgls.roa (hash: TjT7c6XjgFC6qy9Niuuvvzz9Cwlb8UzAUWc3tb4emnE=)
3: hEoXkcsH8dhhI8Y9w63P11TbEBs.crl (hash: 8wMRRx6n5xyW5OLQfPaBVoLJDJMxtnIYkmqqTCR1+tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:de:8b:e6:13:c8:37:1d:11:75:bb:67:30:44:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Validity
Not Before: Apr 17 06:00:34 2026 GMT
Not After : Apr 18 06:00:34 2026 GMT
Subject: CN=0753aeb2b834f80ba4efb1e8d726d9c43284c654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:d8:e8:e2:bc:89:22:be:df:a5:d8:71:57:
9d:0e:72:02:5e:b7:3f:d7:68:16:8a:f8:97:27:d4:
5e:7e:52:97:61:90:21:4b:7e:37:0c:9e:5a:96:27:
73:40:3a:7c:79:3c:2d:96:05:9a:01:21:34:da:e3:
ed:bb:16:ec:3b:4e:a0:85:77:8d:45:51:a7:8c:7c:
61:b5:19:35:57:b0:b8:e3:df:79:3e:5c:88:47:f2:
61:ae:36:4d:91:b3:09:9e:63:50:72:7e:1e:e1:a9:
75:28:44:4b:5a:fa:2a:2b:71:6a:b3:36:ca:c6:32:
4e:37:80:c7:9e:58:c0:d6:46:eb:a5:88:06:4c:53:
a5:f2:20:a2:39:63:f5:2f:f4:36:15:e8:34:1a:5a:
55:89:df:4d:3c:34:c3:6a:f5:a9:88:71:8b:64:d6:
da:ec:78:b6:d9:18:ad:09:9e:bd:d8:92:64:de:d5:
47:ba:8e:f2:31:10:41:a0:d9:5e:bb:78:db:6d:c8:
2c:64:f3:84:10:6b:59:8f:dd:a8:f6:97:cf:a0:e4:
77:dd:a0:dd:c7:ae:8c:bb:2f:00:cd:0a:61:40:45:
50:bc:dd:31:ee:65:21:8d:36:4e:96:52:4f:bb:d1:
b2:55:29:c8:cf:0c:47:de:3b:6f:3c:6f:5d:a9:a5:
ff:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:53:AE:B2:B8:34:F8:0B:A4:EF:B1:E8:D7:26:D9:C4:32:84:C6:54
X509v3 Authority Key Identifier:
keyid:84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5b:f9:8d:9a:94:6f:95:e6:fa:b4:24:84:2e:6a:2c:53:53:
02:0b:04:a0:f9:9f:69:7c:57:b4:8e:ab:67:38:a9:7f:58:39:
cd:b5:7d:6e:91:e5:94:38:f3:b9:77:f5:7d:03:67:73:e9:a5:
d5:cf:0e:5b:9e:b2:1b:27:28:9d:03:91:35:94:5d:df:6c:34:
11:2d:1f:06:5b:9d:f7:f9:25:59:50:e5:bb:d1:60:df:a9:c3:
ae:e2:58:e9:1a:03:12:40:c3:ca:6a:10:f7:2b:02:5c:6f:12:
9e:19:ae:b1:f3:27:82:1d:a7:a9:57:9c:93:a3:6a:21:ed:21:
44:b6:5c:05:fe:7a:de:a8:1d:29:c2:5a:ed:8d:91:7c:3c:98:
ca:81:5c:2e:c5:44:48:0d:aa:95:67:75:3c:fa:d9:e2:f3:96:
cc:fa:a2:47:cb:a9:5b:22:7f:41:e8:19:fd:2a:88:65:3d:69:
35:cb:d9:8e:ea:ed:e4:73:dc:16:2e:43:43:5d:0a:0b:36:63:
7b:fa:0e:11:2e:74:a8:ea:b7:9c:d2:a9:cf:25:10:e3:59:95:
09:32:64:5d:81:0f:4b:28:66:52:3b:1c:f4:af:5f:bd:80:d5:
f1:9a:d0:d6:55:a3:6e:99:b0:0a:e6:6a:3a:05:56:11:f5:f8:
5b:6b:b3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:20 2026 by rpki-client