Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: /It6bs1JHC2W8ZTV3sxy8flKqC3rJV11pRnu4H64dtM=
Subject key identifier: ED:AC:A8:06:65:14:84:95:74:A6:93:A4:C9:1D:90:FC:A8:5A:A0:0B
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 019D981875DDCBC1531C89A714979A2751AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 1137
Signing time: Thu 16 Apr 2026 21:00:32 +0000
Manifest this update: Thu 16 Apr 2026 21:00:32 +0000
Manifest next update: Fri 17 Apr 2026 21:00:32 +0000
Files and hashes: 1: SvxwS_lV784DW9bPgSuJYXAnLY4.roa (hash: cRLgycuUHIOemfVnKATCpToT+Luf3V15E0LKGchaIIs=)
2: TfDpwnkDY9DTlAsJc9Iqnduzj8A.roa (hash: XbrnUGWje15/NR9HfumBox3YZkdHMNSMKy7Az9ObxUM=)
3: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: guHnDVpxePm5p36YzTDVMiXc+tr/wx46fg6QxmoYUMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:75:dd:cb:c1:53:1c:89:a7:14:97:9a:27:51:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Apr 16 21:00:32 2026 GMT
Not After : Apr 17 21:00:32 2026 GMT
Subject: CN=edaca8066514849574a693a4c91d90fca85aa00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:24:40:69:07:a1:69:3d:22:99:ef:72:af:
ec:d6:c3:8e:14:1f:c7:05:d3:6c:e9:dc:06:3d:76:
fc:93:b5:06:d5:aa:32:6b:65:03:ed:0a:9c:45:b8:
a9:9b:ee:ce:88:bc:8e:04:31:9d:72:5c:ee:c2:6f:
fa:22:a4:11:d7:bc:d4:2d:f4:14:25:2d:00:a3:6b:
5a:6f:2b:dc:c5:d8:03:64:b4:6c:9b:bc:d9:48:78:
85:22:7d:72:b8:79:60:ca:1c:5a:cd:fe:e9:1b:39:
3f:5e:04:c5:10:28:35:0f:ea:f1:e7:dd:b8:a7:8a:
4d:e2:73:7e:c3:fa:ca:dd:c0:9c:96:b2:b8:5d:a7:
e1:97:75:7a:66:2e:61:df:dd:c9:28:2d:ac:9d:fc:
13:f7:b4:ba:2b:6f:33:12:7f:83:3c:12:62:9a:c2:
68:58:28:e1:2e:9e:d3:96:56:08:ba:a9:61:0d:dc:
a1:f6:58:05:3d:2f:0c:e2:8e:e0:a8:a9:3e:70:f6:
cf:05:cd:93:3c:09:9c:b7:39:b9:39:de:b5:5e:16:
6b:ab:cf:ad:d4:71:51:73:ea:70:59:d3:cc:06:43:
7a:42:88:58:df:2e:e6:ba:a9:f8:68:af:04:15:45:
56:21:04:84:95:51:23:e0:55:3b:17:30:66:54:ab:
db:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AC:A8:06:65:14:84:95:74:A6:93:A4:C9:1D:90:FC:A8:5A:A0:0B
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:89:14:2b:13:41:e9:6c:ea:6a:61:8c:ca:da:74:cc:4f:12:
ea:1b:d7:9a:8b:35:4e:28:cb:bd:eb:07:10:5d:29:01:8b:26:
72:24:d8:2c:ad:ca:71:17:89:c4:0d:7b:b1:75:9d:77:9f:35:
b7:53:fe:0c:92:24:fb:49:31:89:7e:2a:0f:6f:ee:bd:4f:c7:
ad:aa:c1:ab:ba:b0:0f:3a:70:4c:0a:1c:86:40:cf:dc:c1:a3:
09:24:3b:32:57:b2:85:7d:28:5f:48:e1:c3:c3:88:d1:58:d7:
01:49:17:41:26:b1:82:4c:d3:ff:77:30:62:dc:28:a2:65:8c:
97:bc:3b:78:4c:2b:13:0c:29:46:1d:5a:a0:2b:0d:88:62:48:
42:42:cf:ef:62:f5:0b:6a:e4:d2:22:ae:d6:d9:3f:6c:92:c6:
a6:20:97:08:7e:eb:5f:05:ba:ba:2f:b5:d1:0a:ea:c5:58:c6:
15:07:df:34:1e:d7:2a:97:0a:cc:08:56:1f:fb:ee:95:ea:b9:
11:99:8a:12:a0:ad:26:20:a8:b7:8c:40:4a:14:46:12:1f:88:
f2:1f:b5:cd:f7:d7:c7:55:8f:04:4e:67:d8:1d:2f:58:ab:6a:
35:2a:97:7e:dc:37:f6:52:05:2b:6c:92:e4:4f:aa:f5:3a:e9:
40:ef:4f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:38 2026 by rpki-client