Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
File: DHiHWC2D0_CHaCr4eAoySjU854I.mft (raw, json)
Hash identifier: izkhOBMINakstYIGSVekzqxzSTTxk76axBfdtibWLp0=
Subject key identifier: DB:FA:76:AC:64:43:67:10:D6:30:DC:41:32:50:E3:BD:83:95:AA:D0
Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
Certificate issuer: /CN=0c7887582d83d3f087682af8780a324a353ce782
Certificate serial: 019D98F4E5E17FE21894180EA370ACA7B7CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
Manifest number: 04A9
Signing time: Fri 17 Apr 2026 01:01:19 +0000
Manifest this update: Fri 17 Apr 2026 01:01:19 +0000
Manifest next update: Sat 18 Apr 2026 01:01:19 +0000
Files and hashes: 1: DHiHWC2D0_CHaCr4eAoySjU854I.crl (hash: jhNvAO52PSF2WW76nuIBTE69WQeUprtdHSQdUMzoXlY=)
2: QSS55y_l3Gt0c8stWJWOK_nOGJE.roa (hash: sZpfsqBsL2z+jJ162ImPEwneGDPeOqBNZft5KqaSHfU=)
3: YWNDZTTIZoOnHoDXi9E6DGlDlqY.roa (hash: aIUQvaxY70pNpKSk5tmYluexw6bkZHt2gtc/Ueg8vRM=)
4: e1MeXi5jGEx2ghjXy4K7UMFk3kU.roa (hash: oPguTsrx3a7ULwz315fIeupuRdabV/wQF9vZA3Lwhi8=)
5: wF4dYnSli8MvKSkaalmJxK3BUuE.roa (hash: bRgCLzwSPr+zj8E46tEdf2riioRemK4V+6Zr2lWh/tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:e5:e1:7f:e2:18:94:18:0e:a3:70:ac:a7:b7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782
Validity
Not Before: Apr 17 01:01:19 2026 GMT
Not After : Apr 18 01:01:19 2026 GMT
Subject: CN=dbfa76ac64436710d630dc413250e3bd8395aad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:91:52:74:24:54:82:38:1a:37:b1:ad:b6:
91:c8:20:ce:3e:3e:3b:7e:d4:21:00:d6:f8:b8:0b:
71:26:be:f1:98:77:55:6f:0f:83:f5:20:ee:a1:dd:
5e:23:b9:f0:af:f3:fe:98:fa:d7:6b:9d:65:c4:42:
49:4b:29:1d:17:32:56:fa:95:66:ac:a4:9e:9a:12:
87:3c:ee:31:71:52:ec:4b:6b:16:5e:f4:45:a2:95:
40:f8:38:37:84:84:36:81:c6:77:24:c8:51:80:80:
64:f7:af:ef:93:25:60:1c:ca:35:e5:67:20:b1:06:
6d:a4:98:4b:cc:b9:a4:a0:b6:3f:01:ad:a8:06:04:
4a:88:c2:25:15:1d:55:96:3c:06:8f:19:7e:8a:0a:
d0:03:2d:78:f7:e5:c2:04:9e:87:48:65:21:0a:8c:
90:5e:b1:90:6e:59:f9:63:d9:28:ae:31:3b:3f:f6:
5a:ec:a1:82:2e:4c:a8:43:e5:05:31:55:80:7b:4e:
e4:48:74:f9:97:2c:08:9c:ae:6e:64:1b:5a:e0:70:
0b:18:2f:ef:55:ce:04:f7:4a:cf:86:9e:52:13:18:
72:18:16:fd:3f:68:27:76:cd:15:35:f5:cc:5e:2b:
20:63:66:ef:1b:cf:1b:e7:5a:21:8e:c2:b1:ae:9d:
6a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FA:76:AC:64:43:67:10:D6:30:DC:41:32:50:E3:BD:83:95:AA:D0
X509v3 Authority Key Identifier:
keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:12:2b:5d:4f:bc:14:36:5b:3a:a1:9d:12:04:79:64:84:eb:
76:de:ef:e4:66:5c:0c:16:f7:71:a9:92:bf:66:80:d8:db:58:
2b:41:57:04:94:6b:09:31:8c:e2:13:21:91:d9:95:b6:08:8f:
61:f2:30:93:30:e1:ba:28:f8:de:9f:3b:29:bd:40:55:34:28:
e8:69:37:4e:a9:3f:c8:ce:64:29:b4:03:ae:2c:ea:2f:8a:b8:
03:9f:4b:d5:f6:d4:8b:b1:0e:f2:a0:4f:75:e3:2d:e8:87:12:
a3:68:5c:bd:d5:83:d6:d7:23:33:12:51:0c:a8:5d:3e:7c:e4:
b0:89:62:41:f3:a2:ce:41:5c:e1:9e:54:b9:44:b1:85:3b:2d:
2d:31:45:82:2d:30:20:ba:fc:cb:9a:53:cc:31:7c:51:94:e6:
d6:8d:44:49:86:0b:7d:3c:4e:35:f0:9c:c2:23:37:2d:08:b6:
1c:c6:84:c7:99:18:bf:14:c4:63:01:c7:a0:8a:4d:34:37:21:
e3:1c:69:fd:61:ed:86:71:bd:e4:2a:f7:2a:f1:eb:15:17:e3:
86:01:8f:db:d5:a2:48:a2:45:43:c6:01:19:60:01:9b:9c:d5:
cc:64:46:a5:85:4a:3c:71:80:95:51:a0:eb:78:fe:dd:33:6d:
7c:1c:b4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:54 2026 by rpki-client