Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
File: hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft (raw, json)
Hash identifier: j4rBB2S5ESif1izlE6vJVqVIgkRCgRDxvJvO5Gtqr2I=
Subject key identifier: 6D:BC:DD:9F:5F:63:05:02:81:1A:35:F1:B8:C7:E5:67:A3:57:BC:54
Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
Certificate issuer: /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Certificate serial: 019D98190FC5F0AFFB93D4B9606787A29BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
Manifest number: 1896
Signing time: Thu 16 Apr 2026 21:01:12 +0000
Manifest this update: Thu 16 Apr 2026 21:01:12 +0000
Manifest next update: Fri 17 Apr 2026 21:01:12 +0000
Files and hashes: 1: gI4tnW4kPKjRONzlu_6zH8MeB9U.roa (hash: SAYaSp1GRG2E/ye85MqnahXwttShXyHtUuRf8N0xnmI=)
2: hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl (hash: b0rKESj/A7hSnfbT88+W3UeJyIjJYh2j7LB9Y8cJpIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:19:0f:c5:f0:af:fb:93:d4:b9:60:67:87:a2:9b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Validity
Not Before: Apr 16 21:01:12 2026 GMT
Not After : Apr 17 21:01:12 2026 GMT
Subject: CN=6dbcdd9f5f630502811a35f1b8c7e567a357bc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:c7:d8:6e:43:f1:96:3e:f6:40:2d:3b:a6:
8a:58:06:20:70:2a:f9:7c:7b:98:b0:4c:f2:79:41:
a6:86:2a:d2:3f:db:d1:b7:96:36:86:dd:35:a8:d9:
11:ca:76:0c:fd:7e:e1:c3:59:5d:8d:4e:bd:a1:1c:
1e:f4:41:e9:c0:73:4a:70:d9:db:35:38:c7:00:9c:
d3:d3:78:44:61:60:b8:25:d7:a7:fa:1d:9c:54:a8:
59:01:14:5c:57:6b:59:24:35:1a:5f:7a:a9:fe:30:
ec:a3:c9:67:61:39:d5:08:e5:ca:78:4e:d9:0d:5c:
c4:a7:5e:77:2e:06:72:ec:5b:a2:39:7d:7d:1a:cc:
ad:95:3e:d1:ba:5c:cf:91:1d:ea:0f:67:ae:d6:5d:
45:3e:cb:8a:f9:44:92:53:b9:3a:7d:b2:5d:83:7b:
3b:ce:26:2a:90:23:5d:f7:c2:1c:44:57:97:e3:7f:
75:67:fc:cf:55:e6:37:f9:3b:93:d9:d9:d5:cb:be:
81:f6:7a:2a:78:4b:84:1b:3d:6f:9b:b6:f6:58:f8:
7b:bc:25:14:bb:43:87:73:b0:57:5a:cc:74:e6:17:
42:34:5c:07:d2:10:3d:70:68:8f:f3:4e:fc:2e:30:
ae:55:72:96:da:8b:5a:0d:43:2a:ef:cc:db:50:77:
65:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BC:DD:9F:5F:63:05:02:81:1A:35:F1:B8:C7:E5:67:A3:57:BC:54
X509v3 Authority Key Identifier:
keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a4:17:5b:8d:e1:ea:cd:4c:42:8f:82:de:de:74:9c:71:70:
32:1a:48:df:57:02:0e:9a:34:e1:5e:02:9a:6f:94:80:c1:93:
57:71:a7:78:36:5e:a6:15:3d:b5:ad:95:0c:83:99:fa:b3:78:
3d:a7:98:29:15:70:f1:da:df:32:ed:78:7e:cf:7e:fd:ef:38:
99:61:95:fb:8e:95:1e:40:22:88:f1:76:56:96:ee:e6:f3:7f:
30:d6:22:80:fe:18:71:c0:fd:67:a4:e6:de:c7:69:82:4d:5a:
70:12:fa:b0:a6:ab:69:a3:e9:94:f7:34:c4:41:c5:33:c5:a0:
b4:45:0a:7a:b2:60:d6:e2:bd:37:aa:85:eb:df:96:0c:e8:43:
a7:84:43:6c:a5:88:33:a9:5e:72:b1:b4:82:27:ed:89:19:7e:
c0:3f:26:9f:d1:b0:6a:c5:9e:ed:cb:6b:b0:40:c9:83:d0:e6:
24:fe:d1:d3:0a:ee:5f:b9:58:d5:76:ab:f6:f7:be:ef:e4:04:
c5:54:9d:2a:54:25:1f:84:3e:e9:3c:17:b5:68:78:4c:2f:0e:
01:f6:a2:3e:f7:fd:3b:a6:d0:1d:87:6a:33:5a:7b:36:da:e5:
ec:b7:dd:f5:f9:25:c9:66:61:53:ce:d2:fc:e3:2a:d0:d9:bf:
8a:fe:33:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:25 2026 by rpki-client