Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
File: hFwjee_tEAVs-GXVLDLh4euowUA.mft (raw, json)
Hash identifier: MCuTsg+mL8TgfArs05k2/DnaC6EqyMaDXEieI3f/ovI=
Subject key identifier: 50:8C:65:B6:59:FF:9B:14:F5:2C:30:44:9C:1F:8A:BF:D9:39:BC:D1
Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
Certificate issuer: /CN=845c2379efed10056cf865d52c32e1e1eba8c140
Certificate serial: 019DA453B727AD135CE22E30B0CE98D802A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
Manifest number: 1906
Signing time: Sun 19 Apr 2026 06:00:42 +0000
Manifest this update: Sun 19 Apr 2026 06:00:42 +0000
Manifest next update: Mon 20 Apr 2026 06:00:42 +0000
Files and hashes: 1: 1cB9lohxPvW0aZ8d9tUcZB_hbpA.roa (hash: ZGgmXtZjF6LTHZxN99Ge2atwtWdo2BL+hrKZeJQ6mA4=)
2: RX1r4Qs7sshSi_fFORl-RS8ke2U.roa (hash: 3LSqgK+dEpd1mR7mki06tDkI20cS2e3t1p5igEow5no=)
3: cl4xGAEEhr0atOkS-M875z9YeH4.roa (hash: KmImRnh0KgE+zH9nTs3NJvmrEfwkRWLYqjzje40ykHY=)
4: hFwjee_tEAVs-GXVLDLh4euowUA.crl (hash: OgvcxYF1AQUAILy37HorrD5NurZnj0sTAI+7f7qZ0SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:b7:27:ad:13:5c:e2:2e:30:b0:ce:98:d8:02:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140
Validity
Not Before: Apr 19 06:00:42 2026 GMT
Not After : Apr 20 06:00:42 2026 GMT
Subject: CN=508c65b659ff9b14f52c30449c1f8abfd939bcd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:ae:07:d5:d9:e3:ea:13:e0:b9:41:29:0e:
94:ad:30:48:95:0e:2d:6a:38:13:d4:51:47:c9:d6:
69:d6:e3:24:e2:4b:a3:6a:5f:4c:37:a7:96:df:99:
ec:e8:10:2f:83:d7:1f:76:b2:54:cf:aa:4f:7e:17:
48:c6:80:b7:c0:07:7f:68:ab:51:d5:7e:90:08:0d:
13:a1:6a:aa:8e:7d:00:17:50:c3:da:ce:ff:ca:b5:
c2:43:a2:6c:7f:11:94:f5:9b:4c:c9:5b:04:e8:f2:
30:b0:77:e3:4d:45:a9:2f:f2:fd:16:c8:02:53:c4:
a2:1f:c5:15:9a:c5:af:73:07:0d:81:31:13:b0:e9:
1e:b2:cc:55:56:d9:d6:f0:92:05:69:21:7e:4e:1f:
64:38:f0:b2:a9:2e:a1:29:44:03:23:d2:82:90:ed:
81:5f:70:dd:55:61:2b:a1:8c:18:58:86:d1:e5:14:
bc:8a:ab:94:3c:0a:00:1e:ee:7d:3c:44:8b:09:cb:
93:03:85:e4:fa:b9:9c:9b:7c:9e:ce:31:44:4e:b5:
08:4c:a5:93:a7:ee:0a:ea:a3:5b:55:75:1b:33:8f:
a0:2f:d2:9b:0b:c6:73:e2:25:c1:97:c0:c5:0c:e2:
ef:e4:73:ef:25:ca:8a:0b:35:e9:88:f9:0e:c5:9c:
99:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8C:65:B6:59:FF:9B:14:F5:2C:30:44:9C:1F:8A:BF:D9:39:BC:D1
X509v3 Authority Key Identifier:
keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:5a:bd:7b:1a:06:82:b7:b5:ed:c7:7d:f3:df:a5:71:27:90:
e6:6d:0a:62:d6:54:ed:e9:7e:6c:c7:03:02:0f:0e:0e:39:a5:
a8:2e:2c:07:f3:f5:79:ed:96:16:bc:11:dc:1f:74:72:3d:17:
61:7c:9a:d5:d5:59:e2:a7:55:9b:5f:e6:d0:c3:65:c9:e7:2c:
c9:6e:49:a4:7a:6a:a1:32:36:2f:b6:93:76:00:df:4c:d0:52:
35:a0:36:6e:3c:af:c9:60:f3:69:26:81:51:c8:42:3e:b0:8e:
2d:de:90:18:a7:12:d5:b4:63:5f:01:f2:fb:2f:9e:8a:37:f2:
26:a0:dc:d5:d7:95:28:43:1f:ad:35:66:af:41:66:cc:44:86:
64:c5:6c:30:9b:6c:4f:02:b6:d7:c8:f1:37:ca:83:f2:8f:c6:
3b:79:64:5b:fb:58:2a:46:9b:07:69:4d:97:bb:3c:34:14:dd:
76:e8:2a:38:16:3a:78:b4:7a:c9:68:6f:75:5e:25:94:f7:d6:
26:bb:8e:b7:cd:39:82:6b:aa:96:78:84:2a:71:ec:52:26:49:
cf:1f:40:e5:82:df:1a:73:9e:d6:d0:95:0e:76:6d:57:d6:24:
ce:18:c8:64:e6:00:2e:04:09:96:0c:6f:b1:55:7a:d5:3f:e8:
5e:a7:63:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:12:09 2026 by rpki-client