Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
File: rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json)
Hash identifier: XDVfIB/vyoeUJtEPhpZDXnaCTgbztX2Dgt/rKGFDgnw=
Subject key identifier: 36:77:E6:41:15:D1:AF:D6:39:3C:70:2C:F3:DE:93:D2:77:EF:C9:39
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 019D9DE41390C3F6E9682F07D5234A950EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
Manifest number: 12C8
Signing time: Sat 18 Apr 2026 00:01:03 +0000
Manifest this update: Sat 18 Apr 2026 00:01:03 +0000
Manifest next update: Sun 19 Apr 2026 00:01:03 +0000
Files and hashes: 1: ETi6rBv0jmHDZMdhavHXc91w57c.roa (hash: dIyT+dh+7DYUIlNnbK/CAN49jDHLvDXQ+GqXfT4OXIo=)
2: PvyjMnxxCs-iD8nNqvgJP0qyjY8.roa (hash: 7iRXsmizHd8Z7h/cdyZGhXFEz1E/csMcQ5uEyt4e7f8=)
3: iIFXLBXRyhHRxODZud1xrElh64s.roa (hash: AExhCYGcQMhNtoiQSq64xmFEgJgvDNV9lYLc/Z+6mC0=)
4: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: rM7JyHCVrML/ExGoyU2q8x7N7F8uuDwKInet1tlD9qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e4:13:90:c3:f6:e9:68:2f:07:d5:23:4a:95:0e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: Apr 18 00:01:03 2026 GMT
Not After : Apr 19 00:01:03 2026 GMT
Subject: CN=3677e64115d1afd6393c702cf3de93d277efc939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3e:d7:8b:f9:f6:52:c2:1b:e6:39:5a:18:67:
de:ab:18:2b:78:bf:9e:a7:a1:29:a6:70:c2:ce:e3:
44:e2:3c:0e:b4:37:28:9d:dd:57:93:e2:bd:0f:1c:
dd:7b:1c:2f:5b:9a:6c:f5:0d:62:d0:92:c3:0a:23:
f7:58:49:09:8e:71:c7:9e:a8:ff:ea:09:38:25:48:
11:03:30:18:57:4a:6d:b5:18:27:23:d6:e1:6b:93:
67:e4:07:8f:4d:23:b4:8c:e6:43:a5:e5:57:a7:aa:
6b:0d:42:88:cf:07:6f:57:95:c0:46:80:fe:29:ca:
7c:d1:30:ac:c3:e6:8d:a5:21:17:bf:ab:e1:ce:f5:
59:f9:08:b7:7c:59:d3:3b:e5:f1:92:b9:c8:2d:f5:
e5:5e:fe:bf:46:ac:a9:19:4b:c9:e3:ab:45:71:f3:
da:57:83:cc:c3:80:44:71:41:c1:da:df:74:22:9a:
8b:98:89:19:48:8f:48:47:f5:68:f3:8e:8f:13:01:
da:3f:40:40:76:5e:e5:2c:37:bd:42:11:43:67:8d:
46:b6:74:4d:0b:3a:65:56:29:1f:8a:61:11:e8:0b:
ef:27:66:24:67:92:a3:c0:26:eb:83:95:ce:0d:b7:
75:b9:3a:1a:2c:49:bc:47:99:f5:0a:df:17:12:d1:
a0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:77:E6:41:15:D1:AF:D6:39:3C:70:2C:F3:DE:93:D2:77:EF:C9:39
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:94:03:de:26:aa:b3:99:1a:81:69:69:fd:61:da:67:c6:8e:
73:67:9f:6a:a6:ad:5a:24:f7:2e:f6:ab:88:e9:c7:eb:3e:1d:
70:47:f2:80:ac:0f:0b:16:71:04:ae:d4:59:67:fa:91:17:6c:
81:e4:ec:d7:08:8f:17:bc:dc:00:b8:14:12:35:f7:97:ad:b3:
fe:bf:76:87:e4:7d:a0:e0:3d:19:87:11:ac:61:98:b7:27:9b:
21:67:67:c1:86:d6:05:4d:73:b2:91:47:24:1c:63:22:c1:e3:
eb:94:9b:46:2d:b1:7b:68:98:32:50:e1:0a:61:36:10:21:63:
77:db:c9:e9:56:38:20:26:6f:ae:57:37:c3:e0:2d:e9:eb:14:
85:0d:4b:1a:df:63:8d:73:6b:63:47:aa:8d:7f:26:7e:06:49:
2f:17:cd:a9:0a:e0:89:a0:78:05:d9:16:f4:04:c7:fc:94:c2:
64:5e:eb:a7:2b:49:8a:f1:07:08:74:69:e8:cf:ee:05:58:12:
cc:25:ec:2e:09:96:0e:05:42:93:08:a6:1f:90:48:0f:fb:2e:
b4:91:20:e0:ff:50:fa:37:29:08:c7:e5:77:62:e4:92:9f:4e:
7a:fd:bf:ab:6c:4d:9a:29:f4:c0:42:c3:c5:f1:db:dd:5f:4b:
27:cd:ba:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:35:53 2026 by rpki-client