Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
File: rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json)
Hash identifier: nXYDptyeGriR3BfPYenq7tKeiQCDn5qghzBoswhIgnU=
Subject key identifier: E0:B3:7B:60:16:57:42:A4:8D:58:46:3F:1D:E0:56:A0:4D:02:F6:90
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 019D9BF50BC8C8792B0B212FE8A4CD9B5B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
Manifest number: 12C7
Signing time: Fri 17 Apr 2026 15:00:20 +0000
Manifest this update: Fri 17 Apr 2026 15:00:20 +0000
Manifest next update: Sat 18 Apr 2026 15:00:20 +0000
Files and hashes: 1: ETi6rBv0jmHDZMdhavHXc91w57c.roa (hash: dIyT+dh+7DYUIlNnbK/CAN49jDHLvDXQ+GqXfT4OXIo=)
2: PvyjMnxxCs-iD8nNqvgJP0qyjY8.roa (hash: 7iRXsmizHd8Z7h/cdyZGhXFEz1E/csMcQ5uEyt4e7f8=)
3: iIFXLBXRyhHRxODZud1xrElh64s.roa (hash: AExhCYGcQMhNtoiQSq64xmFEgJgvDNV9lYLc/Z+6mC0=)
4: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: XWGYTcspv+QiL/gPJU8QHKL0fLRtLYGbZ8Pq67TKDSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:0b:c8:c8:79:2b:0b:21:2f:e8:a4:cd:9b:5b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: Apr 17 15:00:20 2026 GMT
Not After : Apr 18 15:00:20 2026 GMT
Subject: CN=e0b37b60165742a48d58463f1de056a04d02f690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:37:9c:e8:68:d8:30:16:e5:94:d9:42:52:
c9:67:c5:08:7b:91:f8:55:3a:1a:43:35:4b:30:9e:
db:46:a9:8b:ee:26:50:80:9d:f4:35:41:3c:34:bd:
56:da:4d:e9:5b:95:38:2e:4a:48:72:fe:b9:f5:0e:
f9:68:bd:b3:1d:49:66:55:04:33:97:45:ce:56:56:
e6:d0:39:45:0d:32:3f:3f:4d:3c:21:a1:25:8a:84:
56:3c:f2:1c:f0:21:0c:53:37:ac:78:cc:80:1f:f5:
9d:a9:bd:21:be:a3:4b:13:50:89:80:b8:14:22:c5:
83:8c:1b:98:67:d7:b9:06:d8:c3:16:29:f2:2d:ff:
33:f5:57:ea:bc:0e:99:55:2e:c4:fb:31:13:ec:b0:
02:79:aa:d3:7f:46:c6:6b:5f:03:11:1d:aa:1e:a2:
88:0e:0a:65:3e:32:fe:cd:f5:15:81:6d:4c:26:d1:
66:05:b1:dd:5f:01:ad:ad:ea:5b:75:f8:b1:71:2c:
07:52:47:22:94:46:a5:b7:28:74:ed:df:c6:98:87:
b8:24:cb:a1:0e:8e:54:2b:45:a7:0f:7c:55:72:aa:
46:6d:72:ac:08:09:85:cf:df:16:e0:f3:07:a0:47:
ca:15:32:67:ac:6b:c7:57:20:78:0d:63:5d:13:70:
57:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B3:7B:60:16:57:42:A4:8D:58:46:3F:1D:E0:56:A0:4D:02:F6:90
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d2:87:85:6c:f2:13:14:3f:88:55:db:6e:81:20:72:a9:69:
39:9a:5d:5f:a7:d6:c4:80:6d:18:2f:c0:16:50:e7:c0:0c:d5:
8b:c8:d2:77:2e:96:a0:ab:40:ed:c7:da:26:07:a1:cd:8f:4d:
f0:a9:21:f6:02:ba:00:a2:3a:76:b0:c4:fe:67:f7:14:a7:19:
36:d2:9c:f2:f8:9a:a8:7c:3a:e6:45:c1:23:32:71:a9:59:6e:
da:b8:73:1e:ca:f7:5d:ed:73:06:11:41:d2:9a:cd:b4:ec:79:
51:49:2c:4f:e7:30:57:c0:13:07:36:4a:61:65:1c:5f:fb:2c:
7d:95:10:a6:e1:9b:43:53:4a:28:34:80:f5:10:40:68:4c:07:
df:96:1e:47:6a:83:1c:4c:30:81:ad:13:b7:3f:5a:f8:0a:56:
6a:4a:d4:15:fc:e8:59:92:d3:f1:ec:bd:f5:93:6e:98:24:0b:
6e:c3:d6:ce:4f:f0:1a:8d:71:06:fa:b6:35:cf:04:b5:58:ba:
c7:f3:ee:9e:5c:5e:3a:6a:2a:d9:14:90:4f:bb:5e:1e:62:04:
39:e9:a1:63:66:8a:64:62:06:0b:1d:ad:e6:b3:ef:12:9d:8d:
a9:83:6b:de:a7:2b:44:67:56:37:6e:1e:10:bd:85:32:45:5d:
19:14:e8:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9QvIyHkrCyEv6KTNm1sNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNzY3MDY5OGNmYWVmMjY0N2ZiYzlhMDZmNzM4MDg1NmUy
YjMwMjcwHhcNMjYwNDE3MTUwMDIwWhcNMjYwNDE4MTUwMDIwWjAzMTEwLwYDVQQD
EyhlMGIzN2I2MDE2NTc0MmE0OGQ1ODQ2M2YxZGUwNTZhMDRkMDJmNjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtU3nOho2DAW5ZTZQlLJZ8UIe5H4
VToaQzVLMJ7bRqmL7iZQgJ30NUE8NL1W2k3pW5U4LkpIcv659Q75aL2zHUlmVQQz
l0XOVlbm0DlFDTI/P008IaElioRWPPIc8CEMUzeseMyAH/Wdqb0hvqNLE1CJgLgU
IsWDjBuYZ9e5BtjDFinyLf8z9VfqvA6ZVS7E+zET7LACearTf0bGa18DER2qHqKI
DgplPjL+zfUVgW1MJtFmBbHdXwGtrepbdfixcSwHUkcilEaltyh07d/GmIe4JMuh
Do5UK0WnD3xVcqpGbXKsCAmFz98W4PMHoEfKFTJnrGvHVyB4DWNdE3BXHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCze2AWV0KkjVhGPx3gVqBNAvaQMB8GA1UdIwQY
MBaAFKx2cGmM+u8mR/vJoG9zgIVuKzAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82OGY2NTEtZjNhNi00MjUyLTlmYWYt
OWUwNDQwOTJiODI2LzEvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82OGY2NTEtZjNhNi00MjUyLTlmYWYtOWUwNDQwOTJiODI2
LzEvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNKHhWzy
ExQ/iFXbboEgcqlpOZpdX6fWxIBtGC/AFlDnwAzVi8jSdy6WoKtA7cfaJgehzY9N
8Kkh9gK6AKI6drDE/mf3FKcZNtKc8viaqHw65kXBIzJxqVlu2rhzHsr3Xe1zBhFB
0prNtOx5UUksT+cwV8ATBzZKYWUcX/ssfZUQpuGbQ1NKKDSA9RBAaEwH35YeR2qD
HEwwga0Ttz9a+ApWakrUFfzoWZLT8ey99ZNumCQLbsPWzk/wGo1xBvq2Nc8EtVi6
x/PunlxeOmoq2RSQT7teHmIEOemhY2aKZGIGCx2t5rPvEp2NqYNr3qcrRGdWN24e
EL2FMkVdGRTo3w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:19:28 2026 by rpki-client