Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
File: h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft (raw, json)
Hash identifier: hjOj0DDbm6hLDbF7eIdgpI9yioOZvu8mTmsDg2+hsk0=
Subject key identifier: D1:91:34:9D:C1:31:27:35:87:7B:07:F2:4A:9E:54:CF:EB:A2:B7:B2
Authority key identifier: 87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
Certificate issuer: /CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Certificate serial: 019D9A06FFE812440C79380100C3E091E65C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
Manifest number: 1236
Signing time: Fri 17 Apr 2026 06:00:42 +0000
Manifest this update: Fri 17 Apr 2026 06:00:42 +0000
Manifest next update: Sat 18 Apr 2026 06:00:42 +0000
Files and hashes: 1: 4fVpw4jDmLgLlVEJ14HcYjkhURc.roa (hash: OgxhauoTFqD32kP7fqq3sMCVlZur9FHQRJ/kNIVIhFQ=)
2: h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl (hash: UYlkH/Mtg2+ChWWrkHa8/oO5QLNth8beqNqLkFT9k1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:ff:e8:12:44:0c:79:38:01:00:c3:e0:91:e6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Validity
Not Before: Apr 17 06:00:42 2026 GMT
Not After : Apr 18 06:00:42 2026 GMT
Subject: CN=d191349dc1312735877b07f24a9e54cfeba2b7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:78:7b:a6:11:a8:63:84:54:e1:50:10:26:bd:
1f:24:5e:42:9c:37:f0:63:dd:28:06:db:4c:47:2a:
29:d6:ec:01:01:31:01:ad:63:62:8a:ca:ac:03:04:
16:d0:a8:e7:7a:7e:1c:2a:78:e6:a0:80:90:5f:55:
f4:67:07:95:e1:f2:0a:46:25:69:a1:79:d4:9b:7e:
d5:cd:3a:4f:39:10:24:90:98:9d:5c:af:fc:7a:07:
61:9b:14:f6:9c:8f:c9:4e:68:a6:d3:1f:cf:6d:c9:
1c:a3:37:94:ce:af:78:4b:80:4b:57:d6:d4:7d:8d:
2f:03:9b:d6:16:c9:ab:b3:d5:60:8a:ce:6a:34:61:
80:66:4b:55:05:81:15:d0:66:00:e4:2c:93:34:69:
6b:03:d1:2b:8b:c9:84:9c:2f:88:2e:f5:b9:10:1a:
4b:fe:7c:9c:2d:6d:dc:57:d1:2b:5f:f7:e0:3e:16:
f1:05:21:0c:37:cf:86:00:3a:9e:85:0e:b0:08:3e:
69:ed:a2:ca:0d:b9:9f:26:36:1c:8c:f2:35:ac:a1:
3b:4f:bc:46:a2:46:43:1d:8c:27:36:f4:07:33:2a:
20:ad:a5:e8:a6:81:f9:ff:51:c1:7c:0f:f0:31:85:
ad:58:cf:5b:4f:4e:86:11:33:18:5b:d6:0d:f5:5f:
03:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:91:34:9D:C1:31:27:35:87:7B:07:F2:4A:9E:54:CF:EB:A2:B7:B2
X509v3 Authority Key Identifier:
keyid:87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a9:ce:c2:2c:23:87:6f:ab:45:06:d3:ff:6e:88:b5:a1:b8:
29:ef:ab:6d:f9:cb:c6:82:cb:0c:23:d7:d7:43:de:e4:92:70:
38:3c:30:76:cb:8b:4b:01:cb:05:b8:b4:c3:c0:3e:b5:93:26:
c3:32:90:bd:37:9f:36:4a:80:72:b1:88:41:e5:bb:8b:e6:43:
e2:df:60:bf:50:5f:38:90:f0:04:d0:06:93:fe:86:0a:a7:a3:
a1:da:23:e6:6c:91:d8:3a:71:23:77:ec:43:27:1b:e5:d6:f6:
09:eb:09:72:0c:2d:b2:98:c5:62:41:aa:21:36:bb:3c:5d:39:
4c:13:8a:e6:fc:62:19:26:e9:e9:5b:aa:c7:65:b2:d6:bb:81:
b2:72:86:f7:f3:3c:32:64:0d:fb:a4:cb:39:16:2f:59:45:07:
d0:e9:b7:1a:a5:4e:b3:df:f5:b9:bb:cb:0c:51:ee:42:72:fa:
b3:17:c6:08:6f:64:0e:e2:2b:38:0f:f9:aa:dd:e2:54:da:96:
d8:39:be:22:35:3b:cc:dc:b0:b3:9a:28:d6:fc:12:e2:74:3c:
18:85:a4:fe:87:0d:20:97:7a:85:fe:fa:0e:c6:ac:54:58:62:
a1:29:9e:52:34:90:2a:8e:8c:a8:19:1c:b9:07:93:8b:f1:91:
14:8f:17:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:06:53 2026 by rpki-client