Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
File: hD0a_PE70hF9R99oPkCmMocATP4.mft (raw, json)
Hash identifier: DqGdpVtDmIuIbEG6P+AzJ2NGj4SYkNRpwWlggwiMG9M=
Subject key identifier: 4E:3D:E8:05:C7:D1:7A:B0:AB:98:F3:E8:A0:91:9A:2C:16:6B:86:01
Authority key identifier: 84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
Certificate issuer: /CN=843d1afcf13bd2117d47df683e40a63287004cfe
Certificate serial: 019D9962E397F6372C68C2246FD08DB2FFE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
Manifest number: 156B
Signing time: Fri 17 Apr 2026 03:01:27 +0000
Manifest this update: Fri 17 Apr 2026 03:01:27 +0000
Manifest next update: Sat 18 Apr 2026 03:01:27 +0000
Files and hashes: 1: blJ-TZh-82zY8BmhlGXDYcWlXEM.roa (hash: Fd7qkgfgnAB5yGlcwTOLNMtcHfXu1EK11nyoGzaI4T8=)
2: hD0a_PE70hF9R99oPkCmMocATP4.crl (hash: wjvIdHxfoa/tVYu0Y/MrnCEmROSNvSMROQ7cSfFffRs=)
3: uGcdeOeH2FGE8oSm_emFftbBDBI.roa (hash: K6Jsrsz0fx7XMWqDVYW8cVOMG7U2AmGR+nHljnd4RYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:e3:97:f6:37:2c:68:c2:24:6f:d0:8d:b2:ff:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843d1afcf13bd2117d47df683e40a63287004cfe
Validity
Not Before: Apr 17 03:01:27 2026 GMT
Not After : Apr 18 03:01:27 2026 GMT
Subject: CN=4e3de805c7d17ab0ab98f3e8a0919a2c166b8601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3f:75:a3:a0:ea:5c:60:f9:60:9a:df:05:01:
ec:c8:c5:fe:02:cd:af:b8:74:cc:a9:6e:a7:76:cb:
aa:64:d5:62:79:62:6c:e1:ef:74:60:78:c5:a7:6f:
c9:c3:2a:a7:b2:8f:da:d0:2f:29:3d:ad:23:49:88:
49:69:48:4b:02:4b:c1:d6:e1:f1:c5:a4:67:0e:d6:
bf:10:98:fa:cb:54:c5:d9:ec:1a:bb:4d:33:cc:4f:
68:22:79:e5:32:ac:87:11:ac:e6:88:61:1e:57:8b:
95:af:05:4a:82:25:c8:8e:78:27:f4:56:4e:8f:f2:
ac:9a:eb:1a:9b:67:c7:bc:3c:8e:29:b7:a0:a9:76:
45:2c:ea:0f:b1:c8:e3:23:d9:a3:d8:dd:9f:1b:b9:
44:21:c1:07:65:6f:e6:06:4e:d6:aa:67:aa:09:3a:
e4:5a:94:01:d0:48:ad:43:07:8c:fc:12:68:96:1e:
77:2e:e1:e3:fc:fb:4b:60:1d:58:b7:42:1e:6f:89:
8b:99:ec:13:6b:ef:ae:40:bc:28:0a:5a:d2:e1:f0:
1b:fe:53:62:b6:1b:71:65:d5:d8:c7:c8:84:9b:a7:
d1:66:51:46:c1:6e:8e:10:ee:d7:00:e2:3e:b5:9e:
3b:b6:16:25:54:42:83:53:5e:7a:68:e7:27:67:5d:
37:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3D:E8:05:C7:D1:7A:B0:AB:98:F3:E8:A0:91:9A:2C:16:6B:86:01
X509v3 Authority Key Identifier:
keyid:84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3a:96:f6:7e:25:87:1c:22:19:70:29:97:c5:b7:e8:15:d1:
fa:de:43:cd:72:66:fe:4b:ed:8a:e0:df:55:e9:85:18:da:eb:
d4:20:61:61:73:25:d6:82:9e:09:1e:b7:52:72:d1:42:be:6b:
6b:e8:68:b8:ef:c7:f9:d3:6c:52:aa:d1:cd:d3:6c:ba:a3:7c:
9d:82:42:78:c4:80:8e:cb:f6:a1:7b:64:33:41:3e:e1:58:4a:
d7:43:7a:7a:90:4d:2b:d8:98:e1:98:c0:cc:39:50:cd:28:95:
85:6b:de:9e:63:23:f8:cf:91:6c:aa:4e:0e:f3:d8:eb:ff:6d:
7c:4e:e5:3b:ae:6e:09:6b:46:10:18:c1:71:44:0f:32:57:72:
bb:35:4d:b5:e4:6d:c3:87:4f:fe:d4:ab:21:a5:29:a2:65:e7:
db:1c:c2:f1:8f:bf:3c:9a:d9:24:64:db:b0:3d:e8:84:e5:2b:
5f:0d:fd:79:7d:3b:b2:c3:cf:4e:83:98:f0:9e:0f:60:e3:f5:
d7:5c:a6:7e:33:96:c2:7e:f8:2e:59:77:df:88:3e:74:fe:dd:
b0:2b:03:c7:0c:b9:01:6d:74:1a:7f:be:b8:3c:e6:ce:4b:03:
25:e6:98:a0:91:34:a3:dd:64:f6:01:56:a8:ea:d9:18:82:95:
57:b9:6c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:27:21 2026 by rpki-client