Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
File: H9e7sd5oCd9_blc_mrtk5gNhPKE.mft (raw, json)
Hash identifier: O5778a1TLQpsnPnSIkPsxXmQ2YwwBYcRE/mZLsJKZMU=
Subject key identifier: DD:10:A6:35:E1:EC:AF:39:5D:4D:03:A8:D6:21:72:CA:59:3F:54:CB
Authority key identifier: 1F:D7:BB:B1:DE:68:09:DF:7F:6E:57:3F:9A:BB:64:E6:03:61:3C:A1
Certificate issuer: /CN=1fd7bbb1de6809df7f6e573f9abb64e603613ca1
Certificate serial: 019DA4C1CBCCF0831464EACE37FACCFBC74B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
Manifest number: 18CB
Signing time: Sun 19 Apr 2026 08:00:57 +0000
Manifest this update: Sun 19 Apr 2026 08:00:57 +0000
Manifest next update: Mon 20 Apr 2026 08:00:57 +0000
Files and hashes: 1: H9e7sd5oCd9_blc_mrtk5gNhPKE.crl (hash: 5nelBqnLFktS/C3v6xpXIjMmxPp/wYrL0JomJ6RLQx4=)
2: VUBqDVSTc9X33Ru22fhohdoill4.roa (hash: xLZ5Laa/gOttFf8mokrurIU7caX1O/u8RDHEevdtn0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:cb:cc:f0:83:14:64:ea:ce:37:fa:cc:fb:c7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd7bbb1de6809df7f6e573f9abb64e603613ca1
Validity
Not Before: Apr 19 08:00:57 2026 GMT
Not After : Apr 20 08:00:57 2026 GMT
Subject: CN=dd10a635e1ecaf395d4d03a8d62172ca593f54cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:a1:e7:b8:97:0e:61:4a:74:7a:89:7f:c8:
78:05:b6:9c:5b:c3:4b:8c:be:0d:d2:31:ad:c0:1f:
f3:b7:34:1d:37:29:cc:ee:21:69:b9:fb:60:07:e5:
8f:74:ad:cc:b7:7c:21:75:43:58:29:b0:a6:4a:b9:
23:08:c9:09:a4:0d:8f:94:66:61:0f:fa:29:e2:23:
60:b6:a1:2d:61:d1:83:d3:97:b1:7b:3e:c1:43:41:
1e:5e:22:58:a7:d5:29:89:e9:2f:02:7f:84:d2:18:
6f:07:3a:35:6b:92:73:51:17:8b:ff:42:f2:23:be:
38:96:a1:a4:1e:43:0e:7b:b4:de:3d:93:3b:3b:7b:
ee:60:05:39:18:0f:90:1d:4e:84:cd:ea:1f:ab:c0:
07:35:6e:eb:e8:25:f2:5a:16:0a:3a:11:6b:68:8f:
6d:b3:b1:6a:41:66:d0:cc:99:5e:7a:23:95:f9:63:
f1:8e:b7:a3:59:45:1f:dc:4a:d9:df:ad:9a:49:99:
6e:ad:ae:2d:09:5d:af:fe:69:f0:e4:ee:a7:10:38:
0d:b8:da:4a:5e:34:52:3f:45:9c:c0:25:c1:45:52:
74:02:8b:9e:4f:04:e1:66:93:50:ed:9f:82:46:1c:
77:e1:a3:b2:c5:f8:dc:d8:81:bb:fb:e5:66:20:32:
f4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:10:A6:35:E1:EC:AF:39:5D:4D:03:A8:D6:21:72:CA:59:3F:54:CB
X509v3 Authority Key Identifier:
keyid:1F:D7:BB:B1:DE:68:09:DF:7F:6E:57:3F:9A:BB:64:E6:03:61:3C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:bb:d0:47:48:05:15:d7:ef:ce:b5:46:20:89:92:4b:0f:95:
17:08:7c:79:b9:6b:b6:78:56:8d:cd:52:54:17:10:fd:b3:a1:
b0:2e:ae:df:4a:2e:ab:1e:db:7c:ad:a4:61:70:9f:13:29:0c:
97:a3:5c:fd:f1:b7:9f:6d:d5:22:8a:f5:63:0d:3c:04:11:79:
78:75:25:3a:90:7e:e9:1a:db:b6:71:b9:72:44:10:a6:2a:87:
a4:04:a9:dd:35:89:14:bc:44:c2:bc:7f:e7:a1:06:d2:48:c5:
4d:8e:8f:76:3b:8a:56:2f:10:b4:0a:99:9a:27:ad:64:84:57:
0f:e4:52:79:6a:8f:10:d3:7a:2b:85:24:88:ee:ce:1e:bb:35:
4a:5c:98:9d:42:27:f2:57:b1:9b:0a:40:20:64:ee:87:7a:36:
4c:fc:24:75:11:a6:55:d9:ef:5f:27:fd:dc:09:84:33:df:74:
a3:68:01:fa:eb:df:e6:5e:28:86:bb:b2:34:69:62:43:57:d7:
95:e9:8c:1f:81:4a:78:7c:6c:05:01:31:a6:52:96:18:5b:a0:
52:87:30:b7:0c:a3:88:5f:33:08:d6:bb:e4:b1:b5:20:3f:ee:
63:e8:d0:2d:77:1a:da:ff:cc:93:ee:b4:57:2a:ed:08:ef:8c:
7e:d5:55:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:39:00 2026 by rpki-client