Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
File: Hn19JBnxEYqsXJktKt_2l7A-mns.mft (raw, json)
Hash identifier: CIOYA9LixHDJfAPZrxVMAFSN2wXDglmeSgz/J+uT5lk=
Subject key identifier: AB:46:5B:6E:EF:45:B8:4E:D8:70:2F:ED:63:02:35:25:D8:EB:30:DE
Authority key identifier: 1E:7D:7D:24:19:F1:11:8A:AC:5C:99:2D:2A:DF:F6:97:B0:3E:9A:7B
Certificate issuer: /CN=1e7d7d2419f1118aac5c992d2adff697b03e9a7b
Certificate serial: 019D984F8DA3777B3E7A120E8831FBF938E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
Manifest number: 0A99
Signing time: Thu 16 Apr 2026 22:00:43 +0000
Manifest this update: Thu 16 Apr 2026 22:00:43 +0000
Manifest next update: Fri 17 Apr 2026 22:00:43 +0000
Files and hashes: 1: Hn19JBnxEYqsXJktKt_2l7A-mns.crl (hash: M1OkxmCfzjTqES8XP3bfPauww9n+SA7NNEhKpgFavIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:8d:a3:77:7b:3e:7a:12:0e:88:31:fb:f9:38:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7d7d2419f1118aac5c992d2adff697b03e9a7b
Validity
Not Before: Apr 16 22:00:43 2026 GMT
Not After : Apr 17 22:00:43 2026 GMT
Subject: CN=ab465b6eef45b84ed8702fed63023525d8eb30de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ba:64:84:ae:60:fa:f5:2e:35:e1:80:63:07:
3c:73:72:cd:17:9a:8b:ef:d3:82:9a:9f:13:1e:d0:
2b:7b:b8:60:88:be:9d:3b:35:73:52:7d:6a:35:53:
80:6b:9b:85:ff:da:aa:7b:4f:5f:cd:b6:c7:17:5e:
25:7d:b1:b6:1b:c2:03:32:bb:98:98:c9:7f:a6:42:
26:96:52:9f:6c:f2:e3:14:54:db:f4:9b:83:81:7a:
5a:d7:f6:b0:cd:94:23:27:aa:94:b5:1f:41:94:30:
61:07:9d:83:f2:fe:77:04:28:f9:1e:bc:71:f6:75:
bc:71:92:ac:4f:51:2f:e1:7a:d2:d2:fc:8f:3c:e9:
be:9c:fd:f7:03:ca:af:44:4c:a3:da:ef:bb:0a:a9:
b2:ac:ad:cc:d2:0e:cf:89:8f:71:80:1e:1f:10:27:
46:dd:1d:dc:df:98:ba:9f:20:7a:d3:10:80:4b:97:
76:82:d5:f1:10:2a:88:57:93:c2:3b:22:9c:65:22:
c7:bf:31:fe:f1:9b:ad:89:4b:53:bb:72:1c:9c:91:
73:f9:11:4e:96:88:c7:f9:d4:44:01:1c:01:bc:d3:
9d:74:78:bc:4f:d9:b7:81:82:4d:15:d7:25:18:1a:
91:72:8d:f0:6b:47:b0:8d:40:e1:e5:f4:bc:64:35:
ed:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:46:5B:6E:EF:45:B8:4E:D8:70:2F:ED:63:02:35:25:D8:EB:30:DE
X509v3 Authority Key Identifier:
keyid:1E:7D:7D:24:19:F1:11:8A:AC:5C:99:2D:2A:DF:F6:97:B0:3E:9A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b5:a1:67:4f:91:b5:4f:62:db:65:0c:84:b3:fe:a1:a1:de:
da:ca:db:12:14:7e:28:4a:94:84:5c:5d:fd:e4:10:1c:ec:20:
3c:24:c8:bd:b9:39:4b:ca:da:a6:df:c8:4e:36:22:7e:c7:ba:
50:a0:c1:fc:57:1e:23:57:86:2a:01:f2:0e:00:35:17:23:a7:
e2:05:3c:a0:1a:9f:4a:36:4e:8a:8c:95:49:01:4d:40:39:2d:
26:a3:5d:7c:1d:67:6d:37:51:b8:aa:bb:3e:8d:03:00:70:83:
2d:20:8a:f6:38:8c:4a:80:d9:21:3b:45:ec:61:d2:37:17:e5:
77:05:c7:3d:0e:fd:a2:d8:b0:0b:be:36:8c:f2:31:09:12:1f:
5a:c2:a6:f9:24:3e:29:d8:d5:ff:6e:fb:93:b1:af:0f:c5:14:
de:8b:a3:bf:0a:16:c1:a5:51:cd:c2:5d:b3:ec:f6:42:05:7a:
1a:5f:83:4b:7a:eb:30:5e:08:a8:0f:d8:41:94:56:42:d7:f5:
f4:cc:34:0f:33:e6:3e:5c:fd:c6:93:cf:80:9f:28:73:33:19:
4c:f3:7d:94:d5:dc:01:bd:74:a8:a7:ca:79:11:26:2c:ee:c8:
2c:51:56:66:d6:09:43:63:af:71:0d:e9:d6:46:9e:f7:48:34:
0b:be:d5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:11:43 2026 by rpki-client