Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
File: a_HqpcMxvs8ydwGi69zxobtfBww.mft (raw, json)
Hash identifier: 7fM7GXb2FtrW/5TvSxm9Hdq14G3x5lkXp7/58qF05Ks=
Subject key identifier: 71:77:1F:97:68:C5:29:95:30:9D:B1:BB:23:E6:E4:8E:4D:62:04:EF
Authority key identifier: 6B:F1:EA:A5:C3:31:BE:CF:32:77:01:A2:EB:DC:F1:A1:BB:5F:07:0C
Certificate issuer: /CN=6bf1eaa5c331becf327701a2ebdcf1a1bb5f070c
Certificate serial: 019DA3E6F438D1BFDB342591D2555E0A8E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
Manifest number: 0F5D
Signing time: Sun 19 Apr 2026 04:01:55 +0000
Manifest this update: Sun 19 Apr 2026 04:01:55 +0000
Manifest next update: Mon 20 Apr 2026 04:01:55 +0000
Files and hashes: 1: a_HqpcMxvs8ydwGi69zxobtfBww.crl (hash: NTBLHp+GcXioJS2nCVqh+FI2mrA3e7ck1UUzOEeNX9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:f4:38:d1:bf:db:34:25:91:d2:55:5e:0a:8e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf1eaa5c331becf327701a2ebdcf1a1bb5f070c
Validity
Not Before: Apr 19 04:01:55 2026 GMT
Not After : Apr 20 04:01:55 2026 GMT
Subject: CN=71771f9768c52995309db1bb23e6e48e4d6204ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bb:84:1e:3f:82:69:b5:76:7a:59:60:a1:76:
d2:67:a9:3f:eb:f7:20:75:10:a2:93:40:5b:bf:a9:
e6:5b:a7:6d:da:d7:74:a7:e9:22:24:71:0d:68:87:
81:5d:a9:cc:a8:fb:da:92:ab:86:73:e2:57:d1:e6:
2a:a8:9a:1c:ea:9a:33:e1:36:6e:8a:28:79:bf:c3:
88:a2:64:7a:c2:19:f7:e0:14:cc:c5:58:e4:bd:8b:
3b:68:85:c6:14:87:30:33:7a:48:fd:7c:68:55:bd:
2d:84:56:93:7e:5a:4d:6c:a1:43:8d:4f:9c:a5:39:
d9:d5:c6:93:ee:bb:46:8f:54:e1:46:74:a8:99:5b:
58:e8:ba:36:cc:c0:e5:33:44:f8:8b:35:b8:e7:01:
67:53:0e:ec:84:6b:51:8a:53:9c:c5:7f:28:c5:87:
0d:6c:f1:81:0b:1c:21:21:6e:82:cc:06:c7:45:10:
fd:3c:74:72:ea:3c:72:01:c4:fb:6c:dc:68:ee:30:
51:38:11:da:a2:d8:2e:f6:82:f3:7c:79:d6:3a:06:
94:70:6a:67:da:b2:1e:2e:ca:1c:b2:6b:28:1e:83:
bf:f0:99:10:ac:c2:df:2a:e0:a9:52:0a:f0:fe:8d:
1c:68:90:b4:f7:f4:cd:b6:10:f6:f5:49:fa:a9:56:
25:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:77:1F:97:68:C5:29:95:30:9D:B1:BB:23:E6:E4:8E:4D:62:04:EF
X509v3 Authority Key Identifier:
keyid:6B:F1:EA:A5:C3:31:BE:CF:32:77:01:A2:EB:DC:F1:A1:BB:5F:07:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6d:95:55:ae:ff:03:2e:f0:0c:3c:cb:5c:21:f4:0e:eb:88:
40:9e:46:e2:57:62:e2:47:94:62:9a:ce:22:aa:1b:6f:29:87:
4c:07:0c:4f:40:41:6b:67:dd:32:8b:ee:40:e1:ba:e7:e7:a5:
a8:01:e0:2a:30:76:a9:c9:5c:08:db:df:5a:9c:fc:c2:1d:8b:
67:4e:e6:f3:98:c6:d9:c0:ae:0a:e2:ee:10:a4:78:6b:91:4c:
17:c4:56:92:cf:a7:6f:47:85:86:68:62:fe:c6:57:d1:98:6e:
28:9d:90:8a:3f:23:fe:79:38:0b:d6:8b:77:0e:3f:5e:20:45:
20:f0:b8:59:1a:e1:c0:76:e7:39:ed:9d:61:d9:49:ed:95:42:
08:ba:0d:fa:16:41:ae:45:51:37:04:42:e3:3a:84:96:b1:ca:
02:2e:e6:d8:a4:df:5c:a6:e2:7d:e4:04:15:03:50:fb:e0:83:
75:9a:f9:19:c5:5a:49:47:23:e0:55:44:57:66:c2:fb:aa:bc:
59:df:67:3f:b7:df:28:0d:b5:d6:9e:1a:ad:42:31:fe:ae:65:
fd:4b:7b:0a:61:ce:33:7d:37:98:1c:20:d8:42:07:eb:06:bc:
d5:16:91:80:9c:fc:a5:ae:ae:ff:bc:47:e8:e3:a3:51:34:21:
71:85:82:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5vQ40b/bNCWR0lVeCo5fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZjFlYWE1YzMzMWJlY2YzMjc3MDFhMmViZGNmMWExYmI1
ZjA3MGMwHhcNMjYwNDE5MDQwMTU1WhcNMjYwNDIwMDQwMTU1WjAzMTEwLwYDVQQD
Eyg3MTc3MWY5NzY4YzUyOTk1MzA5ZGIxYmIyM2U2ZTQ4ZTRkNjIwNGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7uEHj+CabV2ellgoXbSZ6k/6/cg
dRCik0Bbv6nmW6dt2td0p+kiJHENaIeBXanMqPvakquGc+JX0eYqqJoc6poz4TZu
iih5v8OIomR6whn34BTMxVjkvYs7aIXGFIcwM3pI/XxoVb0thFaTflpNbKFDjU+c
pTnZ1caT7rtGj1ThRnSomVtY6Lo2zMDlM0T4izW45wFnUw7shGtRilOcxX8oxYcN
bPGBCxwhIW6CzAbHRRD9PHRy6jxyAcT7bNxo7jBROBHaotgu9oLzfHnWOgaUcGpn
2rIeLsocsmsoHoO/8JkQrMLfKuCpUgrw/o0caJC09/TNthD29Un6qVYl1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHF3H5doxSmVMJ2xuyPm5I5NYgTvMB8GA1UdIwQY
MBaAFGvx6qXDMb7PMncBouvc8aG7XwcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYV9IcXBjTXh2czh5ZHdHaTY5enhvYnRmQnd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZTc0MTgtZjY1ZC00ZmZlLThiZGQt
OTYxZWNjM2E2Y2QwLzEvYV9IcXBjTXh2czh5ZHdHaTY5enhvYnRmQnd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yZTc0MTgtZjY1ZC00ZmZlLThiZGQtOTYxZWNjM2E2Y2Qw
LzEvYV9IcXBjTXh2czh5ZHdHaTY5enhvYnRmQnd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl22VVa7/
Ay7wDDzLXCH0DuuIQJ5G4ldi4keUYprOIqobbymHTAcMT0BBa2fdMovuQOG65+el
qAHgKjB2qclcCNvfWpz8wh2LZ07m85jG2cCuCuLuEKR4a5FMF8RWks+nb0eFhmhi
/sZX0ZhuKJ2Qij8j/nk4C9aLdw4/XiBFIPC4WRrhwHbnOe2dYdlJ7ZVCCLoN+hZB
rkVRNwRC4zqElrHKAi7m2KTfXKbifeQEFQNQ++CDdZr5GcVaSUcj4FVEV2bC+6q8
Wd9nP7ffKA211p4arUIx/q5l/Ut7CmHOM303mBwg2EIH6wa81RaRgJz8pa6u/7xH
6OOjUTQhcYWC2g==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:09 2026 by rpki-client