Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
File: RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft (raw, json)
Hash identifier: 92KJNxyULpwxmI9x//BCEbnM+yzPubv5BuolTCNC6Uc=
Subject key identifier: 97:A4:D6:84:4D:E1:5D:91:04:BD:44:B6:B1:35:37:65:A2:1A:AD:84
Authority key identifier: 44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
Certificate issuer: /CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Certificate serial: 019D9962E60506EAFD99220874410F181374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
Manifest number: 16B8
Signing time: Fri 17 Apr 2026 03:01:28 +0000
Manifest this update: Fri 17 Apr 2026 03:01:28 +0000
Manifest next update: Sat 18 Apr 2026 03:01:28 +0000
Files and hashes: 1: 1n27rvaelRUykey6wf5ROwjIidI.roa (hash: KBBik8Julj24P9mvYdNU35DOMzPd5tmec1o6YPTRHDE=)
2: RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl (hash: Mi7QuM22r3/h0FDm3hiQNQNzdscuNkNGzISUwtyGNBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:e6:05:06:ea:fd:99:22:08:74:41:0f:18:13:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Validity
Not Before: Apr 17 03:01:28 2026 GMT
Not After : Apr 18 03:01:28 2026 GMT
Subject: CN=97a4d6844de15d9104bd44b6b1353765a21aad84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fb:40:cd:63:1e:bd:9e:c2:e0:39:b7:a6:bd:
00:a7:13:4b:38:b7:04:94:34:f2:a1:55:d7:14:d5:
97:4b:99:ff:8d:15:99:f4:d9:da:06:e1:6a:ef:f2:
0e:03:77:7e:91:15:61:b6:bd:1c:36:28:cf:ac:ad:
7d:13:e9:f1:be:d5:a7:23:4e:90:da:80:e0:a6:4a:
85:c3:96:a5:9c:2a:b6:96:9c:01:e0:52:c4:cc:ac:
e4:80:43:dc:11:ff:f0:87:ca:7f:b5:b1:1b:c7:e6:
23:e1:d7:d4:79:86:31:60:e2:60:f9:56:41:03:ca:
e5:b1:0d:7b:d0:45:78:1a:73:21:c0:39:97:15:44:
9f:7b:40:6d:3e:4c:8d:eb:f8:b6:9c:52:d1:f8:cb:
e2:cd:aa:41:e2:9f:bb:b9:5d:f4:ff:2c:bd:f3:c1:
07:50:4c:b6:21:8b:a6:f2:50:49:b1:75:7c:d4:c9:
c5:81:f7:d3:de:da:04:61:7d:7f:87:c3:c9:06:5b:
d6:b7:38:c1:f4:27:74:33:91:5c:fd:7e:47:32:ce:
4d:b7:26:01:cd:33:8a:66:08:c3:e9:59:ea:8c:d0:
dd:79:e7:ab:71:f9:1a:78:02:33:d0:0e:54:ba:39:
55:77:a8:2c:76:d2:ea:52:45:dc:b8:ee:67:ac:49:
d4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A4:D6:84:4D:E1:5D:91:04:BD:44:B6:B1:35:37:65:A2:1A:AD:84
X509v3 Authority Key Identifier:
keyid:44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:06:24:6c:48:4b:39:48:ec:60:f8:92:ca:e5:6f:ba:db:79:
87:d4:43:24:f9:af:8e:72:b3:93:f2:85:84:d9:88:82:a5:f3:
f9:16:70:2a:51:c2:dd:8b:b0:a6:9b:e0:23:8f:a4:c1:03:9e:
f3:82:54:2a:72:44:13:25:2c:4b:0e:69:ed:42:c0:9c:eb:d0:
ee:70:23:61:1b:5e:03:ee:61:fd:e3:95:f3:b1:cb:be:81:1a:
69:7e:38:62:18:de:0d:ac:17:5b:ff:e0:2b:d4:14:e0:8f:04:
41:df:64:9f:eb:58:09:7c:82:85:af:4f:e4:e6:8d:56:43:68:
ae:57:82:99:cf:fb:1a:7b:1b:5e:67:8e:65:c6:5d:69:59:34:
3b:6c:2a:e5:48:4f:00:a7:67:3e:57:58:e6:b3:f4:4a:ad:60:
c7:6f:f2:de:3b:81:38:20:51:59:81:06:61:58:48:75:ac:9d:
67:2c:5f:18:ee:b5:76:aa:ce:5d:cb:42:23:15:be:60:7d:61:
7d:15:19:25:7c:ab:60:44:ed:13:38:da:94:9d:07:a5:a3:81:
86:ed:bb:f9:07:0a:23:ba:cb:3a:ff:ac:0a:70:74:e4:25:af:
04:dc:41:16:a6:34:5b:87:34:44:90:21:58:47:29:55:83:f8:
c1:90:d5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:33:36 2026 by rpki-client