Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
File: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft (raw, json)
Hash identifier: ALNgAU9bhHPj8oP3WHQR6uR+cpQX/uqclfgyOO936yE=
Subject key identifier: EC:27:66:0B:85:71:3E:CD:C2:9F:C4:AB:FC:DF:87:5A:82:79:5F:36
Authority key identifier: 1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61
Certificate issuer: /CN=1f688f9857d9e440c1058dc8959e49f8b3183f61
Certificate serial: 019D97AAB7C132984C8CBCEDA8BC0A816663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 19:00:40 +0000
Manifest this update: Thu 16 Apr 2026 19:00:40 +0000
Manifest next update: Fri 17 Apr 2026 19:00:40 +0000
Files and hashes: 1: 5ISKJbp4rbTdCWF2uAdFb5yPoJI.roa (hash: OH5/o4eCRTtPdgmEfAYqQLH3iOBiZD4gNNNHJ0XoTvs=)
2: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl (hash: SZI8na33GANDYb5pkGBRzA16LmraW2Mxifu+Fswg81M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:b7:c1:32:98:4c:8c:bc:ed:a8:bc:0a:81:66:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f688f9857d9e440c1058dc8959e49f8b3183f61
Validity
Not Before: Apr 16 19:00:40 2026 GMT
Not After : Apr 17 19:00:40 2026 GMT
Subject: CN=ec27660b85713ecdc29fc4abfcdf875a82795f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:09:aa:0e:d1:2c:d2:a7:98:93:55:75:bc:0e:
f9:30:ce:e4:4a:55:9e:2e:6a:32:a0:a4:fd:ab:05:
b5:00:9a:57:7d:3c:a7:6c:28:0e:54:4c:ee:99:23:
ee:85:3a:1c:7b:fb:07:17:a7:e8:4a:17:67:f4:d7:
8b:7e:94:ea:3a:29:53:11:99:64:8d:87:97:43:91:
d6:71:68:cc:07:75:fb:26:07:47:1e:9f:67:53:8f:
fe:c6:93:46:b3:c8:fc:4b:bd:7b:cf:ac:88:43:db:
81:52:97:38:80:cf:33:b7:2c:4a:5d:e0:9b:94:43:
44:39:83:5e:36:43:34:1c:3a:71:b2:8c:c6:dd:4e:
29:d3:38:8b:01:4e:91:1a:b6:c3:08:fd:31:99:91:
8d:cf:27:3d:25:0f:1e:49:44:9a:42:0c:4e:62:f2:
cf:f3:32:71:5a:be:e0:5d:10:b3:2c:0a:d9:e8:cc:
62:96:be:9c:67:ee:77:b4:6d:a3:4e:cd:05:9e:00:
9f:63:7b:38:e9:44:ad:f3:a8:a8:c5:07:51:3e:32:
4c:31:c1:a4:0d:c1:70:3f:ed:ce:a5:98:76:78:60:
fc:f0:b2:3e:3e:0b:fd:98:06:d0:a9:f5:4c:2c:66:
2b:34:e7:c2:08:a6:6a:7c:2a:ff:ad:1c:38:93:a1:
dc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:27:66:0B:85:71:3E:CD:C2:9F:C4:AB:FC:DF:87:5A:82:79:5F:36
X509v3 Authority Key Identifier:
keyid:1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:10:ed:3a:63:95:0b:4e:3a:4b:0f:5d:32:c1:79:9e:f0:d2:
31:2f:4c:c4:74:24:59:46:2d:b5:63:04:a9:4b:e6:02:d1:b6:
77:70:e1:50:29:1d:2d:b5:ed:3e:a5:cb:25:76:26:66:02:43:
60:d6:e0:de:29:95:bc:6d:46:ad:4f:ab:d8:13:96:06:f6:67:
94:f6:94:93:be:21:fe:85:62:77:2e:fc:7f:ac:11:e0:b0:86:
7e:40:e8:99:30:c4:8c:c2:ea:3e:87:2d:2e:fd:f3:d8:6a:4d:
6d:fd:8f:76:e5:5a:7f:73:cd:8d:22:a1:83:e2:82:2d:ed:37:
08:74:10:5b:f1:d7:00:e6:c1:7f:6f:dc:fb:58:d5:56:37:c2:
76:6d:d8:e7:34:03:8c:05:09:2f:1d:b6:42:51:af:b8:14:2a:
91:a3:2f:a0:b7:2a:9a:87:4f:c1:9c:dd:d7:56:74:fa:60:47:
f0:f1:71:14:40:3d:10:e5:ff:df:0b:70:1d:99:ef:3a:8c:70:
7b:f7:e9:e3:f4:1a:44:0c:ed:72:a8:6b:e9:e7:c8:06:9a:54:
e0:cc:e1:f3:9c:6c:81:aa:08:7e:ac:fd:85:c3:67:57:c1:34:
06:26:60:8a:67:82:52:3a:30:9c:e0:fb:49:30:06:e0:c5:d8:
81:73:c3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:57 2026 by rpki-client