Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
File: hUkvKmkQQzxbzYJpxEDowceADWs.mft (raw, json)
Hash identifier: 58rSCOWfd9RyzM8TJ5O2bCPjZxby/IF+unK7gSfPVvo=
Subject key identifier: CA:91:B3:D1:14:CC:ED:AE:04:9C:4A:F2:24:2D:6B:74:60:A0:59:DA
Authority key identifier: 85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
Certificate issuer: /CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Certificate serial: 019D9AE3001144FCE8D61DF9066F70B0187C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
Manifest number: 0866
Signing time: Fri 17 Apr 2026 10:01:01 +0000
Manifest this update: Fri 17 Apr 2026 10:01:01 +0000
Manifest next update: Sat 18 Apr 2026 10:01:01 +0000
Files and hashes: 1: TVMwQ3POqUvlVpd6DIhGjA31OEo.roa (hash: Whcd9L1nk9Dj6hFZTyskGlKlxUc8A3COyWU8lK84zTI=)
2: hUkvKmkQQzxbzYJpxEDowceADWs.crl (hash: VkA4zxe2IqCvxyU80LfzScMB1q9XfJO+B2NaR/LrYCw=)
3: rKoSjHhvJImZNOF1L4tvqu9KSjU.roa (hash: ED11ejyoT5xPcyYKinY7Cd+nJxVa+vcQf9GFo/cbaCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:00:11:44:fc:e8:d6:1d:f9:06:6f:70:b0:18:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Validity
Not Before: Apr 17 10:01:01 2026 GMT
Not After : Apr 18 10:01:01 2026 GMT
Subject: CN=ca91b3d114ccedae049c4af2242d6b7460a059da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e1:20:25:0a:9c:64:10:d6:ee:6b:45:3e:62:
4e:13:cc:aa:ae:d1:00:e6:ba:ac:e6:be:c1:c9:ce:
14:20:5d:d0:5a:4f:e0:42:33:0e:09:07:fc:9b:ce:
9f:1a:a8:ce:33:13:2a:03:a3:13:7d:9f:ea:a1:02:
a1:f4:0c:00:24:b0:4f:dc:88:18:4c:f4:d0:19:b2:
34:5c:69:4f:ed:81:f4:8f:f9:de:52:8c:a3:d0:94:
f5:53:12:da:26:04:33:36:2a:26:24:2a:8b:f0:0f:
63:e7:1d:ca:1a:49:a2:d4:34:8a:6a:49:47:1e:0d:
42:48:3e:ff:0c:59:39:b6:21:8e:c0:19:d2:18:1a:
04:64:19:5a:4a:50:ca:0d:c8:d3:c4:05:bd:c5:59:
50:a5:7f:ad:d6:d4:c1:6f:5a:7b:24:9b:6d:6c:30:
92:d2:fd:77:b5:93:d2:ce:66:23:ae:0b:f0:be:76:
71:c3:d4:92:73:17:29:49:b5:09:bc:c5:68:e8:be:
01:14:c7:49:22:65:ae:17:2e:2e:03:1a:26:b5:60:
13:b4:fa:58:5b:8a:86:0e:f8:19:62:07:8f:aa:3b:
66:f8:2f:fa:62:91:b2:c2:fc:58:57:ce:39:cf:17:
ff:d5:c6:67:55:8e:7e:b3:d4:ce:a0:df:7b:8c:d9:
2e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:91:B3:D1:14:CC:ED:AE:04:9C:4A:F2:24:2D:6B:74:60:A0:59:DA
X509v3 Authority Key Identifier:
keyid:85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:51:d0:cd:8b:f0:d8:1a:c7:95:be:24:c7:58:d7:57:8d:eb:
af:92:e7:61:38:5b:51:83:d6:e0:74:0a:54:88:f8:fd:2a:6a:
dd:41:73:b4:9d:24:6f:f8:75:15:da:84:cb:50:f9:f1:b9:8f:
f6:b0:4d:88:6a:2d:6b:76:14:c8:79:38:1d:ce:31:20:28:b6:
4f:af:0f:e2:50:aa:6a:4f:ae:d4:ed:10:f2:4a:76:41:37:a1:
ec:04:9b:31:84:be:b3:05:a9:aa:03:bb:24:d4:6e:7e:7c:0d:
62:02:8f:1f:46:bd:06:28:c4:07:4a:13:ba:0b:5e:04:9c:8a:
9b:c7:b2:6d:78:7d:c7:de:0a:19:c0:c2:92:0c:cb:45:57:cc:
41:06:f5:de:ce:35:cf:bb:7e:40:4e:d5:e9:1c:ab:47:b6:8d:
f0:a3:85:b1:fb:2a:76:1d:55:60:9f:b4:60:c8:ef:af:e6:dc:
ba:70:09:bc:ee:45:48:02:02:22:3a:0a:fe:39:c1:5f:01:2d:
3a:56:bc:a5:c9:d9:62:f5:6f:99:a0:45:15:46:35:b9:c8:14:
d6:1f:41:c4:d7:5a:7c:5c:03:88:d5:9c:2c:1f:14:fd:93:42:
43:ec:a1:41:28:25:0b:68:34:14:d4:7c:4d:c4:a2:99:db:4e:
85:99:72:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:14:45 2026 by rpki-client