Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
File: hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json)
Hash identifier: a3U98tKnaRNtEWj46Oe63O7OzbQnyFivdP3HnowDf6o=
Subject key identifier: 25:7A:5D:41:E2:C1:31:92:8B:E0:E2:E6:46:36:B3:89:3E:A3:71:13
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 019D9A06E989644ED96774D31B8EEBF1F41A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
Manifest number: 097D
Signing time: Fri 17 Apr 2026 06:00:37 +0000
Manifest this update: Fri 17 Apr 2026 06:00:37 +0000
Manifest next update: Sat 18 Apr 2026 06:00:37 +0000
Files and hashes: 1: 1-ZrQbFc7NRMGl29jtjWMKsIp2ZQ.roa (hash: He4PUZhKvLvJbADEv84xs1x0RYoT7WY7P6/fpECXwDc=)
2: 4VwJdoFC3PwR_Sdn4ycYHAn4p5E.roa (hash: y7pqmEtnVn2xHKb97Tp8IWQb6s7nlIbkBWk3fCeoPW4=)
3: GUhp8Wvci_j7T4kmVTXcfm-wQGw.roa (hash: sCSjIJ+mAkndBqHerekCSW8OY51YrH4HeTZcaJ0ddlk=)
4: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: JVQNHG8bDH85Q9esl+8lg8auaag+SGzPefN9XNluU+A=)
5: x0cR6jRtni_l8MuSLZAtEqFxSP0.roa (hash: yoZ8H34hrukbP1OK2g71bu2hsQg8D//pklb5IZbtw1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:e9:89:64:4e:d9:67:74:d3:1b:8e:eb:f1:f4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Apr 17 06:00:37 2026 GMT
Not After : Apr 18 06:00:37 2026 GMT
Subject: CN=257a5d41e2c131928be0e2e64636b3893ea37113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:1a:9e:76:47:ef:9c:40:c7:39:b1:8b:8d:
ed:45:62:02:55:ef:d2:63:40:76:bd:c6:75:83:a6:
b4:58:91:fa:75:19:86:47:61:8e:3f:a7:9c:43:52:
73:e1:df:8b:35:48:63:f8:30:18:68:9e:9a:0f:18:
14:bd:ca:bb:68:bf:17:e1:30:95:00:8a:76:bf:89:
d1:f7:18:5f:79:ac:5f:39:82:64:30:34:ef:e7:cf:
1a:51:4f:ab:c9:01:9a:50:9c:0e:66:52:46:4c:61:
44:81:67:32:83:b2:12:fb:06:3c:04:24:92:b4:99:
5c:94:b1:ff:b4:b7:6e:06:c6:4b:c5:4b:db:57:10:
3a:0a:eb:92:51:a1:b3:6a:f8:d2:98:bc:25:55:8b:
43:db:b7:1e:75:db:d4:87:cb:37:a5:a7:f8:06:e9:
a2:b7:2b:0e:03:86:2a:ad:a1:26:33:2f:39:12:b0:
f8:42:65:b6:2f:6e:55:45:93:68:4b:1c:e7:3f:c5:
0d:8e:81:1a:98:ef:09:b6:e7:f0:27:11:06:67:64:
7b:a5:b9:97:b4:b2:a2:19:19:36:75:62:48:4a:e9:
d7:a3:35:49:f7:36:af:51:bf:8d:27:6b:71:cf:1b:
b0:25:7a:93:c5:99:08:7c:78:f7:35:54:14:0e:8f:
66:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7A:5D:41:E2:C1:31:92:8B:E0:E2:E6:46:36:B3:89:3E:A3:71:13
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ba:23:de:6b:c3:95:fe:8d:28:13:60:cb:c7:3d:57:0d:1d:
98:29:c2:40:11:6f:3e:f0:6f:34:e3:25:b5:11:58:89:57:f2:
03:7f:2b:9f:fb:92:28:9b:85:27:00:a2:ee:13:12:1b:2c:7a:
71:24:67:92:5f:b6:45:cb:25:ff:fb:cd:42:f6:d5:4f:d2:c8:
b9:83:07:ee:f6:bb:10:64:2d:df:56:03:17:6a:2e:21:cf:94:
82:d6:c3:7f:cd:6e:6d:25:7f:e1:25:8f:2f:c4:7d:96:e7:f4:
82:53:7a:4c:9d:ac:fc:ed:b2:5a:59:c9:33:60:41:36:0a:cb:
e4:49:7f:34:37:66:e9:2c:50:75:2c:68:ad:39:99:e2:24:1d:
39:11:8c:a8:9c:61:f1:66:58:64:54:1c:f0:ea:12:25:b3:a3:
e8:11:f2:11:de:a4:55:0d:5a:3a:15:8f:68:76:06:9f:6a:93:
fc:da:40:37:69:8d:28:47:a2:0f:9c:fb:e4:22:9c:92:f9:8d:
3d:5b:b7:74:36:58:09:4a:78:a1:fa:c6:66:69:93:77:82:a0:
8a:31:24:62:f5:a4:62:45:04:61:61:9b:53:2f:8c:df:52:68:
37:2f:d8:bf:97:bd:a0:95:64:54:a3:ff:41:65:48:89:f7:3e:
6e:93:77:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:41:39 2026 by rpki-client