Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
File: H6rKuORWuykZeac1enAk8AvrqvU.mft (raw, json)
Hash identifier: mL+bjic7de1dkaFmePbu5w04F/d76y6onzsLuoZJALE=
Subject key identifier: 5C:7B:38:33:19:50:39:25:99:06:E2:38:87:93:B9:CB:8F:6D:5F:C0
Authority key identifier: 1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
Certificate issuer: /CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Certificate serial: 019DA4C169E94C3A0656A3E4B87154C36E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
Manifest number: 07B1
Signing time: Sun 19 Apr 2026 08:00:32 +0000
Manifest this update: Sun 19 Apr 2026 08:00:32 +0000
Manifest next update: Mon 20 Apr 2026 08:00:32 +0000
Files and hashes: 1: H6rKuORWuykZeac1enAk8AvrqvU.crl (hash: 18j8+/TDcN8MbI3A9vDZiuvAgWXZgImGrWVP3NqQuEk=)
2: YN0WF7H7M2n4t-XjARACyM9WR6o.asa (hash: eBj4EH+AV57EzbfzhlBRa9LcrLwEw5t3KkUj9eOh2sM=)
3: YZf1I4HDqm3z0PL6TqKmws28UHo.roa (hash: Iy79aoCujC05IKj4CdK/qSAtze1gZOoSXAO4h9l6iV0=)
4: Yo-fullWGeKl8XOqwwQWGl8ohSo.asa (hash: 0VBufQNMO7/4QkFPpkFZhTVHEaQ91TkdNNCouWLIjsE=)
5: iDGkEHzaPIBC_ltNyeNPjxHWcLQ.roa (hash: m+RgaOaS95hD5eR5RGnGQAMM12oNRJddtp+/tKr5w0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:69:e9:4c:3a:06:56:a3:e4:b8:71:54:c3:6e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Validity
Not Before: Apr 19 08:00:32 2026 GMT
Not After : Apr 20 08:00:32 2026 GMT
Subject: CN=5c7b3833195039259906e2388793b9cb8f6d5fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:87:fc:a3:f8:af:8f:72:66:0c:16:0b:95:
f2:e1:87:0a:49:87:05:5c:c9:59:18:14:97:a4:0f:
7b:4e:34:b8:a8:46:da:2a:cb:25:e9:db:cb:cc:af:
9a:c3:07:43:44:84:ff:c7:c1:1f:8e:53:26:14:25:
80:43:d6:02:cd:90:ca:1b:ac:e9:aa:fe:2b:02:88:
47:c0:91:d9:30:1b:88:79:6b:99:25:da:e7:5b:d9:
52:d0:84:57:db:b4:77:29:35:b5:d6:f6:e9:95:8f:
e0:8d:1e:11:1f:59:a9:9e:e8:5a:ff:f9:67:71:76:
f6:ed:76:7e:bf:92:2c:c2:ba:5c:3c:90:ad:7a:6e:
87:62:8d:3e:b7:87:0e:e8:6e:34:36:20:5f:d4:ac:
2f:80:fc:08:7d:bd:b4:98:92:4e:49:4a:05:16:92:
52:68:23:f9:bf:1f:cb:60:a8:03:11:00:77:42:f6:
bd:37:cb:1b:64:9b:e1:72:7f:26:a5:22:49:18:93:
29:5b:71:8f:6e:c6:7a:cb:6b:2a:41:16:89:21:aa:
0f:43:8f:78:4d:0b:e9:d7:71:73:b8:01:1d:b9:b0:
7b:66:e6:55:1d:f2:17:de:13:37:8d:77:b4:5d:47:
d9:c0:56:9d:52:45:35:f8:e7:62:81:6e:c8:63:05:
47:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7B:38:33:19:50:39:25:99:06:E2:38:87:93:B9:CB:8F:6D:5F:C0
X509v3 Authority Key Identifier:
keyid:1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:fb:04:f9:4b:4c:12:27:42:79:fd:e2:de:d4:79:cd:23:33:
12:e7:72:e5:b3:7d:6a:f2:e1:91:8f:63:7b:98:44:96:8c:66:
b2:51:7e:7e:df:03:51:c7:fd:4c:2f:dc:f1:17:4f:88:30:fe:
c4:5b:b4:20:57:ea:4f:b5:fa:31:a9:9d:30:46:d2:2a:d5:bc:
10:3e:d9:52:6e:59:88:fd:9c:fe:a7:54:00:79:cd:7e:55:f1:
60:a4:72:ed:73:ca:67:64:d2:3b:a2:e5:48:eb:2c:6c:b2:7c:
7f:60:b5:86:e3:dc:ee:12:d6:03:88:08:74:71:4a:b2:e1:df:
fb:eb:0a:99:cc:f7:31:77:76:b2:6b:27:a7:ab:0a:11:70:cd:
62:fb:b9:7f:87:b8:86:05:5e:36:71:b2:ab:e1:29:6e:9f:c6:
5e:12:13:ea:d7:34:e6:6b:52:a1:ee:6c:99:5c:1d:6f:49:34:
03:8d:6f:d4:24:33:11:f3:f8:5e:14:a1:f4:de:6c:cc:12:2c:
86:94:fc:5a:44:ce:46:2f:3f:7d:f0:50:36:8d:58:a1:50:b0:
82:80:df:c8:c8:52:1c:f6:dd:44:6a:9e:05:9b:be:14:61:9e:
26:cf:2d:20:f4:7d:af:ff:eb:03:b1:7a:21:d1:85:76:93:ae:
4b:65:e3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:10:16 2026 by rpki-client