Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
File: hE9-ZplcmUow0IaHEQv9apoFYTQ.mft (raw, json)
Hash identifier: kcrRWHc1EuWInnE98A3+oQP3yWGSb1KbFgJN1H3ef4g=
Subject key identifier: 58:A5:A6:B9:92:60:A7:70:0B:99:BD:87:BE:87:CE:0C:C9:51:ED:04
Authority key identifier: 84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
Certificate issuer: /CN=844f7e66995c994a30d08687110bfd6a9a056134
Certificate serial: 019D98BD52BF2DD3AF98F3D32DE11DEA8671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
Manifest number: 09A5
Signing time: Fri 17 Apr 2026 00:00:37 +0000
Manifest this update: Fri 17 Apr 2026 00:00:37 +0000
Manifest next update: Sat 18 Apr 2026 00:00:37 +0000
Files and hashes: 1: Xi0wFjEOre9RA4tTNOrCW7j84CQ.roa (hash: dMXXq8835CGDvSKCRiaPZT7fPXiuzTWQIYfaBs9t0aE=)
2: hE9-ZplcmUow0IaHEQv9apoFYTQ.crl (hash: bgYyrA0BIrf6kFKVra6f5iN+rM6Vyzv8crN3/6zFaDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:52:bf:2d:d3:af:98:f3:d3:2d:e1:1d:ea:86:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844f7e66995c994a30d08687110bfd6a9a056134
Validity
Not Before: Apr 17 00:00:37 2026 GMT
Not After : Apr 18 00:00:37 2026 GMT
Subject: CN=58a5a6b99260a7700b99bd87be87ce0cc951ed04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:97:72:8e:15:fa:4c:e9:1d:12:4a:05:76:
eb:20:4a:72:e0:b8:a0:13:55:ed:e0:de:5e:78:17:
54:2e:bd:96:55:d2:b7:21:85:f2:c6:16:8d:99:c6:
5a:a6:bf:75:30:32:eb:a6:a6:68:2f:70:bf:1c:cf:
89:70:73:1c:a6:10:4f:e4:e3:bd:0d:ab:a6:85:05:
de:c1:85:95:ad:f5:41:a9:89:26:fd:48:7d:70:a1:
09:da:e2:77:eb:22:02:f2:fa:aa:ab:88:d0:ae:e8:
25:fd:54:a7:d6:2e:03:62:2d:17:68:be:6b:53:f8:
50:8c:4b:03:31:d8:3b:79:1c:50:62:5c:0c:04:07:
2c:a8:98:95:1b:d6:aa:bd:a2:0b:c1:cd:22:15:f9:
1c:8b:bf:63:21:f0:a4:19:c9:8c:23:f5:45:f6:51:
59:b7:4e:3f:83:c7:0e:89:cd:99:fc:61:62:94:15:
f5:12:25:26:8d:6f:e8:ce:e6:d1:8c:55:cc:32:d9:
26:30:f2:57:72:f1:af:1b:69:91:b8:eb:06:6f:c0:
fb:03:23:7a:bc:c7:02:6d:93:5c:0c:5f:1b:c3:91:
b2:0f:51:8c:ba:67:f6:50:07:7c:f6:2a:63:a4:cc:
3b:7a:ae:af:8c:5e:70:83:53:59:40:eb:64:88:c1:
2d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A5:A6:B9:92:60:A7:70:0B:99:BD:87:BE:87:CE:0C:C9:51:ED:04
X509v3 Authority Key Identifier:
keyid:84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:cc:1b:52:5a:9d:cd:a3:28:b3:aa:59:ea:73:a8:0b:38:07:
0a:23:e6:b8:b9:b0:0c:16:3a:c0:52:6c:8e:3e:51:19:54:b8:
ef:e0:7a:62:9b:a8:9b:b5:3d:a1:33:94:41:9b:94:bd:bc:01:
b3:e8:74:70:9d:ed:29:68:61:e3:d5:05:df:df:ba:b8:17:22:
41:0c:aa:55:0c:85:61:79:47:a7:cd:34:b2:f4:91:73:fa:20:
f4:61:84:0d:1f:9e:0c:13:c3:d9:12:8e:89:54:43:4b:a9:63:
8a:40:c7:e7:d1:2f:0d:0f:10:53:9d:b2:7a:cb:8d:b0:ec:3e:
cb:d8:8b:8e:b4:bd:30:13:67:30:ad:2e:6f:60:c6:e1:83:ec:
63:d7:dc:9a:78:28:b7:a6:cb:70:4b:1f:95:66:db:89:bf:5c:
1e:5e:ad:3b:65:be:d4:f3:e6:b5:b5:c4:fe:1f:d7:ff:32:19:
f1:af:29:db:85:81:11:f4:ff:08:04:df:01:06:0d:e3:7b:6c:
da:a5:9e:19:f9:4c:df:f4:d9:06:8b:74:27:22:29:c3:19:ac:
ea:a7:61:58:a0:ae:2c:15:c1:f9:70:89:90:e3:4c:7f:e7:56:
2d:ae:06:8b:4a:ba:46:f7:98:2d:33:00:77:2f:71:fd:2d:58:
34:ac:93:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:13:58 2026 by rpki-client