Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
File: hiuiH8_MNMnZtafGCBWF4KDucK4.mft (raw, json)
Hash identifier: J3rSgGgt7vVdLzZOx141Lr722+95liVl/G6bgCnANKI=
Subject key identifier: 16:12:82:6B:05:12:56:B1:8D:89:FB:85:35:6F:CE:32:E5:E2:4D:AD
Authority key identifier: 86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE
Certificate issuer: /CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
Certificate serial: 019D9A06E9427CCECB99B2715709148F11E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
Manifest number: 09BC
Signing time: Fri 17 Apr 2026 06:00:37 +0000
Manifest this update: Fri 17 Apr 2026 06:00:37 +0000
Manifest next update: Sat 18 Apr 2026 06:00:37 +0000
Files and hashes: 1: Ac2g8HVyNDYwzqmo6Q0KVIwOBDo.roa (hash: Um65HfZZDJKesTmcrahWX7j2iQcfK801xXJSJGbgafE=)
2: hiuiH8_MNMnZtafGCBWF4KDucK4.crl (hash: dkn8O0pr9Rc0B/8kIyRBO/Oo4vjdXvvc/mE41KneYpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:e9:42:7c:ce:cb:99:b2:71:57:09:14:8f:11:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
Validity
Not Before: Apr 17 06:00:37 2026 GMT
Not After : Apr 18 06:00:37 2026 GMT
Subject: CN=1612826b051256b18d89fb85356fce32e5e24dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:89:7d:6a:b2:b6:97:48:45:22:d6:d0:20:
80:8f:eb:fa:27:12:e3:f5:dc:cf:41:48:8d:4b:f4:
e9:23:cf:9e:4f:2f:b8:2d:20:12:5d:99:d8:d3:3c:
2e:d2:63:d4:4b:fa:f4:4e:ac:1f:13:ba:30:70:e9:
77:f9:46:a9:ef:db:77:67:86:88:10:0b:02:33:00:
dc:2c:87:92:de:c1:78:bc:be:4e:0b:df:3d:b3:c1:
41:2b:e7:7c:62:51:94:c6:4f:1d:1e:28:c6:8e:d8:
9a:f5:60:c6:18:2b:cc:c5:c5:7d:12:2d:fb:4c:b9:
2f:2b:3d:3b:db:4c:5a:5f:b4:2d:5b:db:fb:8a:82:
20:82:25:f4:33:20:3b:d2:ec:ac:5a:ac:86:47:1d:
a4:c7:4a:a7:5c:d1:14:ca:67:83:83:44:44:4c:6b:
90:e8:89:57:3b:27:d0:b4:68:ca:1d:fd:00:8d:dd:
5d:fb:f3:89:fa:5e:3d:b7:f4:f3:a8:78:62:69:61:
08:64:7d:26:e7:11:a1:4e:d1:69:cc:be:cc:51:6a:
f8:db:18:88:0c:2e:16:c4:d2:03:b5:51:4b:16:ac:
71:88:de:82:cf:ea:f3:32:92:d9:05:5b:32:58:80:
c0:45:0b:26:7a:f8:7c:1f:0c:b1:a1:af:fe:7a:21:
09:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:12:82:6B:05:12:56:B1:8D:89:FB:85:35:6F:CE:32:E5:E2:4D:AD
X509v3 Authority Key Identifier:
keyid:86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e7:b5:c0:39:d8:84:87:a7:9b:47:35:4d:2b:0a:6f:6f:7f:
24:87:4c:9a:3a:06:0d:71:6b:7a:a0:7c:d9:f2:82:04:df:1a:
6a:ac:b6:5f:4c:86:49:c6:4c:70:07:0f:a8:ce:76:52:e9:9b:
ec:c0:e7:d8:29:74:75:05:d6:dc:38:3b:02:cb:8a:db:e9:39:
3d:e0:b0:6f:d3:70:6b:60:8c:8e:a6:ac:a7:51:88:b8:57:87:
47:15:2b:27:dd:46:ee:1f:6d:f4:43:97:3c:00:5d:54:0e:75:
04:de:e8:5a:fe:8e:4b:76:65:d3:30:3a:57:52:51:9c:c8:bc:
2e:0e:18:36:ea:12:81:58:64:a2:bc:ef:fa:62:26:cc:f7:03:
08:c4:56:94:45:b5:bb:2e:04:22:97:65:d7:35:e2:29:11:09:
8a:ad:41:61:68:0d:b8:ee:91:3d:3e:29:d0:dc:39:0e:65:bd:
61:bc:fb:ea:73:5a:47:eb:3b:7c:19:e6:83:de:87:31:e3:c7:
04:ba:3a:e5:ad:9d:76:b9:e9:c3:ae:83:cb:5c:90:57:51:f3:
53:16:2a:da:20:76:6d:58:49:f6:fb:b7:d2:f9:40:1b:4e:01:
38:a3:bf:b3:a6:32:e4:d6:65:f6:01:2f:ac:34:42:f7:d7:82:
1c:61:39:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:27 2026 by rpki-client