Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
File: H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json)
Hash identifier: SQuDWSvE+E/ZaocO1vLLsH5IsdRQTMvsuA6PIzmI41I=
Subject key identifier: 69:48:FB:30:0B:77:49:DE:2F:CC:28:7A:F3:C9:0C:2A:E2:90:8E:50
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 019D99622CBEB95B6C489F867447AD908175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
Manifest number: 134B
Signing time: Fri 17 Apr 2026 03:00:41 +0000
Manifest this update: Fri 17 Apr 2026 03:00:41 +0000
Manifest next update: Sat 18 Apr 2026 03:00:41 +0000
Files and hashes: 1: 2sAFd_2T-QSzjwb2W27Kt8rE6fU.roa (hash: dj9SKHwvFkDv++RY82DTGyA13Fg+Qhu+MtqHoiJGTCM=)
2: BKvtDw_ImhwxFNI1ekkbNYkUXwk.roa (hash: /VZVAuv74zBcHkw4LlrMbR/O9CrhLBCzyGy9tiiwFV8=)
3: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: /rMW/HqT9+AlfFk6cmKgBlcMGYmEXwtP0f2n5n/F20Q=)
4: L-HaZX9usmOHR6Pjk5otTPA1E78.roa (hash: /WFLFbwadanJe6aEYwFifcAD7b8Cq5KJxqbQIlZqM3E=)
5: UNn5xwOI4pjWBM6seGSkeIWT0Nc.roa (hash: t97vMIzTWrcDPs3sy3oo5iwIaLusws7qeRkc875GNOM=)
6: ftINbgTGX7o6dou2oYKs0I7El3k.roa (hash: jNNcSKLkF+5io94CcEYFYhsKdZJ9Jwyes5nzKJmJiP8=)
7: iyhjc5phndkfHPAS-mJffX2oKQ8.roa (hash: An3uftXXHdR16RwQ6iTIEtnf1eCcuaLyKpysOrsvtMU=)
8: rCmOJaiPm10i_Ntu2MdzaI9ze6U.roa (hash: swhB5WKc0D5wVrqnsiWG0FRIgd/l0/nxiZL6cviDAgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:2c:be:b9:5b:6c:48:9f:86:74:47:ad:90:81:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Apr 17 03:00:41 2026 GMT
Not After : Apr 18 03:00:41 2026 GMT
Subject: CN=6948fb300b7749de2fcc287af3c90c2ae2908e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b5:85:d4:93:4d:b0:fb:f9:86:ee:98:b4:4c:
e5:79:65:c1:d0:53:fe:58:6c:58:32:5d:9c:23:89:
b0:96:d3:51:c4:6a:70:c3:15:93:f4:ee:0e:87:1f:
47:2e:94:e0:bf:29:b5:17:4d:f5:a7:0e:fe:16:ef:
68:3d:09:fa:f8:04:04:2c:2d:b7:54:23:99:4d:44:
28:4f:91:0d:30:47:39:30:17:b6:79:0e:d9:15:f6:
99:e0:94:65:c3:38:13:ca:4b:ff:65:c0:8b:36:44:
d3:ea:43:12:0d:34:42:f1:c7:b3:f1:ac:55:17:d2:
1e:b2:2b:38:5b:dc:9b:66:a5:62:60:b1:b0:49:a4:
ed:08:07:c7:9c:28:7a:f3:c7:99:41:14:1e:e3:bc:
53:65:11:bb:fb:17:a0:1f:e0:2b:df:0e:63:8c:06:
8b:5c:f0:5a:a6:2d:e3:1a:0e:f0:9e:a2:95:e6:82:
f4:cb:74:6d:75:8d:07:36:a9:17:b6:9b:dc:0e:08:
91:af:d5:db:df:7b:0b:b3:94:a2:1c:f1:9b:eb:04:
01:e5:16:3d:eb:da:f8:4f:fb:20:c3:a0:6d:9f:93:
1d:d8:2e:91:f5:a9:36:19:67:07:ea:98:e9:22:a8:
b1:7e:26:2e:40:27:95:02:be:91:6f:6c:13:da:70:
a8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:48:FB:30:0B:77:49:DE:2F:CC:28:7A:F3:C9:0C:2A:E2:90:8E:50
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ce:20:75:99:88:04:b8:0c:56:26:69:a5:1c:cc:e1:6f:dd:
9f:82:37:17:2c:be:5f:4b:dd:33:a4:f1:78:07:c0:69:0e:be:
5f:b7:cd:6e:57:cf:c3:14:c2:cc:b2:5d:6f:72:a1:04:79:37:
70:8b:7d:73:c3:eb:1b:14:b9:9b:26:9b:35:63:92:28:41:df:
28:3c:35:ba:64:15:b1:5a:ea:76:bf:40:b9:68:d0:64:be:24:
b9:5d:3d:1e:19:04:72:a9:d5:b7:79:cb:61:f2:52:6b:e8:c6:
1a:a6:03:70:47:08:42:fe:ab:16:d1:9c:c0:7e:14:c2:72:68:
db:47:fe:f7:51:23:36:b6:0f:38:18:29:24:61:f0:10:20:f8:
94:80:83:3e:3c:f9:a4:33:76:93:94:3a:0d:5d:11:d2:65:88:
e9:7e:02:8a:59:7b:67:15:88:f1:28:bc:06:43:37:ce:03:fe:
44:f8:ec:34:7e:35:02:f6:7a:c7:6f:a7:ad:c6:1e:66:97:a9:
27:2d:a3:a7:96:9d:e8:a1:12:a4:32:6a:cb:0f:2e:2d:ff:e5:
fd:66:6c:9c:e2:e2:02:1a:62:bd:65:26:f3:77:cc:1f:3d:ce:
41:b1:eb:42:81:a1:8c:de:9c:8e:9e:c5:ed:90:bb:28:0d:50:
d6:63:b9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:01:17 2026 by rpki-client