Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft
File: RHhnr-yeLyk5So9fl_kJKdkoIQI.mft (raw, json)
Hash identifier: hpaJeNg35+CGIC4RBG39/US8FVKScPBTqfwLee2Azu8=
Subject key identifier: F2:1E:8B:94:D8:A6:A2:E8:85:DA:64:F1:1E:7F:E0:42:15:2A:FD:E7
Authority key identifier: 44:78:67:AF:EC:9E:2F:29:39:4A:8F:5F:97:F9:09:29:D9:28:21:02
Certificate issuer: /CN=447867afec9e2f29394a8f5f97f90929d9282102
Certificate serial: 019D98F4EC15E299875C08A5542B41559DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHhnr-yeLyk5So9fl_kJKdkoIQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:01:21 +0000
Manifest this update: Fri 17 Apr 2026 01:01:21 +0000
Manifest next update: Sat 18 Apr 2026 01:01:21 +0000
Files and hashes: 1: RHhnr-yeLyk5So9fl_kJKdkoIQI.crl (hash: KgA25Dqu+QfexIQNKfpuq/JB/dnQJ295gUz4ZV7/Dug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHhnr-yeLyk5So9fl_kJKdkoIQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:ec:15:e2:99:87:5c:08:a5:54:2b:41:55:9d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447867afec9e2f29394a8f5f97f90929d9282102
Validity
Not Before: Apr 17 01:01:21 2026 GMT
Not After : Apr 18 01:01:21 2026 GMT
Subject: CN=f21e8b94d8a6a2e885da64f11e7fe042152afde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:57:6b:26:25:08:cf:23:75:6c:f3:2c:59:
dd:4e:58:32:98:64:0e:0a:b6:2b:ff:14:06:dd:3b:
df:4b:21:95:04:36:e2:06:a2:4c:9a:0a:a8:26:bb:
31:46:07:ff:eb:c0:45:61:d1:eb:6f:bc:bd:3c:6a:
3d:e9:b2:3e:93:c9:ba:78:33:9d:96:88:f3:69:b1:
43:4f:bd:e4:90:ba:f4:5f:c7:00:ae:67:a8:be:a4:
ee:2e:74:78:95:16:93:c6:75:3c:25:e1:24:38:3a:
dd:75:1b:f0:b4:e3:b6:d5:30:e5:b6:69:b3:bd:47:
0c:cc:46:9d:12:40:48:d4:23:a5:ae:c0:b2:33:36:
d8:4a:c1:39:60:81:20:8a:c3:eb:71:d4:da:bc:64:
4f:78:1d:88:a5:f3:ad:a6:02:c5:a0:97:8c:ab:f0:
ff:9d:6d:b1:b4:7c:73:77:88:56:d8:98:d1:6e:60:
69:e4:db:4a:d2:17:05:b1:e0:1e:1d:22:7c:4e:a1:
0e:2c:1a:c5:13:11:09:0c:1c:4e:93:39:88:1b:91:
ce:d1:76:ad:85:d1:b9:c2:c9:9a:4f:5d:66:6d:9d:
0b:7a:92:a3:e3:8a:d5:3d:6d:6f:2f:ef:d4:37:48:
39:82:83:86:7f:15:60:35:af:a3:db:ec:a4:13:8e:
4a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1E:8B:94:D8:A6:A2:E8:85:DA:64:F1:1E:7F:E0:42:15:2A:FD:E7
X509v3 Authority Key Identifier:
keyid:44:78:67:AF:EC:9E:2F:29:39:4A:8F:5F:97:F9:09:29:D9:28:21:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHhnr-yeLyk5So9fl_kJKdkoIQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e3:f9:4d:ed:49:b7:d6:48:93:43:8b:2f:ad:b9:32:9e:fc:
c2:4f:93:0c:b4:16:10:70:ad:85:e8:66:93:76:57:05:9f:31:
bc:3f:f1:cd:4d:4f:56:0a:5c:e1:f2:40:33:78:27:2b:78:e7:
93:03:53:02:75:0f:a9:d9:28:bd:87:b7:05:3a:57:bd:72:12:
90:ef:77:e4:0d:9b:82:f9:7d:a3:94:5d:65:92:ee:0d:ea:ff:
6e:64:04:79:97:28:a8:20:68:54:e6:17:30:12:d5:5f:cc:f2:
ad:7c:a0:ec:d2:ad:22:31:46:a3:ac:28:4a:b1:1e:ed:92:31:
15:be:7e:a2:31:0f:fc:d7:84:76:24:19:3f:0f:6a:82:ec:fa:
2b:d7:af:89:1d:7a:15:eb:80:53:95:16:ee:c7:eb:d9:1d:6d:
a7:80:42:ba:b8:dd:e8:7b:4e:63:59:01:75:9f:73:b0:f5:ff:
a4:52:ae:4a:18:60:eb:ee:95:ea:99:4f:14:e9:5c:11:5e:59:
9b:e1:72:93:e3:5c:a8:c7:f0:0c:2e:7a:38:bd:1d:61:21:2b:
08:84:34:1e:94:45:53:e1:c5:69:06:e8:41:0b:b1:c0:f1:dd:
41:2a:fb:a1:4a:e1:62:d6:d2:46:da:37:82:e6:52:6d:83:63:
f3:a0:bf:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:56:15 2026 by rpki-client