Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.mft
File: hChNZ8mrr2-o_qYUKlslWMnLz3Q.mft (raw, json)
Hash identifier: wEAh/9ptw/GjiXtn44gV7d/zp1GFFkmzTt6t78t1gqQ=
Subject key identifier: CD:5B:78:4B:29:7C:1D:6C:B0:68:D2:40:EE:2D:36:0C:38:CF:FB:7A
Authority key identifier: 84:28:4D:67:C9:AB:AF:6F:A8:FE:A6:14:2A:5B:25:58:C9:CB:CF:74
Certificate issuer: /CN=84284d67c9abaf6fa8fea6142a5b2558c9cbcf74
Certificate serial: 019D9A7516D74C9A7566A1C31ACEB8401912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hChNZ8mrr2-o_qYUKlslWMnLz3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.mft
Manifest number: 12FE
Signing time: Fri 17 Apr 2026 08:00:57 +0000
Manifest this update: Fri 17 Apr 2026 08:00:57 +0000
Manifest next update: Sat 18 Apr 2026 08:00:57 +0000
Files and hashes: 1: 4dg4kAKJ8YSOGy8c68PKhEx34vE.roa (hash: ry2ttY5wtlmGli2qcFEKHyBaFD3fHmgeyUWAJ6+46jE=)
2: hChNZ8mrr2-o_qYUKlslWMnLz3Q.crl (hash: tTFjTe9Rb2BXkjR0dxDnVg8sofROkaSt3k4LK3Jx+xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hChNZ8mrr2-o_qYUKlslWMnLz3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:16:d7:4c:9a:75:66:a1:c3:1a:ce:b8:40:19:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84284d67c9abaf6fa8fea6142a5b2558c9cbcf74
Validity
Not Before: Apr 17 08:00:57 2026 GMT
Not After : Apr 18 08:00:57 2026 GMT
Subject: CN=cd5b784b297c1d6cb068d240ee2d360c38cffb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fc:da:36:1b:27:84:0a:9d:ac:f2:a8:d8:42:
6d:33:58:ca:3a:69:b6:8b:da:3f:2d:c3:34:19:5b:
38:cf:c4:c8:1b:be:61:e1:75:78:b5:d0:3d:37:1f:
fa:e9:df:60:cf:7d:d2:b9:61:31:c3:2a:71:22:53:
59:b6:49:e6:e9:90:68:70:71:d3:96:bd:13:05:5e:
23:fb:f0:d4:46:7e:cf:ce:38:92:e5:69:d0:41:95:
91:a8:ed:7c:37:f4:14:85:62:1a:d2:c1:27:bd:7f:
d5:52:a6:df:4a:78:2e:69:29:86:c8:f3:72:25:d5:
f0:71:02:d8:67:8c:a9:9f:6e:99:67:72:36:0d:49:
36:51:89:4d:48:fd:dc:bd:54:47:f9:b5:aa:94:3a:
b3:f4:15:1b:83:db:7e:49:4f:5b:1f:06:24:21:ad:
f0:f5:38:51:c4:1f:f5:85:b5:91:80:a1:9a:d7:51:
84:a5:49:31:69:9e:95:04:5a:e1:f1:6e:ae:f3:f2:
b4:27:eb:a2:54:8c:bd:d6:61:7b:5e:99:31:b2:8f:
06:d2:32:57:e8:30:42:9d:4d:a2:53:92:45:e9:8b:
8a:37:bd:9b:da:48:f5:77:dd:1c:de:10:57:f1:41:
fe:50:85:6b:fd:41:6b:8b:2b:74:3c:c6:6e:a8:59:
65:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5B:78:4B:29:7C:1D:6C:B0:68:D2:40:EE:2D:36:0C:38:CF:FB:7A
X509v3 Authority Key Identifier:
keyid:84:28:4D:67:C9:AB:AF:6F:A8:FE:A6:14:2A:5B:25:58:C9:CB:CF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hChNZ8mrr2-o_qYUKlslWMnLz3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:68:1c:88:e7:73:6d:56:5f:7c:35:61:a5:06:3e:51:6b:3d:
51:65:37:7e:9a:b0:5b:b5:05:0a:6c:d8:a2:99:d4:23:96:32:
d8:34:d8:cf:ac:e3:18:d1:47:d6:4a:32:2a:6b:90:28:e6:c9:
2a:c6:2e:21:69:cb:df:81:47:05:d5:12:41:51:78:35:92:b6:
72:2b:de:51:98:aa:1c:7f:e2:dd:37:7f:7f:31:5c:cc:2d:1b:
98:19:11:bc:ea:cd:60:1c:10:e3:17:2c:9b:99:e6:5f:b6:70:
06:a5:bc:a1:62:f2:42:b1:e8:62:80:40:56:00:39:68:29:d5:
5e:05:ca:00:43:5d:b3:bd:ee:93:f4:3c:6c:25:8f:15:21:9b:
76:6d:58:5d:ca:36:c3:4e:7f:a7:d7:64:03:22:4b:c2:66:d5:
53:43:3f:71:53:b8:ee:89:36:c6:6e:71:2f:10:8e:85:73:20:
b1:55:35:f6:c9:78:ec:6c:6f:9d:00:46:7b:1d:c2:b5:53:a5:
c7:a3:b9:f0:f3:98:f8:24:e2:d3:a4:e9:0d:be:ec:e0:95:a0:
50:0e:13:52:a1:d9:35:b1:5d:32:01:e6:55:f5:4e:07:e3:67:
00:bd:56:0f:db:e9:df:69:53:ec:50:6f:0d:fe:18:4b:87:63:
81:94:6c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:33:29 2026 by rpki-client