Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
File: hNt0eyiXF6BoTNasgjB6pnuy17s.mft (raw, json)
Hash identifier: 4Javc97DK/48PcJYUR+h+nA2WNiP01L/Qa11UAxRCWk=
Subject key identifier: 38:85:0B:B9:11:10:DD:39:90:A6:1A:27:01:68:20:3F:C2:4B:B5:A3
Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Certificate issuer: /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Certificate serial: 019D9D3FE2ECBDD208088B5CC2A67C525924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
Manifest number: 1604
Signing time: Fri 17 Apr 2026 21:01:42 +0000
Manifest this update: Fri 17 Apr 2026 21:01:42 +0000
Manifest next update: Sat 18 Apr 2026 21:01:42 +0000
Files and hashes: 1: 1-3Gcx58fzra_v9eEZ6N_xRMnk-U.roa (hash: LxQsMlE6dccDgJVSFe4kQrNckGUI9bmtbjF5OIYdtrs=)
2: 4KN1agjGCetNojWRsDbUJbjhQKs.roa (hash: yTfVhH1Hf4jYfP2TiWx0oinRMtZ2QHu/x1BdH7OqRl0=)
3: hNt0eyiXF6BoTNasgjB6pnuy17s.crl (hash: ZLTBr4MECFkBP1aV4etxdwULHS5gBc7ooLsSEkYOStc=)
4: yyn2geOIU_--UUnG8pkuvnJsDpQ.roa (hash: bxmnlrGKd567WF+3ZEEy2gfmdqW2wGXYEodGeY8tXEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:e2:ec:bd:d2:08:08:8b:5c:c2:a6:7c:52:59:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Validity
Not Before: Apr 17 21:01:42 2026 GMT
Not After : Apr 18 21:01:42 2026 GMT
Subject: CN=38850bb91110dd3990a61a270168203fc24bb5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:30:b2:89:95:96:2e:59:e9:74:f2:8c:74:
93:29:ae:ca:74:7d:49:51:da:9c:e3:72:ff:60:ea:
95:64:25:b4:2b:b8:34:92:a0:5c:3d:f8:c4:12:12:
65:ea:d9:1f:57:f9:d3:fc:9b:3c:ae:9d:4d:dd:6f:
cc:01:4f:b8:a3:41:65:75:42:b9:c5:91:af:c4:13:
6c:29:3f:bb:5b:87:0d:c6:2c:02:5f:cd:7f:44:fd:
ec:d5:6f:fd:42:28:42:51:ec:65:c4:a1:46:36:3d:
bd:b9:c4:08:c2:df:83:66:fa:3a:e3:c8:dc:bf:54:
e9:0d:85:c8:67:87:cd:05:3e:8d:f2:76:72:58:79:
9d:e0:e0:c9:60:43:d9:fe:5d:87:a3:c3:1f:67:80:
27:51:cc:99:a5:86:1e:d6:7c:aa:72:ad:a9:9b:66:
70:c8:28:ff:b7:9c:42:c1:86:7c:64:6e:f1:77:89:
47:20:a3:8d:4f:63:c3:f8:83:56:14:70:16:7b:b6:
ff:58:92:7c:7b:d6:4e:b8:f7:c5:2e:b5:2b:4b:0d:
23:7c:5e:17:2c:9f:0b:1a:ea:35:a0:ff:b2:eb:2a:
8d:b3:54:ff:b9:5a:4f:f2:3f:be:fb:6a:13:04:20:
8c:dc:52:aa:5a:b5:66:3b:37:15:94:ae:90:70:7f:
f8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:85:0B:B9:11:10:DD:39:90:A6:1A:27:01:68:20:3F:C2:4B:B5:A3
X509v3 Authority Key Identifier:
keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1f:51:a7:3d:7f:bd:d1:d5:01:4e:73:27:a9:ea:39:80:fa:
a7:dd:9c:5d:94:19:c0:79:45:94:72:02:e9:68:82:cc:b1:ed:
a5:84:98:87:82:e0:33:c5:79:58:a6:b3:cf:84:a9:f2:ce:4d:
66:b2:e3:cb:14:f8:d2:a4:01:7b:36:1f:75:cb:dc:d7:6b:c2:
c1:19:5d:34:a5:72:ca:87:84:3e:7a:81:79:21:ec:ae:f9:63:
65:75:32:ce:fa:a0:d8:3d:09:fb:04:95:e3:43:c3:ae:ee:d2:
7a:88:15:79:2d:c5:2d:2c:18:4b:3a:e0:f8:09:e4:af:76:31:
b5:ae:00:ff:d4:25:a2:df:f6:85:f0:c6:6d:9c:a9:03:ce:4a:
9a:f8:fa:24:dc:e7:41:eb:11:38:c7:83:38:0c:8a:73:68:2b:
4e:13:f7:e9:c1:3e:7a:5e:4c:6e:f9:a8:0d:63:c2:e5:29:d7:
30:e4:3f:9b:4d:6f:e1:b8:28:2f:3c:fe:34:69:3f:c4:76:27:
d0:09:b4:c9:4b:f3:9a:13:e5:38:38:0d:dd:25:e9:1d:15:10:
9c:21:4f:50:15:f1:37:f9:b0:e5:0e:06:67:cd:57:52:20:fe:
59:63:49:a2:e3:04:cb:68:04:43:84:19:f5:aa:cc:33:91:b3:
de:6d:ec:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:06:01 2026 by rpki-client