Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
File: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft (raw, json)
Hash identifier: Zl5q92g8e/Hv5KsyXfvEPPrU2FqD9n8Vkd/fi0ZCz54=
Subject key identifier: 7A:02:7A:C6:02:BC:35:FD:AC:03:81:53:E6:BE:02:03:1A:F6:E0:34
Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
Certificate issuer: /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Certificate serial: 019D996210B9CD975ECAA9856D9A1A4E5864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
Manifest number: 1759
Signing time: Fri 17 Apr 2026 03:00:33 +0000
Manifest this update: Fri 17 Apr 2026 03:00:33 +0000
Manifest next update: Sat 18 Apr 2026 03:00:33 +0000
Files and hashes: 1: 4KbAohA8ssFR1i33E3s1iD_d4NM.roa (hash: hNIZfJq4/MLB3UNEqiTbF6882A38pDgGoQNN1odn41g=)
2: 63y8SGT1xErvBSh2Z_hJttu62lM.roa (hash: JI2NXJcRm68/TBBkycOEqEDZ5p5swkLFyZRc8a9XM30=)
3: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl (hash: 2EpUBP2fwcozq30T7XRnRuGrJ8i4hj1kimPwgmLv8T8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:10:b9:cd:97:5e:ca:a9:85:6d:9a:1a:4e:58:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Validity
Not Before: Apr 17 03:00:33 2026 GMT
Not After : Apr 18 03:00:33 2026 GMT
Subject: CN=7a027ac602bc35fdac038153e6be02031af6e034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:08:ef:8a:79:b5:3f:27:ca:28:40:ef:ca:f1:
74:76:4e:13:d5:c1:de:31:1b:fb:57:d1:a3:ee:61:
5c:95:d8:ef:05:e6:2b:32:7f:68:70:f7:66:e8:36:
e8:b8:43:e5:90:ab:7b:01:0b:d3:74:0e:7d:be:a6:
87:0b:ef:a8:e0:fa:82:c1:ea:32:94:f6:97:c5:f9:
a3:56:77:c1:4c:dc:12:5a:a0:22:d2:28:4e:13:34:
1e:98:a1:55:93:6a:bc:8f:af:a0:96:14:16:2b:69:
55:29:0c:4a:9f:78:4d:97:f0:4b:63:18:84:fd:a2:
c4:b6:3e:90:60:91:3b:7b:72:a2:f5:51:dc:b9:d5:
1a:72:7a:37:b5:25:e4:20:95:5e:21:ee:91:88:36:
2b:65:7d:cc:72:dd:3f:2b:cf:8a:6a:f9:81:b6:06:
4d:c3:70:a9:18:55:d5:d1:f3:3f:f8:3a:e2:25:cf:
74:49:d1:20:1b:c5:f6:8b:34:45:06:26:25:b4:65:
2d:94:92:ce:38:5e:0a:a5:f7:48:0c:f6:6d:86:8b:
5c:88:24:f6:cf:0e:55:52:46:c7:f1:c0:e1:7a:49:
ce:7e:c9:f5:67:6e:28:42:3a:0c:7b:a0:a3:e3:60:
9f:22:d7:a2:f9:6b:c2:7d:c9:0f:e5:62:83:ea:a4:
74:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:02:7A:C6:02:BC:35:FD:AC:03:81:53:E6:BE:02:03:1A:F6:E0:34
X509v3 Authority Key Identifier:
keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:cd:aa:99:b2:67:09:6c:62:d0:cd:83:5f:18:3d:7a:48:af:
da:e5:84:de:e3:83:71:c8:ca:d7:0b:2e:6e:1e:07:5a:37:24:
1d:ff:e7:3c:70:f4:9b:33:51:55:15:80:a1:ff:c8:d5:c4:65:
33:4e:4d:40:14:d2:78:15:f3:c5:65:0f:e5:3b:b4:0a:85:d0:
0c:a0:d0:da:fc:d9:16:8b:a9:57:78:9b:a2:6d:22:d5:ae:e5:
b4:72:a9:18:40:b8:31:1c:d0:eb:db:c9:66:6e:30:65:cc:2b:
b0:3b:fe:25:f3:c9:7f:0f:91:76:ce:9c:7d:ce:d2:63:f1:da:
30:de:96:63:b6:c3:37:ef:0f:13:68:9c:d5:52:d3:14:02:17:
da:e4:91:58:b5:7b:3b:52:b5:f1:0d:4b:f3:52:01:4c:c1:99:
c0:c6:03:6e:43:9e:a8:0f:70:79:a0:86:13:02:68:cc:f8:11:
d0:69:8a:e2:a2:c8:d5:35:a3:4c:cd:14:e9:ba:44:36:7d:f2:
74:13:da:ad:88:fe:32:ad:18:45:21:52:93:c7:0a:51:49:c5:
4f:c6:a8:d8:a4:84:7e:1a:66:78:a3:ff:ac:32:f2:2d:c9:8a:
e2:6c:c8:c4:f1:32:db:6c:74:60:a8:2c:5f:c2:48:b7:23:d8:
f0:a9:bb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:59:31 2026 by rpki-client