Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
File: hGOGJiDUZ8inn49E7zW7YK-CP50.mft (raw, json)
Hash identifier: sMV71HALDseLunCaQvY+F2xiq+M0BMW3jbFBOdYeytw=
Subject key identifier: EF:C4:BC:71:6D:DA:9D:E2:04:1D:D7:21:C7:AD:88:F9:74:5A:C8:32
Authority key identifier: 84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
Certificate issuer: /CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Certificate serial: 019D9A3E7FB54D9A03DC94F985E863B3811A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
Manifest number: 0E5B
Signing time: Fri 17 Apr 2026 07:01:20 +0000
Manifest this update: Fri 17 Apr 2026 07:01:20 +0000
Manifest next update: Sat 18 Apr 2026 07:01:20 +0000
Files and hashes: 1: ao51ShN_hsLIYI5m8nig7Cs4o3s.roa (hash: JBy8r6a0LgooRemhjrW8orAn22Q6qTJMcSOAq/Cj8Bs=)
2: hGOGJiDUZ8inn49E7zW7YK-CP50.crl (hash: 1laSDLDyaSsVxS3nmD1xKfMCkXFN16RL0NFEJZme02w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:7f:b5:4d:9a:03:dc:94:f9:85:e8:63:b3:81:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Validity
Not Before: Apr 17 07:01:20 2026 GMT
Not After : Apr 18 07:01:20 2026 GMT
Subject: CN=efc4bc716dda9de2041dd721c7ad88f9745ac832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:28:c8:a9:4f:b6:37:6e:e2:4c:ea:59:a6:
09:e6:36:d0:de:9f:5e:9f:37:ad:d6:8d:bb:16:c7:
9a:0e:57:73:be:d6:cb:1a:7d:88:d2:ec:1e:cb:84:
17:e1:65:68:73:1a:17:0d:1b:b0:13:e9:b5:29:3c:
a3:52:9a:c0:19:bc:0e:d2:e0:67:15:33:e5:02:69:
53:12:ef:fd:45:2b:36:9a:f3:72:b5:be:a3:1c:e2:
39:ff:65:c5:80:1e:0d:e4:1d:43:cf:46:9c:2f:79:
49:ab:19:4e:8d:eb:18:3e:f6:58:78:fb:70:17:06:
6f:58:84:36:02:55:20:4c:50:d0:a7:08:77:d9:12:
29:1c:77:77:ff:67:8d:69:40:2b:47:a7:ac:d1:ba:
00:6e:49:5c:28:d0:dd:5b:5b:22:1b:ac:68:18:bd:
d4:b6:05:bc:f6:45:07:ab:e3:8e:7c:de:c4:04:06:
c0:00:74:fe:09:66:55:f0:d3:82:32:aa:21:02:54:
44:79:a2:09:e4:aa:c3:5d:ab:14:59:85:0d:90:f2:
f8:8d:3e:5d:c2:25:88:6f:3f:ca:f1:7a:0b:20:e9:
50:42:ee:32:a9:1d:f4:71:81:b1:85:74:d5:53:45:
10:a5:c8:29:8f:93:94:0a:09:10:14:47:16:94:02:
71:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C4:BC:71:6D:DA:9D:E2:04:1D:D7:21:C7:AD:88:F9:74:5A:C8:32
X509v3 Authority Key Identifier:
keyid:84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:8a:72:8d:59:6d:f5:5c:b9:7d:b2:63:b4:b7:ee:10:8d:72:
c1:e1:48:30:71:07:49:e1:09:a8:41:89:b5:39:83:4c:a3:9e:
56:92:91:cf:c7:d3:ba:60:3d:30:d4:68:3c:22:c5:11:1a:6f:
87:94:de:f0:1e:cc:23:a4:27:4a:1c:8a:77:83:6b:25:32:44:
6a:0a:60:65:c6:71:c7:9f:35:3b:11:ca:78:f3:99:49:44:61:
4e:53:f5:e1:26:5d:37:54:11:15:fd:17:a3:99:96:77:8c:c3:
db:9e:f7:b5:27:d8:15:87:31:48:97:e1:9b:ac:99:b8:2a:0b:
42:df:f8:f8:cf:5f:f6:d9:dd:62:91:de:bf:25:ba:96:71:7d:
6e:0f:72:d7:66:0a:9b:19:0d:a5:d2:dc:64:2d:e3:6f:63:13:
04:7f:33:4a:88:c0:65:3f:40:b3:18:4f:56:91:69:73:dd:70:
36:69:c6:b0:6d:c4:1a:8e:57:aa:db:ea:4d:da:35:ca:32:e1:
ec:25:8a:94:be:d3:b4:bc:dc:13:b9:61:04:7e:fa:d6:b3:cf:
6c:5f:ec:26:a0:f5:c5:f0:b2:df:c9:a4:7f:4d:e4:7c:10:1b:
c0:ff:b1:dd:6a:de:da:f1:20:2d:d5:14:d9:cb:0a:74:c0:8a:
71:0f:0f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:05:04 2026 by rpki-client