Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json)
Hash identifier: GHMxnl3sQhyLdQ5QybKD2pqCrrjwiPa42XlEQYGnNpk=
Subject key identifier: 18:C8:94:82:89:AF:97:56:F2:47:D2:AA:4C:08:AD:90:6A:50:C8:73
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 019D9A076664A2BE37E7F357B18AF17FC1FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
Manifest number: 0E39
Signing time: Fri 17 Apr 2026 06:01:09 +0000
Manifest this update: Fri 17 Apr 2026 06:01:09 +0000
Manifest next update: Sat 18 Apr 2026 06:01:09 +0000
Files and hashes: 1: ILRt9LkKcLV8zTDhe4daBlelpbE.roa (hash: NtW+TS7Xs6SFuc4EVBUAJ27kGuxkzyU+HkBhm6grJWo=)
2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: RLqJHAlM6gIzN7Zrt/kMNfG7ASTzkNOM94jRyGDTmQQ=)
3: T5tca3eRSBXQYZ3SqJhOW7Yc8mQ.roa (hash: cOn2EnZ6WvGENwI0qXwoWVZXLsqu0B3PPBV5nncT3Hs=)
4: aMnzI3Vlx1VkjK-AhtMje8rEUrA.roa (hash: clrVl3R15Nf5RVyElPWOOa52ljSeBdDqyIlVAivM47k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:66:64:a2:be:37:e7:f3:57:b1:8a:f1:7f:c1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Apr 17 06:01:09 2026 GMT
Not After : Apr 18 06:01:09 2026 GMT
Subject: CN=18c8948289af9756f247d2aa4c08ad906a50c873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:de:ec:ec:62:c4:b5:4d:9b:60:ce:71:94:
97:9d:ec:d7:4b:89:c8:a4:85:35:66:f1:d0:c5:f1:
aa:fa:25:8c:5e:c2:f8:f8:45:2c:45:9a:0d:0b:ad:
5d:2e:65:3e:a4:48:68:77:7c:36:0b:c8:0a:00:79:
88:10:6c:c6:83:1e:a9:65:f4:07:fa:2a:43:aa:26:
99:bd:bf:4c:b0:62:31:72:35:9e:09:49:29:ca:9f:
1c:28:8b:46:52:e3:9e:3b:05:43:e9:54:4d:18:7d:
41:9c:c4:ea:d0:e4:3f:44:ef:46:30:05:65:c0:12:
fa:3a:1a:5a:cf:e2:20:be:4a:bf:f3:d5:7a:58:b7:
79:ab:10:fd:18:bb:85:e0:5c:4c:62:4d:99:e5:f9:
07:b5:10:9d:be:19:05:c6:9b:f6:34:38:4a:66:8c:
1b:75:98:d5:3f:03:32:98:81:02:e9:31:f1:a8:82:
7a:b6:3f:36:c2:fa:bd:36:82:37:da:66:e5:ce:67:
0e:62:e8:fa:b9:58:99:5c:66:94:6a:0f:ed:9e:1d:
08:31:e3:bf:15:78:a1:a3:20:e8:0a:4b:8e:43:fb:
a5:65:77:b3:86:78:88:7c:77:64:2a:de:14:09:8c:
26:59:78:78:d8:46:5d:a3:fc:35:a6:5b:2f:96:7c:
cf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C8:94:82:89:AF:97:56:F2:47:D2:AA:4C:08:AD:90:6A:50:C8:73
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f5:b2:0d:45:c3:15:d2:50:db:11:c3:a9:5f:b0:5c:3c:a0:
25:38:1b:50:ad:50:22:3e:62:38:f1:60:24:5b:79:4c:2a:5b:
69:d6:c8:4d:77:15:bb:4f:7c:14:5f:7a:ea:01:8c:26:2e:59:
bc:03:3a:09:8b:3b:6b:bd:33:56:be:92:ae:bc:89:a6:09:0a:
14:21:ff:b2:d9:01:12:1d:87:e3:d6:b8:b4:d0:60:66:43:10:
3b:cd:cd:af:36:b4:e7:7b:e6:d4:da:c7:c7:6c:6b:01:0f:0d:
87:1e:fa:37:89:ac:1b:7d:49:78:4c:db:10:18:bb:6d:16:1b:
93:82:97:61:00:16:e9:71:4d:54:ba:ef:34:83:81:91:ab:61:
c1:15:21:f2:b5:93:bc:1a:11:a1:64:a8:1a:cb:79:b7:87:7a:
7e:71:85:de:2f:c6:fb:ec:e1:f0:fa:19:ef:49:c3:37:12:2c:
8e:21:bb:65:9f:a8:b1:b5:3f:e7:e3:3a:cb:3b:e0:97:e0:4c:
cb:b3:65:42:74:ad:9b:43:1b:62:6c:cf:ca:45:96:62:8a:77:
7c:32:fa:e5:c7:2a:c7:09:ac:f1:e2:e1:59:1a:2c:e5:2d:00:
92:18:9b:1c:aa:89:73:88:17:30:d3:e7:d4:29:cf:61:ee:79:
71:9a:9c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:42 2026 by rpki-client