Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
File: HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json)
Hash identifier: IpFHqdskdzSGRWX4FNG88do3Eg/zdfvQ7G07qLizOPk=
Subject key identifier: FD:3F:94:52:25:28:48:1A:4D:90:36:9B:49:F2:58:56:39:D9:B7:B8
Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
Certificate issuer: /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Certificate serial: 019D9999798366FFBBE9721F0EE87B68288E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 04:01:05 +0000
Manifest this update: Fri 17 Apr 2026 04:01:05 +0000
Manifest next update: Sat 18 Apr 2026 04:01:05 +0000
Files and hashes: 1: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: 3GlZzMrBcoC3gYr6vy48Ykunps5SyhfwxtbrY0QuSY0=)
2: Qq92xrncKE3gNgTmvbBvBWPB6qI.roa (hash: /9Dleb0yfYmR0zXREW6ew7jssIDQZBndb1NlB/cFqO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:79:83:66:ff:bb:e9:72:1f:0e:e8:7b:68:28:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Validity
Not Before: Apr 17 04:01:05 2026 GMT
Not After : Apr 18 04:01:05 2026 GMT
Subject: CN=fd3f94522528481a4d90369b49f2585639d9b7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f1:b2:2d:58:7b:52:b6:b4:cd:89:9b:5e:04:
8a:05:29:5b:cd:8b:89:71:75:03:f2:0b:17:3d:ed:
81:87:da:8f:16:64:94:ae:bf:d7:06:ec:2c:5e:7a:
92:5f:61:f6:aa:10:9b:02:c9:7e:a1:41:d7:05:e7:
71:41:00:b2:da:a0:3f:08:d5:e4:67:73:b4:c8:4d:
66:f5:a6:96:49:70:53:e3:ea:70:d9:e3:94:20:b6:
fa:3e:a4:07:bb:aa:7d:a2:93:4b:54:26:91:74:13:
62:01:f4:b5:f8:ac:75:35:2b:47:b3:f1:c7:59:37:
83:51:05:4c:85:92:65:38:2f:a0:bb:55:4d:aa:68:
58:57:f3:b9:fc:5a:4c:d0:49:8c:b7:a9:53:7a:9e:
1a:bb:25:c9:51:01:0f:e1:28:9e:25:4c:f0:35:0a:
30:eb:ee:3e:f4:fa:2a:9b:d3:87:51:6a:12:fc:f2:
80:5e:cf:67:ec:cd:1d:6b:36:c5:38:38:ec:81:ce:
03:94:f0:85:4f:32:2c:df:47:9a:9b:6d:7d:93:cf:
33:c6:4b:e6:13:7f:2d:df:6c:c2:68:81:1d:05:73:
df:40:53:e2:0b:a4:ad:d3:d3:24:3c:b6:0e:e6:74:
02:32:c8:90:31:e2:66:13:b1:09:4b:8b:85:72:75:
82:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3F:94:52:25:28:48:1A:4D:90:36:9B:49:F2:58:56:39:D9:B7:B8
X509v3 Authority Key Identifier:
keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:42:fb:20:22:6a:5c:77:36:11:09:31:73:7a:4a:0e:c8:1e:
1b:18:dd:85:7f:9d:1b:b1:dd:b0:58:c2:7d:d9:43:5d:a2:b8:
eb:37:cd:1e:5b:e8:ab:af:f8:70:16:c5:39:8b:0f:a7:73:bb:
6d:7d:fc:06:4d:0c:b3:4e:2c:08:d1:60:93:30:b1:8e:a0:78:
47:31:63:3f:ee:eb:32:18:fa:e3:8a:1b:b2:52:32:fd:2b:28:
a8:72:00:ba:e2:a1:86:58:a5:d7:08:d2:b3:fe:a0:94:35:42:
e1:ab:eb:3e:bb:74:1f:f4:80:74:19:8b:08:3e:b2:48:fd:aa:
99:df:33:ca:e1:19:83:e3:17:a7:1a:24:5f:2f:6a:dd:9a:63:
8b:88:28:86:93:e5:df:ce:9e:29:bb:42:48:b8:50:4f:e3:62:
24:32:46:fc:67:0b:ca:0d:9c:ec:1d:79:b0:eb:e6:6c:9b:8a:
60:f7:3d:8c:06:2a:9d:52:a9:95:c4:f7:30:95:e9:6b:12:df:
eb:ce:24:12:94:01:c7:e3:27:6b:12:17:3e:45:3c:3c:a3:7d:
6b:b0:fb:10:34:67:ec:e8:d5:23:ce:02:ec:0d:45:a6:79:be:
dc:fe:6d:55:95:3d:22:f6:91:30:d4:ba:50:52:0c:53:43:9b:
98:3e:c1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:40:05 2026 by rpki-client