Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
File: h5TVZDYKUh21mK7m5qL41mkhtsU.mft (raw, json)
Hash identifier: kAI2ENFnhke2M9xyhPV+peNwMCws7mhlXNoKr6PAx00=
Subject key identifier: 29:CC:6C:48:99:B8:BE:DF:7A:A6:CA:85:9C:4E:B2:27:74:02:6D:D0
Authority key identifier: 87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
Certificate issuer: /CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Certificate serial: 019D9C99F3770489FC9A335A05F7F763494D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
Manifest number: 0146
Signing time: Fri 17 Apr 2026 18:00:28 +0000
Manifest this update: Fri 17 Apr 2026 18:00:28 +0000
Manifest next update: Sat 18 Apr 2026 18:00:28 +0000
Files and hashes: 1: h5TVZDYKUh21mK7m5qL41mkhtsU.crl (hash: FAJNowrpyqPProu+ApmC9FvdALhvRvSrL21tc4Xg/ck=)
2: l_d_CxebXDc82wsd4U0BFVkGTh0.roa (hash: uFClusAny8IXHB2cwB2oabcg7BQ3SgYHOlNBk9mPDms=)
3: qGufgpnXsdA505UL9rLMl_XkECY.roa (hash: J3gwk0cVtFF6iJ602SqYnRybno+t/W1jMS3C5xgfXqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:99:f3:77:04:89:fc:9a:33:5a:05:f7:f7:63:49:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Validity
Not Before: Apr 17 18:00:28 2026 GMT
Not After : Apr 18 18:00:28 2026 GMT
Subject: CN=29cc6c4899b8bedf7aa6ca859c4eb22774026dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e2:cf:41:96:68:a7:6f:4d:40:f9:4c:b1:a0:
64:5b:6b:5d:78:fb:cc:d1:cf:89:95:68:53:22:25:
f8:7c:47:e0:ba:85:58:6b:0c:fa:ef:4c:83:c9:12:
1d:5f:c9:87:66:bb:2a:ea:71:5e:ff:86:6b:4a:df:
51:37:77:e9:eb:5c:0a:0b:3a:4c:78:43:ac:e2:61:
f6:2c:5d:3b:0f:d6:d8:2f:96:b6:6f:6d:fb:09:05:
1e:01:36:62:30:38:8b:03:c6:ce:e2:88:dc:67:fe:
80:93:40:06:a9:2a:66:61:9a:a2:8a:15:c4:34:80:
9a:b8:35:eb:ce:a1:86:7a:22:29:59:74:5d:ee:e0:
09:28:ac:fd:e0:dc:f3:5d:92:1c:15:07:10:5b:92:
2c:d1:e9:00:37:e0:73:a4:40:13:34:90:9e:35:86:
db:e9:14:5c:4d:89:df:dc:d5:cc:53:50:d3:5b:32:
2a:e9:55:ed:ab:3f:54:3a:cb:3c:f7:0c:48:e1:1c:
10:64:72:04:5f:20:ce:ad:04:64:98:e7:42:71:54:
bd:21:f5:f4:99:94:ec:c3:4c:8d:8d:27:9c:56:17:
a0:35:41:77:99:18:11:76:b7:1c:41:3b:42:21:52:
5a:76:81:90:22:07:8f:c1:db:8b:22:1c:85:8b:3b:
2c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CC:6C:48:99:B8:BE:DF:7A:A6:CA:85:9C:4E:B2:27:74:02:6D:D0
X509v3 Authority Key Identifier:
keyid:87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3c:a8:ad:0b:92:c1:ad:25:0d:23:93:e6:fa:15:81:4e:ab:
ee:ee:6e:1b:1c:5a:94:56:9a:ba:67:0e:cd:7a:70:3d:41:75:
c8:f0:1f:2c:a1:a5:b5:f0:67:8d:9e:34:2c:31:ed:60:be:e0:
42:86:2f:69:8a:00:b4:8c:08:58:30:5b:09:a8:1b:28:b9:0d:
5d:7e:95:49:a0:6a:99:ff:d5:6e:9a:cd:a3:e5:27:fa:40:23:
84:11:77:f8:14:0b:63:38:35:84:f5:f2:ad:70:56:8e:b3:1d:
13:87:ff:5f:96:c6:3e:66:98:67:ea:9b:2b:bf:89:0f:0a:00:
01:7a:50:f9:4a:f8:76:cf:f5:fb:79:a0:18:2b:dc:14:d7:ca:
fe:76:6e:8d:f6:69:9a:c1:64:a6:1c:15:5d:16:c0:5f:3d:ca:
a2:0b:c1:9f:ba:d7:6c:6e:59:0f:95:21:43:f4:bc:8b:66:b4:
a8:80:cd:98:85:5b:f4:1e:38:f7:8e:74:78:ec:52:1d:a3:17:
c0:83:14:c9:bd:45:e3:ed:aa:a2:85:c4:9a:18:8e:f6:ca:b8:
6c:6d:60:eb:f0:1c:38:fb:44:ea:09:82:24:81:5b:79:51:3e:
f6:8e:5a:66:da:e2:51:09:76:60:1f:9c:c2:c8:55:1b:5d:fa:
c4:88:58:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:17:26 2026 by rpki-client