Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
File: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft (raw, json)
Hash identifier: x6fPjk0tqQyxF5vsdb2/4zVv0WODuQvebkUEyGUFR2Y=
Subject key identifier: 64:71:CB:93:D7:06:64:B3:D7:E5:A2:52:AF:0B:4F:99:1D:F5:8D:69
Authority key identifier: 85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA
Certificate issuer: /CN=85916be7e63cfd8c8b77c0588d12694f16b14cda
Certificate serial: 019D9AE2C76BBBDDA203534E1600A9AA34F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 10:00:46 +0000
Manifest this update: Fri 17 Apr 2026 10:00:46 +0000
Manifest next update: Sat 18 Apr 2026 10:00:46 +0000
Files and hashes: 1: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl (hash: WxBCk4w7CHTMc7mK3P5yOPl7YcN/sD/asXN/YNYHdI4=)
2: nE7q5cWQst1PSqVDsLlOU6ye4Bo.roa (hash: VwaGIZ+yf1ZIOUOKEz3bZkTWkr43RISg2q2l8GV2Ibo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:c7:6b:bb:dd:a2:03:53:4e:16:00:a9:aa:34:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85916be7e63cfd8c8b77c0588d12694f16b14cda
Validity
Not Before: Apr 17 10:00:46 2026 GMT
Not After : Apr 18 10:00:46 2026 GMT
Subject: CN=6471cb93d70664b3d7e5a252af0b4f991df58d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c1:8a:0c:3e:4d:9e:56:09:6c:81:7a:6b:8c:
25:c5:0b:84:6f:e0:6a:b1:99:df:ea:47:56:ed:d3:
6c:4c:fb:97:63:58:a2:e6:5b:33:fd:7c:81:87:3c:
53:20:72:15:eb:28:9f:5c:ab:ad:5a:32:d7:d1:af:
f4:2f:31:b3:2a:c4:d1:1c:ba:f2:29:58:0c:70:c4:
6b:7a:8e:2f:c5:08:2e:87:af:44:a1:3d:b6:9a:16:
bd:99:05:35:5e:1c:1e:2a:92:f1:40:98:6a:5c:1f:
ef:ef:f3:a8:b8:da:15:94:5b:77:5f:3b:ec:c9:26:
ff:30:db:e7:d3:0a:ef:f4:d8:e8:23:2f:07:ea:c0:
0e:19:d5:75:83:25:d8:86:ac:0f:a4:69:fb:ec:ac:
e1:a9:9e:8b:38:92:e5:c3:ba:fa:5c:8b:de:44:d5:
01:91:70:cd:22:71:57:bc:e4:c8:93:26:4e:b8:86:
bf:8c:a6:a8:97:73:48:da:24:19:3a:8d:54:36:f5:
32:a2:16:b2:a0:4f:06:91:72:2c:88:c9:a1:c3:f8:
a0:9f:7f:5c:17:0d:ad:00:7e:48:b5:ff:05:7b:f4:
7d:39:c6:20:a1:d1:58:bb:3a:8c:87:87:36:f9:72:
21:23:8c:b5:6b:66:53:e6:a4:1f:f5:04:c5:af:d3:
d4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:71:CB:93:D7:06:64:B3:D7:E5:A2:52:AF:0B:4F:99:1D:F5:8D:69
X509v3 Authority Key Identifier:
keyid:85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:cf:ca:92:13:fb:3a:70:a7:fe:30:23:ee:2e:8e:9a:8c:7d:
56:ce:29:14:3b:bb:a4:19:07:3d:a3:8f:bc:e1:56:87:e8:58:
63:d7:a2:ef:a7:f4:cb:3e:c5:b6:2c:cb:84:10:51:9c:6b:d0:
a4:02:a0:73:7a:24:3a:f0:27:19:49:aa:72:56:19:75:1a:09:
0a:53:91:63:90:a3:7c:28:2b:3e:5a:db:c3:b5:22:6a:93:df:
9c:37:67:a1:0e:44:fb:1f:56:70:07:2f:b1:5c:56:9a:a9:60:
c1:a1:01:c3:b2:53:c0:83:3e:f0:db:54:01:24:b9:f9:2d:58:
63:03:f0:29:89:5e:30:ec:cf:df:ab:c3:66:dd:ec:ce:51:06:
c9:a3:df:3d:25:2c:e0:8f:de:5b:8f:24:4b:51:14:38:93:47:
90:d0:27:72:a3:38:06:00:4a:14:b1:8d:36:b2:7e:67:91:42:
1d:0a:de:e0:03:54:15:f2:ec:00:4c:45:a0:70:26:f2:0b:d5:
77:f9:8b:ab:13:5e:fd:2d:71:22:d8:31:a6:4d:bc:6a:88:5c:
54:32:99:01:a0:83:44:33:13:c2:57:b6:f9:db:f8:7e:0d:17:
b3:f2:6e:35:d7:dc:02:61:21:7e:c7:3c:f2:b5:99:62:26:a1:
31:f7:5d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:20:50 2026 by rpki-client