Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
File: hUu3qjkIyZjePEL34YSVOLBZJhc.mft (raw, json)
Hash identifier: QCCMjwcO4CNV36sR7MHzNJaGbgsNXKKR3sglZ0BvfRo=
Subject key identifier: A2:68:F7:6C:0F:77:5E:92:3E:0F:59:5F:28:45:3C:9E:87:00:E1:7A
Authority key identifier: 85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
Certificate issuer: /CN=854bb7aa3908c998de3c42f7e1849538b0592617
Certificate serial: 019D9A0716C51F06E01303D117DC86543118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
Manifest number: 1144
Signing time: Fri 17 Apr 2026 06:00:48 +0000
Manifest this update: Fri 17 Apr 2026 06:00:48 +0000
Manifest next update: Sat 18 Apr 2026 06:00:48 +0000
Files and hashes: 1: 7MqIqmbLOZCvYlEMG9u9KyE6Ytk.roa (hash: zRxcr077zFRaZAIgIWm+iYU3FdaVL/l6dLqFNAGhIKM=)
2: hUu3qjkIyZjePEL34YSVOLBZJhc.crl (hash: xdnkSmqpi97ePHpZ7ejHlzNyVYlxmJ9ScLjnv8eh7GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:16:c5:1f:06:e0:13:03:d1:17:dc:86:54:31:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854bb7aa3908c998de3c42f7e1849538b0592617
Validity
Not Before: Apr 17 06:00:48 2026 GMT
Not After : Apr 18 06:00:48 2026 GMT
Subject: CN=a268f76c0f775e923e0f595f28453c9e8700e17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6e:c8:86:50:73:49:4a:99:aa:49:ee:86:16:
a8:67:76:bd:0c:52:42:25:41:c0:5f:4d:5b:62:2e:
4c:3d:08:ac:3e:5c:34:4c:e3:5f:a7:2b:38:2d:fa:
f9:83:cf:f8:70:35:f4:36:39:90:74:e8:f7:a0:3e:
72:44:92:f6:b2:6c:ca:2b:56:06:c7:b0:62:07:6d:
0d:aa:dc:d0:b8:c0:b0:9f:43:25:30:b7:ad:28:e9:
12:cd:6b:5a:d3:2c:b1:16:46:ab:51:a6:d0:7f:cc:
fa:51:72:9a:56:07:ad:4a:16:2d:14:6a:a7:c2:ef:
2b:0c:08:57:76:bd:68:97:e0:d9:d4:33:85:17:c7:
67:e0:99:54:7a:10:2e:f9:b5:9c:e4:38:f6:d3:a8:
f6:97:6c:d3:ab:05:f7:09:d5:c4:bd:cb:fe:09:d7:
ca:2c:c6:64:16:e6:a1:5c:cb:44:6f:90:72:8e:06:
d2:26:af:ae:43:d7:e9:d1:59:0a:0f:58:f1:7a:a4:
dc:cf:27:21:f7:2d:22:33:b7:34:e9:f3:0c:56:0b:
58:61:c7:f7:a4:5f:39:88:7c:df:7b:28:36:49:30:
fa:33:e1:0a:7f:83:62:8c:cd:31:58:5e:c4:40:2d:
d5:96:52:c1:49:1c:9f:a5:cd:a4:c7:23:ac:c1:f4:
53:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:68:F7:6C:0F:77:5E:92:3E:0F:59:5F:28:45:3C:9E:87:00:E1:7A
X509v3 Authority Key Identifier:
keyid:85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:93:72:a5:9a:9c:20:f2:e7:d2:45:d7:26:2d:01:26:38:8a:
77:ce:64:dd:12:ed:0b:0e:54:8e:44:94:0c:82:e3:45:0a:fc:
53:95:ff:d5:f3:ec:a1:bd:cb:62:34:d4:e6:74:7e:6e:75:3a:
cb:98:b3:7f:73:8e:0f:de:59:ee:e7:c9:c9:90:23:f8:0b:ff:
94:07:a7:38:8d:ac:99:a1:3a:59:15:13:5e:7c:e6:bf:ca:39:
fc:49:26:e4:b4:86:15:fb:f8:05:8b:5e:77:85:e4:38:e1:94:
61:3e:88:b8:dc:50:e7:7b:f1:33:62:02:24:80:be:5e:43:75:
30:68:c5:72:65:d7:73:1c:07:3d:21:39:b9:b0:a6:d4:a0:5b:
b3:58:56:01:aa:69:66:93:b3:b3:86:8c:1b:95:62:ff:ad:d4:
65:10:77:70:85:2e:84:1e:e9:1d:6f:ff:9f:27:3e:8c:a7:50:
c1:d3:d5:4d:ea:4a:5e:63:43:b9:bb:39:63:07:b4:78:ff:ea:
67:6f:53:4e:e6:7f:77:72:08:43:f3:eb:a0:1b:53:b7:38:3d:
c0:68:10:97:a2:35:ab:81:e0:af:b7:bc:32:80:af:47:a2:2b:
5c:8c:67:10:01:dc:09:25:4e:01:8d:4a:5a:ff:55:86:44:b9:
f7:3a:bd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:21:19 2026 by rpki-client