Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
File: H0rytHmBXwfNgun4K6sv6hP7IbE.mft (raw, json)
Hash identifier: XiCWM8O19M/kuj8CTP280f07DFg36jZi4LWqSy3ed60=
Subject key identifier: FD:E1:AA:03:AF:55:FA:82:9A:BB:B8:AE:53:21:C9:53:07:71:E0:58
Authority key identifier: 1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1
Certificate issuer: /CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
Certificate serial: 019D98863EAC86289DBBDB90699E5838811D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
Manifest number: 117B
Signing time: Thu 16 Apr 2026 23:00:27 +0000
Manifest this update: Thu 16 Apr 2026 23:00:27 +0000
Manifest next update: Fri 17 Apr 2026 23:00:27 +0000
Files and hashes: 1: H0rytHmBXwfNgun4K6sv6hP7IbE.crl (hash: w40sbeOTY1HYm2yBmlNCLL7YS2mBLcZZFIzIDEQoRRs=)
2: Vf77xukhBIpUTcfDdQGILMMSa4Q.roa (hash: tmWyKSyKboTPLB52PoBpJE8efgve3egkhQ+0cqtz0+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:3e:ac:86:28:9d:bb:db:90:69:9e:58:38:81:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
Validity
Not Before: Apr 16 23:00:27 2026 GMT
Not After : Apr 17 23:00:27 2026 GMT
Subject: CN=fde1aa03af55fa829abbb8ae5321c9530771e058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:80:48:81:f2:b5:e0:e9:69:ee:b1:57:1d:a8:
4a:81:69:ed:16:a3:ad:e4:c7:98:f3:cc:98:71:15:
d7:59:02:40:83:6e:b9:fe:e5:55:b0:80:2d:71:87:
46:7e:c5:b3:c3:9c:b3:70:c4:a4:bd:fc:e7:6d:ad:
68:fb:25:0d:41:e1:55:e8:32:10:8a:5e:69:14:07:
1f:d1:d7:d2:b0:96:66:6d:9b:d7:fa:88:3d:07:92:
de:a8:83:b4:4e:5f:35:1e:60:27:92:69:a3:92:21:
8f:de:b8:ce:8a:f8:0a:ef:80:76:4d:35:5c:a9:61:
ba:98:d8:66:f0:96:b0:0c:1e:af:a5:c2:8a:c0:ec:
3d:3e:5f:a9:64:b9:85:94:be:a1:50:8f:be:0d:4b:
f5:bc:6e:d3:78:15:f6:ee:72:0b:63:13:c8:f6:dc:
5f:19:da:cd:6b:5d:de:9b:8d:9f:18:10:95:4d:a3:
a8:0e:53:92:a9:f2:b9:df:25:da:95:51:ef:ce:40:
1a:0f:d0:0d:e0:fa:ca:e6:ee:ed:75:dd:7e:1b:d3:
f6:49:34:bc:75:ce:01:ea:5f:d5:6a:e2:2f:1b:7a:
6e:f7:98:fe:cd:37:85:b8:2e:a9:3e:71:1f:b9:99:
05:ac:c1:bc:fe:1b:30:5e:04:cf:55:23:d3:72:06:
40:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E1:AA:03:AF:55:FA:82:9A:BB:B8:AE:53:21:C9:53:07:71:E0:58
X509v3 Authority Key Identifier:
keyid:1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ce:39:3f:4f:f4:33:e7:b7:72:44:2b:8c:2f:fc:2d:32:41:
bf:2e:9f:a0:c2:1d:7c:65:ef:23:5d:20:f7:8b:bb:f9:25:3d:
ad:4a:0f:29:9a:c3:50:e5:fa:93:04:74:1f:a8:e6:20:46:80:
7d:da:22:8e:43:34:02:f7:3b:bc:1b:89:80:cc:2e:da:70:67:
e2:e2:ff:db:12:97:10:7d:4f:a1:bd:a0:09:b1:ba:23:ca:18:
fa:6b:3b:4c:d8:43:95:f4:81:ba:1a:da:be:6f:e3:ff:15:40:
1e:c6:d2:a3:26:6e:dd:ac:9c:fe:53:c3:26:55:e2:d4:59:71:
09:99:53:39:1d:78:14:a4:9e:a5:97:43:88:c3:6a:f7:74:2a:
b7:f8:2f:9e:6e:63:fd:e5:4f:9f:4b:9d:d7:53:7e:cb:ad:1c:
f3:51:f9:dc:f6:45:97:aa:fe:3b:58:fd:f1:69:3b:68:eb:e1:
96:46:92:89:f4:10:04:47:fa:9d:77:c6:10:bd:38:88:56:79:
aa:c4:2b:c0:6c:7e:8a:2d:a7:77:ca:c7:30:a7:3b:8d:88:d0:
ca:b4:bd:fb:b0:7e:95:91:3b:78:10:ae:9f:26:74:5c:f4:90:
bc:a9:67:10:a7:20:c9:aa:4e:be:12:9f:01:d0:95:02:9b:35:
30:8b:84:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:41 2026 by rpki-client