Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
File: HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json)
Hash identifier: 973sI30rt9MxBC9nPipLjyMIw+oo/9INAjyTJurOZx8=
Subject key identifier: 4C:55:5D:C6:2C:07:A5:CE:D5:E1:17:38:26:D6:24:F5:C2:95:FB:8F
Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Certificate issuer: /CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Certificate serial: 019D9962629D72E481492180C31F4DCE007C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 03:00:54 +0000
Manifest this update: Fri 17 Apr 2026 03:00:54 +0000
Manifest next update: Sat 18 Apr 2026 03:00:54 +0000
Files and hashes: 1: 4t1yiUQVN5Px9-wGHy62XxxqimU.roa (hash: FHoafxoTZhFU/Fxu+bGTDh9a2aT1nhPTACKs/kC0+Jg=)
2: 8jW3c1tdyMykRFAb8cKVIvXYm1o.roa (hash: Q0T2eH3RlaxZhFvfRSxmpGRJmTvjnKlI3xGp5fpQfVU=)
3: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: E8iJew7XeohbW4/7E6oe+HTS8hSGY4k1xwsXHM7M4+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:62:9d:72:e4:81:49:21:80:c3:1f:4d:ce:00:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Validity
Not Before: Apr 17 03:00:54 2026 GMT
Not After : Apr 18 03:00:54 2026 GMT
Subject: CN=4c555dc62c07a5ced5e1173826d624f5c295fb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5d:f2:7c:97:74:82:62:be:c1:7b:22:a2:dd:
3c:59:11:6f:65:c9:b3:ba:cc:d7:41:75:55:66:53:
fd:66:54:e2:8e:99:5a:5d:a8:72:db:f6:d6:67:7c:
77:a9:c1:90:1c:b8:68:05:f1:76:65:99:99:4f:2b:
3b:6d:e8:a6:f4:fd:6c:e8:aa:14:ff:96:50:13:36:
be:44:06:32:d3:6c:1b:4f:77:ba:c0:c7:78:26:a8:
cf:60:b4:b9:67:73:d8:0f:b6:00:9f:9b:00:6e:be:
4e:57:e1:36:d2:b0:78:bd:7c:25:eb:48:1a:8e:13:
e6:28:57:4c:25:0a:a9:30:6a:8d:10:77:ab:74:1f:
ef:5f:4a:1a:61:1b:7e:8e:9c:16:f7:e8:6d:10:39:
9d:03:9e:97:b8:db:81:69:67:a7:0c:54:fb:83:be:
06:f9:22:47:3e:4d:bf:4e:cd:18:2f:35:64:4f:2e:
0b:5f:b7:2b:d6:bd:72:85:8c:9f:43:2c:39:fa:62:
49:bb:22:67:10:5d:15:69:1e:b9:ae:7d:6f:8e:9a:
35:c9:be:4c:8b:40:36:8f:07:bf:bc:d2:ee:03:33:
97:49:60:cb:99:c9:99:18:15:3c:ca:9b:f7:8d:2e:
38:fa:3e:6a:dd:85:86:2d:34:34:84:f9:ea:47:d4:
f0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:55:5D:C6:2C:07:A5:CE:D5:E1:17:38:26:D6:24:F5:C2:95:FB:8F
X509v3 Authority Key Identifier:
keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d4:b0:e2:f5:3a:85:a8:ab:56:5b:be:de:73:5b:84:ff:4b:
77:35:a4:59:98:d0:02:df:88:56:c2:1b:b7:f8:ab:7b:61:ec:
10:2c:98:e9:53:c6:c0:ca:99:27:46:bb:96:25:ad:1c:9a:8c:
62:2a:57:7d:7a:65:f3:1a:f0:cc:06:d4:e2:ca:48:0f:75:68:
53:00:77:bf:e9:e2:6c:bc:6d:09:d9:89:57:44:95:34:91:4f:
72:3f:d9:07:57:26:7c:56:a2:93:a5:2b:2b:2d:02:74:21:52:
e2:bd:04:c8:93:d0:41:14:7f:4c:37:6b:40:4b:55:51:17:92:
13:e3:1d:98:ec:04:4f:cb:25:dc:00:ce:70:ea:0d:71:4b:4f:
e4:41:85:5a:85:7e:86:63:d4:6c:29:de:d6:c5:00:e5:2a:db:
ff:73:ca:c0:84:20:65:23:d9:fd:d1:2e:b4:bb:a3:0d:16:48:
d0:89:c7:eb:d6:23:66:13:aa:b4:e9:d5:78:b7:bf:d5:c2:12:
49:dc:9a:ff:c1:5b:0f:52:99:6c:79:a9:f9:38:79:e9:93:18:
c9:e9:66:1b:27:c0:73:6c:df:90:f4:04:23:7b:34:aa:1b:c3:
7b:cb:0d:2b:5a:8f:c5:9f:6b:4c:75:09:b0:a9:e1:8b:67:8a:
56:c0:f6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:26:52 2026 by rpki-client