Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
File: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft (raw, json)
Hash identifier: kz3wfkZcxnBeqUG/nTxNzoN2zZBIJfubqP6Koxa8bJU=
Subject key identifier: AE:BB:95:6C:1D:9C:60:B7:B1:92:6D:F5:D0:08:10:AF:77:37:8F:6E
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial: 019D992B3275BC4D7F47D242407F4B93C2C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 02:00:38 +0000
Manifest this update: Fri 17 Apr 2026 02:00:38 +0000
Manifest next update: Sat 18 Apr 2026 02:00:38 +0000
Files and hashes: 1: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl (hash: 7fAxg3XRWj6LgD15PMIT4v8fOVo7lqEhm4amz0jzKGQ=)
2: lFgdap73IKN-x6XHvGiMEA7qWxg.roa (hash: Cy3+NfE+G8o591s23SgJa1A+OW1ox1rr66Hm02Ee6OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:32:75:bc:4d:7f:47:d2:42:40:7f:4b:93:c2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Validity
Not Before: Apr 17 02:00:38 2026 GMT
Not After : Apr 18 02:00:38 2026 GMT
Subject: CN=aebb956c1d9c60b7b1926df5d00810af77378f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a8:de:02:de:2f:62:65:1a:ef:dc:aa:da:e5:
47:d6:c9:fa:ef:2d:92:d8:ba:f6:74:95:dd:85:7c:
16:dd:bd:e4:c1:34:5f:6b:a8:23:79:f1:49:47:57:
0e:9b:c4:de:ce:2e:95:a0:f4:50:97:2c:8e:9e:bf:
40:0a:78:e5:11:3a:6f:01:9c:ef:2d:df:1c:1d:92:
03:d2:10:28:48:03:4e:39:06:74:97:36:6d:d9:cf:
f9:ec:45:ef:93:58:ce:b3:5f:25:3e:c0:6a:9d:2f:
cc:2a:47:38:53:d6:11:13:dd:82:0d:8e:85:a2:3f:
90:2d:ad:c9:f3:98:a3:dc:88:e1:5b:8e:bd:e5:18:
e2:e3:fb:e7:44:bb:10:fd:4c:38:f1:d4:62:ad:14:
1f:90:3f:13:e7:4a:d1:b8:e5:db:f8:17:2e:90:ac:
d9:43:a1:f5:62:fd:ac:3d:63:58:4d:bd:e9:92:88:
18:9c:1e:e5:b4:09:50:9f:9f:5f:01:7c:81:0d:56:
67:45:85:14:54:2d:1f:46:09:f4:6a:7c:d4:13:4b:
4a:32:99:a8:5b:a9:b2:2b:f3:61:6e:31:a1:35:67:
62:56:b1:11:5c:8c:ea:24:ce:0e:79:d8:9e:16:87:
1a:cb:ad:29:9e:78:ac:e7:ba:c7:8d:33:9d:ee:10:
f8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BB:95:6C:1D:9C:60:B7:B1:92:6D:F5:D0:08:10:AF:77:37:8F:6E
X509v3 Authority Key Identifier:
keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a9:88:5a:e9:b4:5d:76:33:f4:df:7d:aa:7f:09:b9:7b:ec:
fb:dd:fb:7a:17:39:78:00:ec:57:8d:df:32:20:97:b7:c2:a9:
f9:7c:ec:d5:0d:36:3d:b2:e0:15:7f:cf:d2:4f:0e:b3:b8:ed:
60:d7:24:e6:68:c4:02:fa:ea:9c:65:ec:46:4e:f4:f5:0a:1c:
cd:58:ac:6f:2a:1b:74:b6:dd:1e:8a:30:06:9e:d4:99:80:3f:
f0:f5:48:5b:1e:3f:31:81:bd:1f:4c:37:09:05:35:35:51:2f:
2e:8a:a9:d9:43:d1:c7:0f:7d:c8:0f:ff:68:52:4e:bc:71:72:
60:f9:cb:65:78:1d:f2:64:80:f7:6a:41:8d:4d:d3:2c:45:8a:
a3:c1:ce:7c:1b:83:1d:14:9c:41:ba:ab:0d:cb:f4:bd:21:27:
58:90:c8:5c:b3:c5:23:48:a1:fb:ea:5e:8a:5d:c0:4d:60:21:
0f:7a:14:d5:66:37:6e:46:94:9f:58:cc:9d:05:58:83:5e:26:
fc:5b:57:a7:0a:92:c9:1b:eb:c9:09:9b:5f:2b:7a:67:22:0f:
36:14:9c:71:76:4b:a7:3a:f1:07:52:dd:5c:db:c1:b2:8f:6c:
6e:ca:f2:68:95:c2:67:ed:d5:4e:ff:b3:76:44:7c:4a:e7:29:
ad:14:0e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:39:53 2026 by rpki-client