Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
File: hX9MEi5PjGAfIcXIaHFtRgidheE.mft (raw, json)
Hash identifier: DRUQDwdEl1xbOEpu9XRM3bBQgQdPPqKnUfciYhr5hp8=
Subject key identifier: F6:F0:46:90:48:7A:E6:87:CD:BF:EA:30:6F:37:79:CD:07:28:6C:F5
Authority key identifier: 85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
Certificate issuer: /CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Certificate serial: 019DA309FE272A9F3D0FBFE7B7EFB49BD7E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
Manifest number: 0D8E
Signing time: Sun 19 Apr 2026 00:00:34 +0000
Manifest this update: Sun 19 Apr 2026 00:00:34 +0000
Manifest next update: Mon 20 Apr 2026 00:00:34 +0000
Files and hashes: 1: VBLtb5anXu8mfDZEd2sf0Q3rh38.roa (hash: ZdPYXywTN4OXgthFTsawnGv2wOYDeomubZS+6zVQngE=)
2: hX9MEi5PjGAfIcXIaHFtRgidheE.crl (hash: ++hcl6ifjCqt8UrjejaGzapMPwMZKZASrSzzMnp5cFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:09:fe:27:2a:9f:3d:0f:bf:e7:b7:ef:b4:9b:d7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Validity
Not Before: Apr 19 00:00:34 2026 GMT
Not After : Apr 20 00:00:34 2026 GMT
Subject: CN=f6f04690487ae687cdbfea306f3779cd07286cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:2d:4f:c1:90:b8:cc:bb:01:b6:41:c6:6d:
e8:03:3e:7c:d1:7e:4b:d7:e4:1d:b7:f9:9d:90:bd:
2f:67:a3:56:ef:81:57:f2:c2:8b:ae:2a:a7:6d:2c:
4b:15:9f:2c:ff:c5:17:4d:d5:19:c5:c5:0c:c2:b5:
cd:7b:ac:5a:92:b7:4f:91:4f:35:41:69:a1:f6:b5:
56:77:a0:56:03:7c:fa:ba:b6:e2:1f:a7:a9:2e:a5:
a7:32:0c:b7:ca:36:fa:ef:4d:69:67:f2:44:7e:e1:
ce:37:86:3c:30:b6:66:bb:cf:e0:48:71:c7:37:87:
fb:0c:d6:6e:cb:bb:a5:2b:34:db:ff:b0:b3:6a:01:
a7:bf:78:c7:b6:c1:73:fc:a8:db:54:f3:d9:5c:5e:
b3:ea:c8:7c:fd:e1:cd:9e:80:dd:e9:bc:4f:e1:08:
5c:99:a1:92:dd:5a:b0:59:6b:4f:c3:4e:0f:60:68:
5f:05:5b:2d:0e:78:50:6f:05:50:d9:79:ef:2f:41:
2c:bc:89:16:08:89:c8:55:16:c5:11:2d:3f:e6:de:
49:1e:31:77:1b:02:8a:cd:0c:6f:2d:fa:68:3b:49:
bd:90:da:26:dd:aa:bb:7a:45:3b:d5:71:2b:16:5f:
7e:69:75:f8:d6:f1:cc:87:35:fc:35:22:af:b8:c1:
93:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F0:46:90:48:7A:E6:87:CD:BF:EA:30:6F:37:79:CD:07:28:6C:F5
X509v3 Authority Key Identifier:
keyid:85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:cb:d0:5b:a6:01:b6:32:3f:26:a0:d6:76:b6:fa:36:f3:f3:
f5:46:2f:65:0f:99:9b:bd:cc:da:61:9e:63:0b:b9:53:35:1e:
ca:21:6a:8b:fc:8a:47:ab:ad:2f:b7:e3:f8:d7:49:2c:12:33:
7d:bc:f9:fc:ce:42:ba:b8:f6:1c:39:a4:8d:99:1a:5d:a5:40:
b7:b9:44:d0:0a:87:ec:d6:e3:09:4c:59:4f:4a:4e:1c:a4:6b:
a8:ef:5b:41:be:3a:fb:c0:39:9b:cf:7d:94:05:29:ff:a0:18:
1b:3a:ba:82:23:3f:fe:91:49:03:7d:06:83:c3:b1:44:e1:ce:
b2:9f:62:92:a6:38:62:78:1b:c3:cc:94:8d:79:65:44:35:bd:
cc:82:ce:3a:a1:24:b5:e9:c7:20:4b:b3:fe:d7:7e:f3:3d:79:
57:6e:ed:28:e0:d9:4c:bf:82:5d:1e:c4:4a:40:91:8a:d7:f5:
96:9f:44:45:90:dc:61:86:ab:b6:37:9c:1a:d7:60:5d:3b:df:
4d:ce:d2:8f:bb:fe:77:2b:e3:a3:b9:ac:32:33:32:6d:87:9c:
34:56:31:71:51:00:f4:4b:fc:d5:00:5f:0d:ee:35:d7:c8:64:
ed:ae:61:0c:5c:44:b9:04:5f:1f:aa:7a:18:d0:6c:83:f6:1d:
ba:6b:f5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:25 2026 by rpki-client