Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
File: RFHoPa4So3HB3UnbNNm9Uqloi0o.mft (raw, json)
Hash identifier: 8Ez/Kx+8VNXA1tnMxxgsN8LQvU8L7am0U5w8Xi3czL8=
Subject key identifier: C5:FB:84:06:3C:7F:89:CB:60:DE:79:7C:06:3D:5E:99:4C:FE:D3:C3
Authority key identifier: 44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
Certificate issuer: /CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Certificate serial: 019DA48B65A48D95BA62A65966B7A9EBB75F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
Manifest number: 0B2A
Signing time: Sun 19 Apr 2026 07:01:31 +0000
Manifest this update: Sun 19 Apr 2026 07:01:31 +0000
Manifest next update: Mon 20 Apr 2026 07:01:31 +0000
Files and hashes: 1: 7hkN41FQK4rNVtwj2BraoZnJuqg.roa (hash: 5m1MRTp35SIueLauNwTAW0LsW5mYAj38kHx8oT3d5Os=)
2: RFHoPa4So3HB3UnbNNm9Uqloi0o.crl (hash: p4RT4OxnKV0gqw9tN/PveP9ZHO7z6NnUHuwSO5ijrVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:65:a4:8d:95:ba:62:a6:59:66:b7:a9:eb:b7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Validity
Not Before: Apr 19 07:01:31 2026 GMT
Not After : Apr 20 07:01:31 2026 GMT
Subject: CN=c5fb84063c7f89cb60de797c063d5e994cfed3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:af:61:f8:a5:45:b9:30:8d:d5:10:7a:6f:
f5:06:cc:1d:00:dd:8e:b2:14:62:58:07:e8:37:4b:
92:4c:bc:ee:45:8d:5e:4f:0b:ec:47:e0:87:ec:16:
e7:24:9b:af:73:ad:93:4d:81:01:c9:7d:d5:bc:66:
04:b5:db:f7:3c:69:8c:8c:02:d3:bc:26:b3:f5:7c:
27:0d:d8:be:50:37:9b:e0:b4:62:f9:e0:f3:d2:0e:
ca:2b:7d:51:f7:b2:fa:76:33:07:05:f8:ee:8d:57:
8e:ae:ee:18:15:1d:db:f2:a2:ab:13:e1:b3:44:31:
6f:3d:82:c6:6d:2d:c2:74:3b:50:49:82:0a:ee:ee:
ad:36:9e:83:ff:0f:c2:93:27:ef:77:ff:79:67:0c:
a2:c0:fa:6b:da:44:d8:9a:1e:46:67:b6:32:a2:e8:
a9:04:6f:a3:d5:b4:a4:9e:c2:03:0f:ac:da:a3:fa:
24:b8:d3:cd:61:8b:93:e3:1f:e6:bb:3d:f4:c5:16:
a8:2f:91:d7:b8:ef:58:25:5f:6b:5d:fd:46:47:69:
65:e0:99:f8:00:60:9d:c0:46:fd:8e:3d:66:22:ca:
96:4c:06:0e:55:cf:44:c6:09:9b:7f:27:d2:59:c8:
73:66:75:fd:7c:be:f8:24:6e:d2:93:87:49:29:24:
ec:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FB:84:06:3C:7F:89:CB:60:DE:79:7C:06:3D:5E:99:4C:FE:D3:C3
X509v3 Authority Key Identifier:
keyid:44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:37:00:3d:1e:f4:88:53:56:20:3f:8c:d7:12:68:36:57:21:
ce:48:b2:4d:89:95:39:05:5f:4e:e5:df:1f:fe:f3:ed:8f:9e:
c7:ca:4d:b5:1f:3a:ad:e3:da:d8:a3:4e:1c:2b:7a:3a:09:07:
b2:55:50:24:9b:04:44:a8:e8:16:85:6f:f9:09:b3:fc:0d:73:
f4:fc:95:ca:2c:20:e7:a7:24:b1:20:78:29:7d:11:cc:ac:b1:
81:b1:bb:11:39:77:36:7f:b4:28:8a:ab:ad:94:bb:c6:dc:36:
4b:f9:49:13:f8:f6:4b:28:56:77:79:a4:7d:51:8e:f0:e0:e8:
22:db:8a:26:13:5a:c6:53:41:84:46:ff:12:dd:be:85:0b:14:
d3:b4:cc:5f:05:e3:d0:7e:18:54:ad:13:06:29:54:0e:63:3d:
59:19:bc:91:03:97:7e:f4:40:fe:f9:d8:0a:a8:0e:18:c6:e1:
7e:4f:97:df:de:2c:0a:d8:a1:ba:5b:99:16:54:76:51:b0:b2:
40:05:cd:50:ca:d5:fc:96:f8:e2:00:cb:60:39:b2:b7:cf:53:
a2:87:7b:8b:98:8c:4b:fb:4c:e6:fe:04:98:fc:d7:ab:3b:35:
eb:b7:72:e3:9f:6a:aa:89:d2:e2:f1:a1:fa:7b:f1:33:81:5e:
6e:28:69:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:31:31 2026 by rpki-client