Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
File: HJe0gj08nhIexkmCHgDwp5rrm40.mft (raw, json)
Hash identifier: OG1exwks28J5HgmfqR22L4+Hi4teewNzFSgHcQegHXw=
Subject key identifier: 81:9C:FB:7E:09:5F:0D:B0:22:47:73:41:E9:B4:71:29:77:DE:87:DB
Authority key identifier: 1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
Certificate issuer: /CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Certificate serial: 019D9999A2919D17FF7C73B3EBF5474133F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 04:01:15 +0000
Manifest this update: Fri 17 Apr 2026 04:01:15 +0000
Manifest next update: Sat 18 Apr 2026 04:01:15 +0000
Files and hashes: 1: 0hxpuIK8Xk-q0BTmptbEA31tBQM.roa (hash: F/+sSqgxCKBUwr4EismpQjVJRCU5s8RFO6y5G1id7CM=)
2: HJe0gj08nhIexkmCHgDwp5rrm40.crl (hash: EWwc51n2NrYFy5ugE9wts/Fq/XtEvumq27jkIDqOmXc=)
3: mJI9sTFN4UGhJtiQDPusSm1Vr68.roa (hash: wLOIgdPRaxsc7dyazG8dcE1RzCgvcxysuqvRPBkd3XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:a2:91:9d:17:ff:7c:73:b3:eb:f5:47:41:33:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Validity
Not Before: Apr 17 04:01:15 2026 GMT
Not After : Apr 18 04:01:15 2026 GMT
Subject: CN=819cfb7e095f0db022477341e9b4712977de87db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:00:cf:d8:9b:18:77:83:a2:bb:80:b8:8e:
5a:4d:d2:c6:0e:30:72:13:a4:8b:92:1e:ea:fb:46:
5c:f4:40:bd:87:cf:56:c3:3e:70:91:f6:6b:8e:e7:
0b:79:62:a6:8a:7f:28:bc:81:92:f8:b1:dc:9f:e8:
72:76:3c:0b:bb:2f:d0:c9:f5:fb:35:a9:14:28:5e:
1f:da:a2:1b:5f:74:8a:6b:c2:01:ce:ce:9d:be:bd:
95:d3:66:2b:9e:3d:ce:00:52:94:16:48:65:43:68:
21:fe:0b:77:82:3d:c6:a1:dc:54:cd:28:57:52:35:
ec:84:33:90:a7:4c:b3:ee:8d:60:84:cf:00:11:8b:
b3:c8:0b:1b:55:54:fb:64:14:72:a1:f3:57:cc:57:
0d:77:3e:e3:7d:c6:dc:5c:19:07:5e:ba:bd:4f:f0:
dc:37:f1:07:53:56:da:c8:ae:ca:f5:fb:91:75:df:
1c:36:ae:a1:e4:7d:59:83:cb:37:2c:bd:cd:31:6b:
ff:b8:29:72:0b:32:c3:b8:f3:1e:04:66:6b:e2:b4:
93:03:69:fa:ff:03:8a:07:72:72:21:86:fb:98:5e:
e8:42:89:24:3a:73:53:a7:5e:b6:8d:e7:31:0f:b4:
a1:a1:d4:52:d2:0f:f0:46:52:07:b9:08:5f:b0:6c:
ad:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9C:FB:7E:09:5F:0D:B0:22:47:73:41:E9:B4:71:29:77:DE:87:DB
X509v3 Authority Key Identifier:
keyid:1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a3:80:33:71:ec:29:1b:15:01:d4:71:f4:68:a0:3a:19:8d:
43:0f:df:25:82:b7:c9:9c:e2:df:34:6f:7f:d8:4f:55:50:21:
2e:21:aa:d2:2c:bf:2e:0b:92:bd:f5:59:c6:2d:8f:41:c8:38:
54:59:86:28:63:36:80:68:75:fb:d4:da:3e:b7:14:22:f3:9a:
bd:77:b2:48:ea:2e:64:c4:fe:ff:18:0c:fc:7f:97:37:cd:24:
fc:c2:02:19:18:87:6f:b4:f7:5c:c4:87:8c:20:50:b7:61:fe:
6c:8f:17:b8:89:f0:a2:1b:ff:33:c5:56:00:2e:f3:58:46:5f:
7b:b5:5d:4a:30:fb:ae:21:0b:9a:15:45:3a:5e:d2:d5:3a:11:
e0:4d:79:aa:67:cc:04:9b:80:7a:91:97:06:5f:7a:66:fd:ae:
20:ef:12:ff:c4:b5:92:ab:ea:27:af:50:14:20:89:c0:84:65:
ea:04:ec:c5:dc:65:60:a7:5c:b7:94:33:d8:97:32:5d:05:cd:
50:ea:62:d6:16:15:80:00:20:f0:c5:64:7f:0e:5e:6a:1a:10:
f1:27:04:42:cb:4e:bb:53:c2:ab:f2:02:be:55:44:ce:2a:3b:
2f:ca:c7:12:a2:51:f6:25:25:84:f3:5c:5c:b8:e5:2a:02:a8:
ef:21:86:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmaKRnRf/fHOz6/VHQTP0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTdiNDgyM2QzYzllMTIxZWM2NDk4MjFlMDBmMGE3OWFl
YjliOGQwHhcNMjYwNDE3MDQwMTE1WhcNMjYwNDE4MDQwMTE1WjAzMTEwLwYDVQQD
Eyg4MTljZmI3ZTA5NWYwZGIwMjI0NzczNDFlOWI0NzEyOTc3ZGU4N2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuakAz9ibGHeDoruAuI5aTdLGDjBy
E6SLkh7q+0Zc9EC9h89Wwz5wkfZrjucLeWKmin8ovIGS+LHcn+hydjwLuy/QyfX7
NakUKF4f2qIbX3SKa8IBzs6dvr2V02Yrnj3OAFKUFkhlQ2gh/gt3gj3GodxUzShX
UjXshDOQp0yz7o1ghM8AEYuzyAsbVVT7ZBRyofNXzFcNdz7jfcbcXBkHXrq9T/Dc
N/EHU1bayK7K9fuRdd8cNq6h5H1Zg8s3LL3NMWv/uClyCzLDuPMeBGZr4rSTA2n6
/wOKB3JyIYb7mF7oQokkOnNTp162jecxD7ShodRS0g/wRlIHuQhfsGytUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGc+34JXw2wIkdzQem0cSl33ofbMB8GA1UdIwQY
MBaAFByXtII9PJ4SHsZJgh4A8Kea65uNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xNTY0MWEtNjYxNC00NWU0LWEyYTkt
OWI5Y2Q4OTY1OWUwLzEvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8xNTY0MWEtNjYxNC00NWU0LWEyYTktOWI5Y2Q4OTY1OWUw
LzEvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqOAM3Hs
KRsVAdRx9GigOhmNQw/fJYK3yZzi3zRvf9hPVVAhLiGq0iy/LguSvfVZxi2PQcg4
VFmGKGM2gGh1+9TaPrcUIvOavXeySOouZMT+/xgM/H+XN80k/MICGRiHb7T3XMSH
jCBQt2H+bI8XuInwohv/M8VWAC7zWEZfe7VdSjD7riELmhVFOl7S1ToR4E15qmfM
BJuAepGXBl96Zv2uIO8S/8S1kqvqJ69QFCCJwIRl6gTsxdxlYKdct5Qz2JcyXQXN
UOpi1hYVgAAg8MVkfw5eahoQ8ScEQstOu1PCq/ICvlVEzio7L8rHEqJR9iUlhPNc
XLjlKgKo7yGG1g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:04:17 2026 by rpki-client