Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json)
Hash identifier: LWQoj9nCUHB4SVDIGLOMFSVNwNwYSe4Ys0A72yTyktk=
Subject key identifier: 5A:31:BE:2E:F8:CF:E5:7F:CD:6B:A7:62:CA:E2:3E:55:80:AA:46:2F
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial: 019D98189D066B2BD1B3DC5BA385E0DB49EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
Manifest number: 05C8
Signing time: Thu 16 Apr 2026 21:00:43 +0000
Manifest this update: Thu 16 Apr 2026 21:00:43 +0000
Manifest next update: Fri 17 Apr 2026 21:00:43 +0000
Files and hashes: 1: EXFjqp1pXGSV5jmx4tb-VicHFJo.roa (hash: SAiHY7qAn6jJFUL6Y4lo8wfyaergjigidCjHrKuL8KM=)
2: TcfDrpaktt6ck5dfzSZX1rUU-3o.roa (hash: IMmbj46lmVM3D8aBLL2Qo1JPLTBEevvdt670OHWqbPA=)
3: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: 8rgwtVdh6qbNKCrHHBboCU3Nl6mr4H5yV0pwOxXWL44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:9d:06:6b:2b:d1:b3:dc:5b:a3:85:e0:db:49:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
Validity
Not Before: Apr 16 21:00:43 2026 GMT
Not After : Apr 17 21:00:43 2026 GMT
Subject: CN=5a31be2ef8cfe57fcd6ba762cae23e5580aa462f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:22:f1:42:68:d8:a2:99:a9:b2:80:4a:e0:26:
a9:65:f6:a2:8d:3d:a5:42:d9:42:55:f9:d0:08:bb:
bb:bb:67:61:03:be:3b:65:08:4e:9b:48:7d:50:80:
0e:72:fb:4a:87:0a:8c:00:45:63:da:92:a4:71:89:
f0:17:3a:b3:61:fa:58:25:67:99:87:a1:52:91:ed:
55:d6:fe:3a:8f:49:9f:60:af:68:cc:15:e4:82:5b:
cc:4c:cc:5d:74:a5:65:2b:54:94:a1:cb:67:a9:4b:
69:f7:f3:35:b1:16:bd:1e:ca:af:6a:ab:ef:8b:9b:
54:66:e9:af:2d:bd:97:3e:ed:71:69:cc:11:d6:3c:
ff:cf:2e:7f:28:b1:ff:e8:da:62:35:e0:80:02:60:
89:a0:ce:f7:77:0c:3a:c7:ee:5f:9a:3f:7d:c2:4b:
2a:ce:b5:14:da:2c:e7:41:19:6f:36:c0:a3:ec:ab:
bd:1e:71:23:a1:1b:05:5d:16:0f:87:33:c7:2c:fd:
c5:a7:52:3f:96:f9:5e:ba:05:56:c0:99:6f:b3:36:
9d:85:d9:35:31:ae:ec:83:41:8d:53:4e:f8:f8:7f:
4a:33:9f:e0:d5:8b:5e:0a:24:2d:0c:4a:26:7f:db:
a3:26:57:2c:4e:ff:ee:a0:fa:cf:de:86:ca:8e:34:
59:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:31:BE:2E:F8:CF:E5:7F:CD:6B:A7:62:CA:E2:3E:55:80:AA:46:2F
X509v3 Authority Key Identifier:
keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:05:1a:02:ee:bd:bb:2a:c2:b9:f4:5c:4c:c1:07:10:d7:df:
2e:7f:bd:8b:e4:27:9c:f4:2a:09:52:ff:3f:cf:de:73:8f:c3:
2c:2b:36:ee:75:cb:f5:0b:95:e4:f6:11:76:45:65:cc:38:01:
96:f9:a4:06:d3:65:3c:2e:0f:13:c4:1c:bb:f5:a9:24:34:49:
e9:bf:61:57:75:b0:d6:d3:03:3b:c2:43:06:97:71:e9:86:0f:
31:f0:db:02:87:0e:3d:45:cd:5e:e5:00:63:96:d0:e0:b2:72:
71:ca:1c:4a:c9:f1:a8:97:e8:63:82:51:ac:c2:28:90:ef:56:
93:6b:24:c5:d9:75:a8:5a:77:29:44:16:d6:ac:41:26:73:2c:
5e:1d:d7:85:ec:3d:d1:ed:0a:49:0d:ec:47:65:d5:c8:3b:a2:
91:9a:7d:2d:27:f8:71:cb:a7:48:64:4a:99:87:12:e0:33:a4:
1c:cb:f0:85:26:e1:c4:2c:58:dd:68:77:cd:3c:63:8c:7b:3a:
19:62:72:f4:0b:4f:f8:0e:94:fa:c1:70:39:01:65:b5:67:4d:
74:b7:9e:32:7a:82:1a:50:3d:39:ad:fb:9e:0e:29:fa:50:67:
02:20:b4:e9:4c:ab:89:6e:15:44:1e:33:59:b9:13:5f:25:1d:
f9:45:b7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:21:35 2026 by rpki-client