Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
File: hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json)
Hash identifier: yOQV8+U3t1cO0uX8NCgqIvXnL6tbzLYhnnWxm8EAc4k=
Subject key identifier: EA:F9:10:AB:8B:BC:41:B9:7B:75:A0:0F:22:96:64:85:30:D7:C4:4A
Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
Certificate issuer: /CN=86623a8458eff347d424348588829ee137b45a3f
Certificate serial: 019D97E1BCAD7E0EACC869018E501C6CC5B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
Manifest number: 0A14
Signing time: Thu 16 Apr 2026 20:00:46 +0000
Manifest this update: Thu 16 Apr 2026 20:00:46 +0000
Manifest next update: Fri 17 Apr 2026 20:00:46 +0000
Files and hashes: 1: hCqBnwi3tLGPnGEkwFbaiiOi1Tw.roa (hash: ipklKvl4vE4704mx0vkFCsJ5FNBwNV4h3Vvuy2DJyMQ=)
2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: CUgDgzSsXc9dvMWSj/5njx0VcpNj/1ooxchoNYyT8ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:bc:ad:7e:0e:ac:c8:69:01:8e:50:1c:6c:c5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86623a8458eff347d424348588829ee137b45a3f
Validity
Not Before: Apr 16 20:00:46 2026 GMT
Not After : Apr 17 20:00:46 2026 GMT
Subject: CN=eaf910ab8bbc41b97b75a00f2296648530d7c44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6b:5b:3f:5e:21:16:47:32:f1:d2:ec:44:dd:
4b:13:aa:85:d4:e1:5d:07:09:54:6f:e8:d3:50:f7:
7b:b9:50:cf:17:fc:fe:70:4d:5d:72:d4:20:f5:40:
f5:bb:39:6e:4a:d0:d4:6f:1f:a3:41:04:55:60:da:
1a:67:4b:58:0a:58:ee:11:c9:34:35:d6:36:24:7f:
1a:03:09:60:6f:f1:16:7c:af:52:d9:4e:3a:91:af:
22:e3:18:66:42:58:ef:fa:62:62:01:9b:6d:9b:c4:
89:ab:96:2a:cd:65:12:90:e2:23:b1:9b:ba:d3:30:
18:13:24:7c:66:c4:4f:ae:61:31:34:8f:52:5d:b7:
e7:9f:36:e0:40:5f:e5:d7:6f:b2:99:59:c0:00:55:
5f:4e:e1:0b:23:d5:c8:d9:4b:f1:75:95:ff:d1:ae:
de:3f:51:1e:dd:0f:00:d5:35:3b:0d:a9:35:0a:bb:
ea:92:a0:e9:d9:26:d0:e1:f2:1f:cd:3a:24:ff:eb:
d4:5f:98:72:8c:be:74:13:c7:54:ad:56:1d:f2:ae:
66:bd:f6:68:5b:25:c6:97:f7:58:c0:fc:4d:f4:52:
14:cd:56:3a:d4:cc:a3:4a:ce:a9:6b:b0:da:11:e1:
eb:46:8c:21:ce:c9:bb:4c:f4:fb:27:36:97:6c:41:
bb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F9:10:AB:8B:BC:41:B9:7B:75:A0:0F:22:96:64:85:30:D7:C4:4A
X509v3 Authority Key Identifier:
keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:42:0b:43:a1:5e:18:a0:07:70:c1:cf:94:d7:43:20:10:e4:
dc:94:d2:a9:7b:74:c8:43:85:2c:c5:b9:d8:4d:bb:a1:8d:58:
91:06:9c:02:c3:17:c1:a1:30:f3:ed:f2:ef:47:3d:5f:0f:93:
d6:ad:4c:c3:80:05:f5:0d:9e:38:a9:ff:ed:32:6d:51:ca:61:
cf:12:79:3a:1c:52:96:5a:19:4a:b0:61:39:0b:bc:f9:de:3d:
f3:e9:03:00:b4:9d:c2:27:3a:8e:50:f9:26:82:83:df:5f:7f:
c6:38:b7:07:5c:4c:ee:66:69:08:7b:45:4f:c8:4e:bf:1d:05:
16:d8:f3:b0:38:22:ee:3d:1a:67:46:d1:83:d2:0a:c1:02:0f:
98:e7:5b:98:b4:c3:ca:61:66:5e:cf:f6:97:2b:60:79:e7:32:
94:4e:33:4d:9b:df:16:fa:e0:6b:d4:42:be:63:5f:f6:c4:2f:
5a:20:31:ff:f0:66:13:1c:64:3a:6d:8c:91:a1:02:e0:67:0d:
52:b9:00:72:14:5a:b7:d8:ec:ca:20:05:5f:d6:24:02:b3:55:
04:e4:4d:aa:04:c7:8d:f4:9d:9c:09:1a:39:d3:cd:06:40:a5:
96:6a:d8:c2:e1:da:6e:58:a3:bd:b4:c6:07:51:25:b7:3d:aa:
60:95:e7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:32:59 2026 by rpki-client