Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
File: rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft (raw, json)
Hash identifier: zXtLYfNh+pIV7elN0Reu0KLJA5O8ioPPr9O6JkhUcTE=
Subject key identifier: 51:14:EE:61:07:61:F4:79:5C:70:67:36:A8:3D:BB:E4:27:44:09:55
Authority key identifier: AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
Certificate issuer: /CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Certificate serial: 019D9D3FE942F2AF75DB486C05F57B09492F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 21:01:44 +0000
Manifest this update: Fri 17 Apr 2026 21:01:44 +0000
Manifest next update: Sat 18 Apr 2026 21:01:44 +0000
Files and hashes: 1: csk4BDz5s79i6tCuRhaWetkbfYE.roa (hash: y6UPDjUC5Ue0t7W29lJsgRf1Q1DAQIYmF8ZHDpBKink=)
2: rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl (hash: BlliBBw+5hjz9PS6fM1Wd82skRqAHkadLmahR8j/A4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:e9:42:f2:af:75:db:48:6c:05:f5:7b:09:49:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Validity
Not Before: Apr 17 21:01:44 2026 GMT
Not After : Apr 18 21:01:44 2026 GMT
Subject: CN=5114ee610761f4795c706736a83dbbe427440955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a7:79:ce:52:68:4a:79:2a:50:53:4a:59:6c:
8a:f2:62:fd:cb:4a:d0:0e:f6:5b:f0:4d:52:9f:64:
63:05:ad:7a:85:02:35:5b:d1:a8:07:7b:ee:ee:b1:
1e:08:7b:74:cf:b1:ba:2e:fe:46:b8:e9:d5:b4:e8:
d5:2e:5b:3d:01:4b:87:ee:a5:1c:7f:04:b8:cf:a4:
9b:16:25:b8:93:47:d1:b0:4e:91:f1:75:b3:a0:35:
53:9f:24:56:f9:b2:1f:10:90:4b:3e:69:66:f5:8a:
7e:60:38:36:48:86:87:1e:51:a7:1b:c0:c7:f6:99:
8a:77:7b:af:5c:71:8e:5d:51:f9:3e:c0:c3:9e:b8:
d5:c0:a7:31:91:ec:df:30:71:5a:0a:34:c3:62:e0:
0b:93:07:18:b9:93:5e:0a:dd:bb:fe:4a:7c:dc:bf:
39:3d:9c:69:ea:3a:fa:62:72:d6:7f:6b:b1:e2:50:
6b:6e:cc:43:b9:ae:a3:ce:6c:85:a8:55:27:34:12:
8f:65:5b:44:59:d1:c7:c6:c9:4e:63:ca:84:de:53:
83:7e:8a:67:e7:8d:d6:4a:44:fd:f0:27:12:00:32:
59:5b:26:6c:80:f0:c9:b0:37:4e:ff:8e:10:e0:17:
64:31:51:3f:05:6b:90:a5:7b:cd:8d:df:e5:37:dc:
eb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:14:EE:61:07:61:F4:79:5C:70:67:36:A8:3D:BB:E4:27:44:09:55
X509v3 Authority Key Identifier:
keyid:AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:53:ba:b3:cc:7b:07:ce:ca:a7:96:5e:ef:0e:1f:83:56:d4:
ab:e7:df:26:b7:63:32:1c:b9:64:bd:46:d6:06:f5:aa:05:8d:
69:d1:c1:be:ab:29:04:9f:fd:3b:3c:5d:ce:53:ab:f5:01:4b:
19:a1:01:4a:2d:8e:33:e4:a6:88:44:88:0d:f8:2b:e1:ae:45:
10:85:f2:74:29:e1:35:8f:39:a8:9d:7f:1a:32:39:ad:2e:7c:
67:36:e3:b4:32:58:2c:cc:a8:e2:75:e2:e0:83:de:46:6c:0c:
1f:d9:80:89:48:ef:70:6d:0e:1d:35:a0:31:26:6d:ce:86:e2:
44:ba:6b:10:53:ef:6e:c0:7b:de:88:07:3f:20:7d:f3:24:3a:
b8:a2:f8:48:ad:c0:97:59:dd:e3:a9:dc:52:2e:25:48:70:4d:
ae:53:14:f0:60:dd:b9:46:97:c6:1c:2a:35:3b:f5:da:26:42:
69:d6:ac:0d:86:ff:af:8c:d0:f8:d0:20:2a:79:0e:2c:9a:d4:
21:34:f1:97:59:7f:4c:dc:b3:e9:ed:1d:73:ee:d1:00:47:fc:
10:00:a0:40:e7:d4:b0:73:9a:68:1f:90:69:c6:81:e5:6d:b4:
b3:2f:77:08:6c:30:c2:6e:36:44:84:ce:16:14:da:92:24:d0:
2e:05:cb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:40:32 2026 by rpki-client