Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
File: hB6IIdAaloi57nryrruVnLvtBys.mft (raw, json)
Hash identifier: 9pqv/MOqHWbBtalOdjVLMHLmA4ebG1uTw7RtH/WdwbQ=
Subject key identifier: 58:C2:16:EA:A9:F0:78:F8:33:59:C2:86:F2:04:60:AD:0A:51:18:DB
Authority key identifier: 84:1E:88:21:D0:1A:96:88:B9:EE:7A:F2:AE:BB:95:9C:BB:ED:07:2B
Certificate issuer: /CN=841e8821d01a9688b9ee7af2aebb959cbbed072b
Certificate serial: 019D9B50DDA60990D3CAD8976CD533C4A5E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hB6IIdAaloi57nryrruVnLvtBys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
Manifest number: F7
Signing time: Fri 17 Apr 2026 12:01:01 +0000
Manifest this update: Fri 17 Apr 2026 12:01:01 +0000
Manifest next update: Sat 18 Apr 2026 12:01:01 +0000
Files and hashes: 1: eQ8pUqqadp9cp4FYzeNplhCqiz8.roa (hash: RF09/EJZQF5XIgJSe7QHfYgaZkhCRVhxSpLB2BRdPks=)
2: hB6IIdAaloi57nryrruVnLvtBys.crl (hash: eleYK2Ii3slszmdQAofbKKUfEZ3wTdKrWWIdW2A19IE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
rsync://rpki.ripe.net/repository/DEFAULT/hB6IIdAaloi57nryrruVnLvtBys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:dd:a6:09:90:d3:ca:d8:97:6c:d5:33:c4:a5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=841e8821d01a9688b9ee7af2aebb959cbbed072b
Validity
Not Before: Apr 17 12:01:01 2026 GMT
Not After : Apr 18 12:01:01 2026 GMT
Subject: CN=58c216eaa9f078f83359c286f20460ad0a5118db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:05:f1:e7:7d:af:7b:0f:77:ee:fa:77:64:30:
de:58:62:78:19:13:b8:87:02:05:d2:01:95:bc:f4:
c1:b5:1d:61:c2:8e:5a:9b:23:1d:fc:c9:90:25:b5:
3b:51:20:22:94:fc:69:09:56:2e:58:73:f7:4c:6f:
45:47:45:11:b3:9e:b8:e2:dd:9b:e2:86:2c:92:99:
40:87:47:de:c0:a6:2a:fc:16:6b:8e:ba:89:4e:2e:
d7:ad:0c:4e:13:f8:53:4f:b9:35:a1:3a:ef:c4:31:
a7:f7:a8:1e:23:b6:81:9a:76:ee:a0:f4:00:b4:87:
6a:a7:82:b3:40:f5:d5:77:84:79:69:f7:be:c8:47:
0d:ae:6c:e9:c4:f5:89:57:d5:ff:72:ce:b4:d0:40:
02:64:0c:b2:af:d5:16:f3:56:4b:42:40:36:2e:c8:
9b:51:3c:7d:7d:db:3e:4e:63:bf:d3:55:5f:24:d3:
08:3d:de:c4:38:9f:12:36:0f:41:a9:16:d7:ce:97:
06:e3:e2:1d:12:95:9d:2a:83:3f:1c:90:6e:27:11:
09:7d:cc:be:cb:fd:43:f8:17:a2:ca:a6:38:a4:1a:
ea:8b:5d:ea:d7:1e:6d:9f:78:c1:f6:e4:0c:04:38:
0f:02:80:7e:61:4b:5c:60:89:85:ee:9d:cf:91:06:
50:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C2:16:EA:A9:F0:78:F8:33:59:C2:86:F2:04:60:AD:0A:51:18:DB
X509v3 Authority Key Identifier:
keyid:84:1E:88:21:D0:1A:96:88:B9:EE:7A:F2:AE:BB:95:9C:BB:ED:07:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB6IIdAaloi57nryrruVnLvtBys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9f:2f:b2:5f:1b:d3:79:86:0e:1b:04:c6:21:94:c9:64:aa:
f8:75:dc:44:3b:dd:a9:40:04:ae:18:6d:a8:b1:ac:3b:8e:ce:
5f:de:31:dc:57:56:a0:6d:ac:d6:91:17:de:96:7d:0c:55:03:
84:ae:ef:6b:af:f0:17:e6:d6:76:55:01:66:79:dc:58:66:8d:
7b:23:59:e8:ec:14:1e:c7:7c:66:0f:97:0f:5d:b3:9b:5c:56:
b9:3e:26:50:67:b8:f4:d4:49:34:29:a4:b9:6a:8c:1b:e4:e1:
cf:39:a7:14:d6:90:47:d9:b3:41:5f:70:b1:7f:21:02:ae:5a:
ef:5b:69:b0:1f:f0:ab:a1:f6:d3:a0:27:bf:d1:8d:d3:9c:5f:
7e:4c:bc:94:e0:05:00:99:18:7f:c2:8a:8c:40:97:36:ba:3d:
68:7d:e0:e3:bd:fc:05:45:7e:3e:f5:0d:c5:a5:bc:4f:a0:d8:
00:8e:9c:ab:a0:a3:28:11:c1:67:ba:08:25:c4:d7:bd:9c:6e:
c4:7b:bc:88:46:a9:bf:ee:2d:ec:a9:c7:1f:f2:e0:b1:a2:4c:
2a:26:af:87:76:d7:2d:35:b7:34:5a:36:0f:ce:bf:3a:8f:c8:
99:af:6f:c1:3f:d4:8e:16:00:4e:da:f2:9f:55:a9:91:eb:d4:
e2:df:a0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:08:14 2026 by rpki-client