
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
File: hGbpF0La0bn0x5ayOzfres2FgWE.mft (raw, json)
Hash identifier: tKv83XeKIJ8ZgIsWr11r6zAJ36oillO09qXhUpk7PLs=
Subject key identifier: CB:C7:C7:6F:BB:4D:39:E0:89:BD:32:B2:6D:29:5B:D4:99:31:CE:1A
Authority key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
Certificate issuer: /CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Certificate serial: 019D97E1B15EE8014A9B48368FD59EE29D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
Manifest number: 1362
Signing time: Thu 16 Apr 2026 20:00:43 +0000
Manifest this update: Thu 16 Apr 2026 20:00:43 +0000
Manifest next update: Fri 17 Apr 2026 20:00:43 +0000
Files and hashes: 1: V6Mvsnc7Z774Ev5q6h6Mb-ytj-8.roa (hash: /GNFnTbzQDf+YRxBgnXt7mG8KTDdxxNld8mJ/4Y6skk=)
2: hGbpF0La0bn0x5ayOzfres2FgWE.crl (hash: 5DZtewvGC2W4AkJO4uZ5pm26Zs1UxINzAjhWLTZiD3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:b1:5e:e8:01:4a:9b:48:36:8f:d5:9e:e2:9d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Validity
Not Before: Apr 16 20:00:43 2026 GMT
Not After : Apr 17 20:00:43 2026 GMT
Subject: CN=cbc7c76fbb4d39e089bd32b26d295bd49931ce1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c6:68:8c:17:ad:56:80:d1:dd:98:10:14:d5:
25:b3:51:4e:38:8b:b0:d7:69:f0:8b:0a:68:ae:41:
7b:58:98:53:88:2c:7a:a5:e1:a4:d5:71:8e:8d:fd:
e8:c5:b9:81:20:85:33:73:44:5f:6b:28:7b:e2:7f:
0f:40:84:68:83:77:03:ed:c2:08:01:40:4f:e6:dc:
5e:63:b2:9a:74:be:8d:f6:5c:1b:5f:7b:d6:66:5e:
b5:bc:c9:fd:30:ce:37:54:a4:85:62:94:77:cb:aa:
88:89:12:17:11:61:6b:df:35:1e:e8:29:6d:01:a5:
8c:fa:a8:c0:2e:bd:bf:93:52:90:64:c4:79:cf:eb:
fc:69:af:80:4c:ec:14:32:19:e1:84:12:19:b2:aa:
c0:fa:b7:02:06:d9:80:df:eb:be:93:79:ce:26:55:
ef:2e:c3:7e:36:84:78:13:10:37:14:5a:e0:97:11:
56:ff:ad:dc:32:71:4e:b0:d7:25:d1:8a:57:c1:d1:
71:da:d1:a6:74:39:c4:63:a2:b8:6e:0f:c7:4d:78:
1a:a1:88:00:e4:67:6b:40:77:2c:be:cc:7f:25:39:
8b:5d:fe:ae:ed:c1:5e:91:cf:b0:dd:80:36:cd:22:
6e:d9:6d:76:53:04:9d:ba:73:a8:6b:66:5c:d4:73:
a2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C7:C7:6F:BB:4D:39:E0:89:BD:32:B2:6D:29:5B:D4:99:31:CE:1A
X509v3 Authority Key Identifier:
keyid:84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e5:36:71:1f:08:6d:99:68:aa:53:12:58:4b:b2:e1:72:5f:
67:d2:99:b1:ed:eb:1b:31:76:2e:a4:c8:3e:32:93:5b:a6:80:
1f:49:ae:66:07:84:8d:e5:c0:9a:3b:7c:03:f8:b5:58:a4:c7:
2c:6c:af:2d:ce:bf:4b:9b:f0:b9:a8:5c:2d:58:1b:cd:c6:d6:
f2:ce:4c:a3:1d:eb:95:4b:47:03:2f:b5:53:c0:18:26:b1:67:
63:36:43:82:ba:b3:34:c2:8d:18:97:ca:be:1f:37:da:f2:6b:
41:2c:f0:df:53:b4:e6:10:ae:56:8b:70:a8:00:0d:6e:30:9f:
8c:1e:e6:bb:dd:71:67:e3:ed:52:80:58:ee:d3:7c:26:5d:7f:
2a:17:fe:26:ea:1e:05:4b:d0:5e:0e:3c:0f:8b:4c:14:3c:56:
00:b2:fa:bb:df:27:b5:4a:f4:68:d7:91:76:99:42:84:8f:ca:
4e:18:65:5f:15:61:fe:d4:0a:94:0a:56:ce:30:9b:3a:9a:6b:
f3:c3:12:07:27:e6:51:9d:fc:21:14:bd:f6:7b:ce:76:64:c8:
d6:10:55:dd:d5:38:be:04:50:91:9a:5f:07:9c:65:c0:84:93:
82:81:74:9b:ad:f4:2d:f6:b7:e2:74:b9:f8:6e:da:76:dc:95:
e7:e1:9f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:35 2026 by rpki-client