Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
File: hUyBdtnELHBLMQkTMJRwNRu1meU.mft (raw, json)
Hash identifier: ScVyR7fSeUVPMfiwPFLU087nVtZ9MW+pBKJMKgpmp6s=
Subject key identifier: F9:34:EE:58:86:3D:8C:B4:C7:C3:33:32:E1:2B:8D:9E:32:DE:AA:45
Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
Certificate issuer: /CN=854c8176d9c42c704b310913309470351bb599e5
Certificate serial: 019D9A070DFFCC1646C99A7F3A105E9F3516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
Manifest number: 13EB
Signing time: Fri 17 Apr 2026 06:00:46 +0000
Manifest this update: Fri 17 Apr 2026 06:00:46 +0000
Manifest next update: Sat 18 Apr 2026 06:00:46 +0000
Files and hashes: 1: 2E1p8fabJ0AaZVQtK27is72W3zA.roa (hash: seOc2odI/aAB9kmMiUcr+Fn5jR9zKFiFx7mITmVnxdg=)
2: hSHIj4UWxpZV5CJ62FEUxANmmx4.roa (hash: DokJgpyiq/4HexdzVhkwpYdCq1bUBWCyEOpnC3xmI30=)
3: hUyBdtnELHBLMQkTMJRwNRu1meU.crl (hash: FTyJaD2OJ0Oy4hIA8I+LR42bQtQCxYoWINOBRu6B1tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:0d:ff:cc:16:46:c9:9a:7f:3a:10:5e:9f:35:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c8176d9c42c704b310913309470351bb599e5
Validity
Not Before: Apr 17 06:00:46 2026 GMT
Not After : Apr 18 06:00:46 2026 GMT
Subject: CN=f934ee58863d8cb4c7c33332e12b8d9e32deaa45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e1:c8:ce:90:f4:c3:5b:ff:7c:94:80:55:10:
8e:eb:56:49:db:f4:38:fb:48:08:43:1a:86:1e:d0:
1b:01:28:dc:c6:e5:83:1a:f9:82:bd:3d:58:21:1d:
4d:53:cc:fe:0f:d6:47:44:fe:62:a7:97:56:6d:7b:
3d:cf:e5:34:31:e7:67:c5:ef:a4:01:2f:ba:85:eb:
f9:39:d3:72:23:19:9c:04:c1:a2:ee:21:09:ba:86:
08:44:56:63:ad:39:f5:1c:77:26:9a:90:48:38:e2:
8a:52:af:80:79:9c:45:2b:4e:7a:96:93:5a:24:b4:
69:82:cb:ae:5d:a5:20:f1:57:b3:0b:8e:60:7c:77:
97:fe:e0:1b:2e:c5:ea:62:ab:0a:d8:61:00:db:69:
05:d0:73:56:dd:87:45:b3:0a:1d:4a:c8:e9:af:ad:
d0:85:41:ad:b2:f0:95:4b:f3:67:76:0b:cd:c8:93:
f6:bc:4b:8e:54:54:9f:65:7f:94:13:84:49:84:29:
28:68:90:c0:55:46:0f:32:c4:11:bd:95:f0:d0:12:
2b:62:56:71:a9:b7:ba:3a:02:d1:85:39:ce:ce:b7:
cf:80:c1:28:44:bc:29:dc:0a:5b:df:57:35:6a:14:
45:85:0f:39:93:a3:8f:cb:7e:70:61:31:22:d2:57:
3e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:34:EE:58:86:3D:8C:B4:C7:C3:33:32:E1:2B:8D:9E:32:DE:AA:45
X509v3 Authority Key Identifier:
keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c8:e0:24:cb:39:8b:ce:19:d6:98:a2:8a:43:6c:64:0e:df:
09:01:49:79:95:32:2b:07:3a:13:d4:43:52:01:a3:83:9f:70:
2b:6b:81:5f:c0:a5:fc:da:7a:4a:be:cd:76:d9:12:52:10:9b:
8a:85:ca:1e:76:d4:1d:d0:22:97:ed:8f:8c:c2:10:fa:a3:7d:
2b:e1:6f:c7:c0:83:ad:f9:ec:46:36:a6:aa:7a:b9:63:fe:45:
52:65:9b:40:b9:a4:8a:ba:67:56:d9:6d:ec:02:25:6f:42:3e:
64:41:d1:98:20:e1:8a:6d:dc:f7:5b:76:d9:1c:f1:b5:6a:67:
81:1a:22:7a:6a:7e:07:8c:af:ce:26:87:73:9d:79:2a:fb:94:
91:84:04:a1:a3:2b:eb:f0:49:ae:ed:75:8e:d8:2e:71:48:70:
a1:55:cd:f2:16:d7:cb:4e:f9:a5:1f:dd:2e:7b:09:58:fd:58:
24:9f:f2:22:1e:80:e2:6b:7e:da:fd:71:6a:a4:51:10:12:62:
cb:ac:c3:c6:5e:8b:70:e0:a0:87:dc:d2:3d:5c:4e:de:73:0e:
6c:cc:c0:46:98:59:d9:c4:10:73:bb:63:dc:00:74:14:07:4f:
e9:c6:b2:cf:de:fb:ff:f6:da:67:f6:30:9e:62:27:d4:c5:a9:
53:02:f0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:53:10 2026 by rpki-client