Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
File: HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft (raw, json)
Hash identifier: 32MZC4fs19ZzMw5w4mDnGz43PdyuthNmo48h55k4Y4k=
Subject key identifier: 4D:45:43:78:89:38:8E:DE:91:57:EE:58:8B:E8:28:60:B6:73:83:25
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 019D984FFC9FF29C66CB6C21D41C2D3C34B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
Manifest number: 1853
Signing time: Thu 16 Apr 2026 22:01:11 +0000
Manifest this update: Thu 16 Apr 2026 22:01:11 +0000
Manifest next update: Fri 17 Apr 2026 22:01:11 +0000
Files and hashes: 1: EUQPSRByg2QMDNqMMHo2oQZNlbY.roa (hash: H+d5ds358KBr4HrcZ0lWa3uis3q9gOlPohiMxXosS7w=)
2: HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl (hash: P/D/6KLGWLWy2+rOS4qRIRSlKmHfr3EMr4MT3snGRiM=)
3: zj0oGLpPGtWJ6IpHxLEQfH2DpKo.roa (hash: ctimHgQjwKly2d3TDS9AzpF0v6QUFIibm4H4p93sG5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:fc:9f:f2:9c:66:cb:6c:21:d4:1c:2d:3c:34:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Apr 16 22:01:11 2026 GMT
Not After : Apr 17 22:01:11 2026 GMT
Subject: CN=4d45437889388ede9157ee588be82860b6738325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fe:ca:d4:87:e5:d6:67:8d:63:d0:3d:cf:b5:
ee:0d:f0:30:69:fb:6e:0e:e2:6d:7f:57:05:64:3f:
de:c6:dd:7d:7f:e6:5b:01:43:82:cd:83:ad:53:c9:
d4:96:d0:02:70:50:66:4d:09:d3:d5:76:41:14:43:
3d:9d:ba:da:a5:10:d7:94:b4:e8:dc:9f:9b:48:54:
62:11:01:fa:66:a9:e1:76:17:6b:e8:73:09:65:0a:
5c:f3:b6:d7:b7:68:b1:b8:63:5f:04:4f:64:26:08:
2b:f0:09:b2:fa:1d:87:6a:6c:72:13:e3:a9:9c:fb:
62:73:60:eb:ce:1d:a8:1f:7c:e0:4d:b1:4a:6f:5b:
d3:12:c1:e5:b9:5e:39:b7:17:72:ca:3b:f1:b1:43:
a2:2c:45:ee:2f:ae:88:c3:d9:1a:35:bd:2f:72:7c:
5c:09:6f:a7:33:36:fc:af:8b:4a:ef:04:4e:c0:b0:
4c:f4:99:21:1c:62:9a:13:c9:39:91:d0:a1:69:92:
1c:82:09:dc:73:42:bd:14:24:95:b0:b6:f0:c0:14:
d8:24:8b:91:ac:bd:ee:16:c7:47:3a:b6:1f:07:ea:
30:11:32:c8:14:b6:af:a6:05:14:bf:f2:0c:c2:39:
cf:07:b0:65:ae:61:86:2d:f9:9d:ad:28:c0:89:43:
61:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:45:43:78:89:38:8E:DE:91:57:EE:58:8B:E8:28:60:B6:73:83:25
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c5:30:64:55:8e:f4:77:00:41:a1:6f:81:d6:29:08:e4:42:
6c:ad:77:33:1f:e5:f1:db:cb:5b:3e:d1:da:bb:48:74:55:6e:
ac:a1:05:ba:36:db:66:21:cf:54:ab:84:61:11:1d:e1:44:16:
50:b6:22:24:af:20:3f:8b:49:1e:65:d9:8c:1a:0b:1f:90:0d:
24:02:43:98:68:87:a3:a3:9e:f0:0f:36:09:d1:77:78:5f:69:
9c:e3:bb:5f:8b:34:74:8e:09:04:25:e3:9f:61:17:24:25:45:
05:41:63:b8:68:14:ce:86:2b:11:fc:e5:89:10:dc:f6:3c:f7:
1d:ae:83:88:d1:63:ef:b6:b0:f0:39:d3:ca:f9:c4:c1:e3:f8:
48:92:21:fb:34:d5:50:ad:bd:d2:f1:fc:9a:99:15:34:ef:7d:
fb:fe:99:7d:7f:9b:02:60:be:23:db:af:a5:0b:1b:a6:e9:01:
b1:b1:4e:71:6b:10:4c:58:81:c5:e7:59:1b:e1:6a:27:e5:03:
a8:45:0b:1c:1c:88:77:1c:11:f8:45:f5:c2:d5:02:e1:49:98:
f1:c0:9b:1f:e6:5c:b4:34:51:be:b9:54:25:28:3c:5e:65:31:
8c:8e:7b:1b:f2:18:a7:a6:02:00:6d:f5:50:41:be:27:14:83:
49:4b:4c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:44 2026 by rpki-client