Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
File: hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json)
Hash identifier: US4KZVQuOhtbnwMY1MRWKD37xfxO/GLmhnWgUJ2q0Pc=
Subject key identifier: 7B:09:92:4B:26:D0:0A:8F:FC:68:1C:E9:D1:84:F8:88:D8:49:BF:07
Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Certificate issuer: /CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Certificate serial: 019D9AABA9B18D95979C627D80BC9E4556BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
Manifest number: 0CBB
Signing time: Fri 17 Apr 2026 09:00:34 +0000
Manifest this update: Fri 17 Apr 2026 09:00:34 +0000
Manifest next update: Sat 18 Apr 2026 09:00:34 +0000
Files and hashes: 1: K_y2fKHPzfyMG_X9CTHflV0WLi0.roa (hash: KabNvipw1vq+vrMlPeKcdUkL/gp9b7QpFWkct8rC9KU=)
2: MmD4LpG9L1abWhzDe3zsHGjMcKk.roa (hash: BYA/AELd944eyEW5OY9zqZeNygCSSsS+zSrCK5eSS0g=)
3: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: 0ZNW+4zUoo0zfZ004Z6anLAmkfOlRIBfmlmiSkoHy8k=)
4: hKJDVK08o4RIWoWlt6lBuBhmgR0.roa (hash: MAApWzskbzneHqBQ6AJZbIOluhaLfJyDC3dItvxt1eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:a9:b1:8d:95:97:9c:62:7d:80:bc:9e:45:56:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Validity
Not Before: Apr 17 09:00:34 2026 GMT
Not After : Apr 18 09:00:34 2026 GMT
Subject: CN=7b09924b26d00a8ffc681ce9d184f888d849bf07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:68:04:b1:67:94:ae:cb:fb:a6:4c:2b:83:
af:be:e5:5a:0c:b1:19:85:a9:4a:be:93:d6:8b:f2:
8b:09:95:b2:a0:7a:83:15:c4:eb:23:cf:5c:d3:4f:
0c:29:d9:59:64:ac:4f:67:1c:28:32:08:dd:e6:12:
b2:dc:81:34:56:6e:5f:9f:5c:00:f4:5a:fb:f4:bc:
4a:8b:7c:1c:d7:91:63:37:4b:10:58:15:de:e2:59:
5d:27:33:83:85:90:74:d4:37:90:d0:ff:60:32:c3:
d5:18:fb:1c:dc:1d:d1:66:44:e2:91:98:98:ff:fd:
fb:56:f2:5f:a8:8c:bb:d7:cb:4a:ff:b1:37:6a:d3:
b1:53:24:c6:35:f9:f4:ed:23:f2:d5:ef:2a:4d:f4:
01:7e:fa:99:c3:dc:7b:03:de:03:6e:fc:8d:b2:3f:
ac:f6:61:ee:28:d5:14:45:2a:c6:11:f6:65:1d:de:
88:86:53:b5:24:b2:21:ac:55:48:e0:f8:c0:ac:f2:
d7:40:71:80:9c:22:21:50:4b:a9:5e:34:3d:24:7d:
93:29:f3:ae:a0:5d:77:8a:09:0a:e3:40:ea:44:32:
72:ca:d9:0d:18:f6:da:0e:ff:0f:1b:d8:26:c8:13:
ed:d1:8b:30:c0:9c:10:ce:ed:af:12:69:f2:01:c6:
67:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:09:92:4B:26:D0:0A:8F:FC:68:1C:E9:D1:84:F8:88:D8:49:BF:07
X509v3 Authority Key Identifier:
keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:98:58:17:9d:99:e0:08:d6:24:53:11:44:75:66:96:0f:4e:
1e:ff:f8:e1:fa:7b:70:50:de:1f:99:74:55:bc:3b:1a:5c:47:
40:c3:1b:26:77:21:2a:7f:fc:ec:ce:2e:93:f1:41:8c:c8:cf:
07:f0:a8:3e:ff:b3:48:c5:fb:c3:94:dc:33:1d:88:16:d2:8c:
6d:a8:72:e7:88:98:f0:1d:56:55:87:ef:d5:3c:09:4f:40:ee:
0b:35:a4:0e:e3:70:9d:41:07:04:dc:2b:22:7b:a7:21:47:34:
3d:dd:65:99:dc:a1:c7:eb:4a:c4:c3:ff:42:5c:81:d5:21:1b:
24:d8:b4:c0:67:c2:56:84:96:9b:26:eb:43:ed:f3:90:80:24:
1b:fd:32:21:42:a5:0c:2f:34:90:ae:e1:22:8a:20:37:46:11:
8d:e0:a4:a7:23:4b:22:f0:86:9c:0c:4c:5f:d2:ee:50:c0:b7:
2f:9d:c3:ce:6a:19:7d:38:18:95:ea:8b:f5:4b:a3:92:94:ea:
4c:3d:ee:97:3d:2e:6f:c5:3a:7f:c5:ce:bc:2c:24:fc:7c:18:
ef:ce:42:0d:f8:fd:2e:ac:a1:b7:4b:c4:59:7e:3b:cf:61:b8:
f5:93:03:b2:61:2f:68:71:43:06:cd:70:69:97:08:09:c4:74:
77:26:ef:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:31:39 2026 by rpki-client