Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
File: hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json)
Hash identifier: 5HatQjs41Pik+TnwW15BSDF2dVIsVMMgaNEXEEFMvdM=
Subject key identifier: 0B:77:D9:1C:A7:68:66:28:5A:03:16:E5:24:29:1D:CB:AB:1A:C5:F6
Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Certificate issuer: /CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Certificate serial: 019D9C9A6BEDDE50A3BE7C039FC84E947EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
Manifest number: 0CBC
Signing time: Fri 17 Apr 2026 18:00:58 +0000
Manifest this update: Fri 17 Apr 2026 18:00:58 +0000
Manifest next update: Sat 18 Apr 2026 18:00:58 +0000
Files and hashes: 1: K_y2fKHPzfyMG_X9CTHflV0WLi0.roa (hash: KabNvipw1vq+vrMlPeKcdUkL/gp9b7QpFWkct8rC9KU=)
2: MmD4LpG9L1abWhzDe3zsHGjMcKk.roa (hash: BYA/AELd944eyEW5OY9zqZeNygCSSsS+zSrCK5eSS0g=)
3: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: eWJ7PZ9U9ZLq9wftVTG9FPi44QrqHL15vjCN+ESNmEg=)
4: hKJDVK08o4RIWoWlt6lBuBhmgR0.roa (hash: MAApWzskbzneHqBQ6AJZbIOluhaLfJyDC3dItvxt1eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:6b:ed:de:50:a3:be:7c:03:9f:c8:4e:94:7e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Validity
Not Before: Apr 17 18:00:58 2026 GMT
Not After : Apr 18 18:00:58 2026 GMT
Subject: CN=0b77d91ca76866285a0316e524291dcbab1ac5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:83:3c:d1:0e:18:f5:8e:be:25:20:4c:4d:cd:
8e:89:cd:48:6e:8b:5c:62:f9:b8:f0:8f:33:ad:dd:
ce:0b:1d:e4:1b:63:48:46:09:c5:a9:2e:9d:8c:cc:
45:33:d9:10:0f:21:c5:c9:2a:d3:e2:fe:81:d0:af:
cb:01:8c:2b:12:8c:47:87:94:ac:e6:db:8c:45:1c:
30:bc:e0:12:2a:80:ba:d2:18:98:ab:ba:da:6a:32:
44:89:e0:cc:6b:13:63:a8:c7:9c:b3:51:6f:26:2b:
82:bb:dd:27:84:ce:64:83:03:3c:72:ad:52:5d:0f:
26:3b:90:16:d5:0e:f7:9f:10:b4:40:16:db:bf:30:
4a:27:53:bd:d1:a8:71:fb:06:71:df:0c:7a:01:8e:
44:bb:43:b5:5c:21:31:4e:b0:2b:13:b9:d6:4e:c9:
9d:64:e1:5a:f6:4f:fa:29:65:82:27:e5:d9:83:da:
e3:54:f8:72:bd:a3:8a:3e:a4:04:f0:42:ce:3f:5a:
0b:39:35:5a:16:95:f7:92:23:ce:8c:1a:cd:25:ff:
f7:b4:8b:26:86:95:6a:3c:79:cb:c0:16:cb:04:b5:
83:1b:cf:06:6e:bc:2c:12:7e:e0:6b:27:38:e5:22:
be:94:90:0b:30:50:97:33:65:10:61:c4:b7:c9:a5:
bc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:77:D9:1C:A7:68:66:28:5A:03:16:E5:24:29:1D:CB:AB:1A:C5:F6
X509v3 Authority Key Identifier:
keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b1:3f:52:0c:bc:ad:b7:6e:5f:aa:91:10:e3:ea:67:07:98:
a5:29:e8:4a:61:08:7d:fd:94:7b:b1:5b:48:61:e7:63:b4:23:
b6:57:8c:e4:02:03:d0:9b:1c:24:a5:dc:ee:86:28:2f:e5:64:
91:fd:7c:c8:97:0f:d0:38:e8:d4:7c:d2:e6:db:d5:b0:fc:2f:
9a:72:d5:35:f7:17:64:29:24:e3:66:2b:4d:93:d7:f8:fe:7e:
21:50:01:ba:53:16:07:07:bd:f6:d9:ee:d2:d2:94:8a:ed:31:
d2:42:bd:0a:84:af:2d:ad:7c:1b:58:cf:ca:5e:a7:8b:f1:66:
54:a9:db:f2:fa:61:2e:f2:12:13:c0:42:b5:e1:63:e8:84:55:
4d:fa:a1:b3:47:5b:49:73:aa:ac:7b:07:6d:5f:6a:f3:09:a5:
d4:47:ae:b3:13:12:e1:39:2d:c6:6b:73:54:64:d9:62:97:cc:
02:81:dc:b1:95:b5:ba:b7:a4:83:1f:e6:99:c9:1f:21:4d:11:
9c:48:62:9e:ad:58:b0:8f:f5:ff:d2:b7:af:d5:2f:99:8f:8f:
66:5d:09:e1:1b:d2:03:56:61:fb:72:c5:b9:43:e1:4e:c8:ab:
34:e6:5f:ee:fc:d8:38:fa:c9:f6:a6:c4:72:26:02:f9:19:2e:
fb:c1:54:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:35:57 2026 by rpki-client