Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
File: h3rydLcxE0zLwmco-TfaAwWN1zs.mft (raw, json)
Hash identifier: Za+avRN/9KcWGS+Bk8RWyCQ5jxBSUUz+UrL0McDoSwA=
Subject key identifier: 45:39:5C:BE:9B:E4:41:B0:D3:2F:8E:36:16:C2:01:F0:5B:0F:DB:D9
Authority key identifier: 87:7A:F2:74:B7:31:13:4C:CB:C2:67:28:F9:37:DA:03:05:8D:D7:3B
Certificate issuer: /CN=877af274b731134ccbc26728f937da03058dd73b
Certificate serial: 019D9D3EE93F15159526BD3C99A067463345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
Manifest number: 08
Signing time: Fri 17 Apr 2026 21:00:38 +0000
Manifest this update: Fri 17 Apr 2026 21:00:38 +0000
Manifest next update: Sat 18 Apr 2026 21:00:38 +0000
Files and hashes: 1: IR529NvnrXP81UBDnz8QdBrSyJ8.roa (hash: IkGeFcq/7XMWRAAEt9CdXpwX/GjXpCyZ2A9WTlqr/w4=)
2: h3rydLcxE0zLwmco-TfaAwWN1zs.crl (hash: y/mauVmnghTuE31h8CiQYy/BihDPPa0iVHyyrnUF+mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:e9:3f:15:15:95:26:bd:3c:99:a0:67:46:33:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877af274b731134ccbc26728f937da03058dd73b
Validity
Not Before: Apr 17 21:00:38 2026 GMT
Not After : Apr 18 21:00:38 2026 GMT
Subject: CN=45395cbe9be441b0d32f8e3616c201f05b0fdbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1b:6f:2d:25:26:e3:03:d6:1b:49:86:5d:bc:
25:21:c8:50:4c:6f:69:ae:6a:d7:b3:84:51:2f:b2:
bd:62:8d:ad:1f:32:7d:3b:48:ff:86:aa:35:08:81:
a5:04:d9:69:80:df:31:19:75:37:b6:1b:69:28:e2:
ca:65:8e:94:40:b2:53:26:02:9b:db:57:59:90:40:
24:6b:7b:06:19:e0:b7:27:e8:e2:ec:b9:4c:03:66:
46:b1:20:b6:02:80:7d:48:6b:e3:c6:29:e0:48:f4:
ff:b2:21:d5:87:be:63:11:76:81:73:04:34:59:0c:
55:ef:ad:b0:0a:2a:b6:3c:bf:11:eb:32:1c:07:76:
02:6d:cf:74:48:95:75:af:12:71:30:5a:86:33:d6:
e5:c5:a6:3a:c8:be:25:13:88:c8:56:60:e7:71:85:
ec:63:45:51:3e:9c:86:3e:0a:1f:ab:d5:9b:f5:8f:
f5:8d:a5:a8:e2:2f:9a:94:2a:a7:b6:bd:6a:d4:1b:
8a:50:4e:a6:54:95:47:44:bb:12:f2:8e:c7:e4:87:
ea:01:dc:b2:3d:27:39:24:77:e7:1f:41:07:9d:b9:
be:33:18:92:f0:68:a2:e1:a6:75:ef:54:fa:cd:34:
f4:b5:46:8a:92:77:70:08:4a:17:6c:cd:39:bf:11:
24:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:39:5C:BE:9B:E4:41:B0:D3:2F:8E:36:16:C2:01:F0:5B:0F:DB:D9
X509v3 Authority Key Identifier:
keyid:87:7A:F2:74:B7:31:13:4C:CB:C2:67:28:F9:37:DA:03:05:8D:D7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e3:22:ef:2a:5b:7e:65:fd:d7:21:af:82:08:96:f6:c7:61:
0a:63:d5:0c:f3:14:11:6b:c9:58:1f:a8:83:17:68:89:f1:d6:
0d:fb:63:2c:44:62:c4:4a:08:84:dc:6f:63:d0:f3:65:9d:71:
84:18:5f:7a:ab:a8:c7:46:72:c3:77:6d:54:b9:cf:bb:fd:0c:
3a:c5:5d:37:ed:3a:9c:4c:c8:93:75:5e:d6:52:9e:7f:54:62:
55:47:3a:31:4d:4a:50:a1:af:8f:58:39:d3:11:57:35:4f:22:
fc:c5:2a:4e:31:f3:e5:88:65:17:5e:52:2e:ab:3e:0e:b4:37:
be:1d:00:27:b2:bb:b2:7d:87:36:9c:d3:b6:64:46:44:d6:e2:
1a:49:f3:94:2f:fa:8c:53:f2:36:23:d1:73:a9:9d:fa:da:bd:
97:6d:b2:0e:a8:45:c0:e2:41:10:2d:61:56:fd:18:9e:37:bd:
bf:cb:7e:13:22:cf:98:01:bf:40:1d:24:d8:ff:41:d5:31:20:
4f:5f:03:fa:b5:d3:da:e8:79:37:1f:56:d2:66:b4:2b:2b:e5:
1b:1a:41:0c:b9:28:d5:14:f1:2f:c1:86:da:bb:10:d8:40:63:
5c:de:10:40:2a:d5:5a:65:cd:06:b2:b0:c4:79:05:36:69:59:
b7:6c:17:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:23:58 2026 by rpki-client