Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
File: hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft (raw, json)
Hash identifier: l+lq4fwFPY6AMz8l2clVDbI9nG7oH4VcmQGt1uWApgc=
Subject key identifier: DD:D3:48:88:DD:B0:5D:60:05:F0:E1:EB:06:E6:A9:52:45:CF:D0:44
Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
Certificate issuer: /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Certificate serial: 019D9A75327BC30830570CF179AAFB8BADFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 08:01:05 +0000
Manifest this update: Fri 17 Apr 2026 08:01:05 +0000
Manifest next update: Sat 18 Apr 2026 08:01:05 +0000
Files and hashes: 1: Bgb4R3FK8PY34Yz-lvynRT-9XWQ.roa (hash: St6uFsBRyQsJnyTTYPZwyzlv1Byj/hyZ5kqADUUKKnM=)
2: hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl (hash: Takk511M8dn10K8bb0Hhx9OnQMegqUBIfjgXz6IyCOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:32:7b:c3:08:30:57:0c:f1:79:aa:fb:8b:ad:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Validity
Not Before: Apr 17 08:01:05 2026 GMT
Not After : Apr 18 08:01:05 2026 GMT
Subject: CN=ddd34888ddb05d6005f0e1eb06e6a95245cfd044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c1:56:7c:7b:fb:64:ed:f5:1e:f2:1c:81:7c:
f7:5a:46:cd:6b:85:2c:c2:70:bb:b8:3e:97:cb:20:
18:ba:a4:aa:69:4c:92:87:d8:0c:f6:dc:34:b7:98:
33:35:b7:8d:4a:88:7d:89:df:14:88:dc:14:96:74:
dd:81:58:02:b4:2d:b0:21:06:87:42:3f:3e:7c:ac:
12:c7:ee:50:23:e7:c5:c4:ba:8a:b8:f0:43:40:40:
34:8e:3e:62:cc:2b:54:d0:51:58:8d:8c:79:26:e3:
d9:10:65:b9:c3:5a:fd:1c:5a:6f:bf:20:a5:30:1a:
e2:4a:51:f4:0f:76:6c:06:03:d4:b7:ca:95:a8:60:
ba:57:87:8c:47:51:76:98:73:99:51:51:d6:78:1c:
75:e2:9d:cf:62:e8:2d:41:a2:67:aa:b5:44:c7:42:
1a:a2:5d:78:b6:21:da:b0:5c:16:10:cc:09:45:86:
ab:82:29:7f:e9:f8:08:10:5a:3e:b0:77:a0:91:c2:
7f:93:6b:f6:bc:ff:03:e2:ab:52:54:5c:6a:fe:d3:
3a:87:61:0b:06:37:f5:4b:fd:ef:51:75:7e:06:8d:
57:15:99:1a:66:2f:e4:bc:b2:52:7f:84:e4:b2:74:
50:40:0f:7c:98:05:11:54:fa:69:b5:ca:60:49:6d:
85:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D3:48:88:DD:B0:5D:60:05:F0:E1:EB:06:E6:A9:52:45:CF:D0:44
X509v3 Authority Key Identifier:
keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e7:5f:21:67:96:c6:bc:4e:3e:8e:73:8d:c3:c2:1c:fe:07:
d5:92:f6:31:e1:2c:94:40:0a:f5:c9:2f:79:8f:e9:ca:3d:b3:
ff:db:55:86:65:39:3c:a0:ee:3e:a6:6b:52:57:b2:b7:e9:0e:
3b:9d:50:8b:6a:c2:dd:07:6b:f1:ef:a4:0d:71:79:14:d8:69:
b9:f1:9b:6e:e9:53:c5:2b:f0:18:25:aa:24:6d:d6:ef:cc:6b:
17:aa:29:82:7e:dd:cb:88:3d:f2:1c:9a:57:c9:38:8d:eb:75:
72:2c:3b:b8:38:bd:23:e6:77:48:dc:c8:52:80:bd:c5:b2:94:
ff:e8:8b:b1:ef:82:5f:e0:eb:cc:68:67:78:d4:ed:11:4a:61:
02:34:72:ae:86:02:d2:12:42:60:f2:cb:3b:46:f7:8f:04:e3:
f9:a3:4e:d2:31:d4:30:06:e9:2e:49:60:26:e5:26:9b:3d:7b:
cd:62:5a:07:22:db:60:88:ab:e7:06:67:11:d2:e3:4f:ff:2e:
bd:3d:0c:35:af:d8:12:32:0f:e1:34:e3:82:4d:13:11:fd:c1:
a8:20:87:76:5b:a3:0f:47:fb:bb:f0:8c:13:ab:7a:f3:65:56:
43:04:31:7a:31:62:42:d1:ea:49:08:b6:04:53:ab:fd:3d:52:
ae:bc:03:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:26:59 2026 by rpki-client