Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft
File: hnWNin7SGnQXLM7sM4xk02sDeNQ.mft (raw, json)
Hash identifier: m2pTahyaUu1nB0zcBPTujINRTaqOGV0GrDpaBACmaKU=
Subject key identifier: BD:E0:A6:E6:B4:31:F8:6A:91:E2:C2:2D:15:7A:17:C2:AE:E6:B4:02
Authority key identifier: 86:75:8D:8A:7E:D2:1A:74:17:2C:CE:EC:33:8C:64:D3:6B:03:78:D4
Certificate issuer: /CN=86758d8a7ed21a74172cceec338c64d36b0378d4
Certificate serial: 019D99CFD4C94EB95D76D736BA47A26BC655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hnWNin7SGnQXLM7sM4xk02sDeNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft
Manifest number: 072A
Signing time: Fri 17 Apr 2026 05:00:27 +0000
Manifest this update: Fri 17 Apr 2026 05:00:27 +0000
Manifest next update: Sat 18 Apr 2026 05:00:27 +0000
Files and hashes: 1: OpVP9Jc1xVaXbqJf86X7XVLPEVg.roa (hash: hPcfxfvwY6smKQuTD+0Hf69aqpf3jRgfObWjITTCQao=)
2: hnWNin7SGnQXLM7sM4xk02sDeNQ.crl (hash: DUVz/lKW9Kr72ZJI7k6v8VhUNkfB2cIJiAQWsTueQso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hnWNin7SGnQXLM7sM4xk02sDeNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:d4:c9:4e:b9:5d:76:d7:36:ba:47:a2:6b:c6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86758d8a7ed21a74172cceec338c64d36b0378d4
Validity
Not Before: Apr 17 05:00:27 2026 GMT
Not After : Apr 18 05:00:27 2026 GMT
Subject: CN=bde0a6e6b431f86a91e2c22d157a17c2aee6b402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:65:ee:6c:18:68:d2:6d:2a:29:e2:2b:71:14:
a3:47:cc:bf:f8:5c:35:5a:5b:a3:6f:e0:e3:a2:a1:
25:50:56:c4:3a:ee:ae:8e:8b:f2:48:9e:ab:8d:21:
7a:57:7d:5e:44:d6:6e:e5:c6:35:89:95:07:6b:a0:
7c:3d:c7:cc:50:e5:7a:a2:19:0d:b8:32:de:d7:3d:
e6:d7:c1:85:75:57:c4:3d:05:5e:4e:d7:36:45:72:
c3:62:a7:d7:83:d7:67:34:90:bc:1c:75:79:0b:57:
93:1f:17:b0:91:c3:7d:c5:0f:d1:9c:73:91:e7:61:
f1:33:32:b6:dd:58:39:80:66:60:c9:61:1b:ee:33:
80:07:56:ec:8f:9e:51:a0:0b:3b:96:49:8f:1b:cf:
86:f7:be:a9:07:20:83:b1:16:46:20:9c:2a:06:52:
d7:f2:29:e7:5c:bb:13:28:60:88:5c:c9:5f:03:41:
6f:79:e7:86:3a:84:54:1b:02:c7:53:1f:70:de:22:
1c:c0:ee:7e:36:0d:d0:0f:ce:26:76:26:d4:fc:80:
d6:1d:47:af:2e:84:e0:3a:25:65:78:9f:45:b4:99:
7a:71:83:bc:5c:57:51:b1:97:ac:46:57:7c:88:c0:
00:f2:63:9b:02:ad:5d:64:05:0c:12:ee:29:66:bf:
a6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E0:A6:E6:B4:31:F8:6A:91:E2:C2:2D:15:7A:17:C2:AE:E6:B4:02
X509v3 Authority Key Identifier:
keyid:86:75:8D:8A:7E:D2:1A:74:17:2C:CE:EC:33:8C:64:D3:6B:03:78:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hnWNin7SGnQXLM7sM4xk02sDeNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ca:c3:d3:9d:8b:e6:cd:a8:8d:b2:73:4c:af:4d:a6:35:a3:
6f:80:84:1a:01:f5:35:29:e7:ed:50:d0:8e:c6:fb:be:e4:d8:
1b:c3:03:ef:31:b1:60:18:73:47:6d:fd:f4:c5:14:6d:b2:d3:
50:d7:f5:ee:bc:92:bb:e5:07:4b:6a:4b:8d:ab:41:6a:5e:2f:
7a:6e:ab:b8:da:f2:03:5d:19:f1:dd:af:9f:4a:5b:2b:32:ca:
a3:c2:60:f6:8a:40:98:fb:a7:be:2a:67:90:87:91:43:a0:fe:
dc:69:dc:57:95:91:19:e6:40:bd:a3:31:e8:c7:b4:12:65:ed:
97:92:73:54:5e:60:db:7d:9b:aa:0f:25:11:fb:16:8f:78:e4:
90:62:b6:3c:2d:46:14:df:8e:22:3e:91:d9:b5:b4:3b:07:aa:
d7:4d:a5:82:0a:7d:1c:de:45:4a:8d:84:9c:1c:f8:29:88:88:
32:4f:05:15:e6:40:b5:cf:b4:bf:4f:22:cc:79:f3:5d:46:de:
2f:f5:4d:06:4e:1c:b0:6d:25:e9:92:e4:c6:c0:39:ca:3a:be:
c8:eb:66:c3:cc:59:cb:95:73:67:a6:29:0e:04:26:16:aa:31:
dd:9e:1c:61:33:1c:07:06:64:94:b1:cb:a9:ba:bc:f1:75:00:
68:16:2b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:16:20 2026 by rpki-client