Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
File: HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft (raw, json)
Hash identifier: D5WVpL4p0CEYNkZjBRjmUc2f6ubEVvcs44FaFgMcGMs=
Subject key identifier: 9C:58:29:FC:12:5A:78:FD:54:15:5D:CF:FB:81:07:6D:9D:61:89:63
Authority key identifier: 1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C
Certificate issuer: /CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c
Certificate serial: 019D984F7E36DFFFB438F60821A0320C2521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
Manifest number: 15E5
Signing time: Thu 16 Apr 2026 22:00:39 +0000
Manifest this update: Thu 16 Apr 2026 22:00:39 +0000
Manifest next update: Fri 17 Apr 2026 22:00:39 +0000
Files and hashes: 1: HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl (hash: CRV5fu/SdtIQH9HzYhVeDgGrfYQdwC81IArigl+aIi4=)
2: sliXU2u2F5b-dxDpfrgoAvWB8tc.roa (hash: shJia0FcMyfJBOItG4MpW4lD3TG/16YLivfvP64r49Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:7e:36:df:ff:b4:38:f6:08:21:a0:32:0c:25:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c
Validity
Not Before: Apr 16 22:00:39 2026 GMT
Not After : Apr 17 22:00:39 2026 GMT
Subject: CN=9c5829fc125a78fd54155dcffb81076d9d618963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:85:d5:12:8f:d0:62:07:a0:12:31:aa:5a:
5a:35:fb:2a:5d:12:1e:7e:d4:80:56:52:9c:a0:a5:
62:0e:b1:54:dc:26:f8:9e:96:18:c5:27:41:b8:d6:
e4:96:f9:af:e4:3f:75:49:11:00:ae:b6:19:d7:38:
cf:75:5c:48:37:53:6e:0c:ff:2b:45:b1:3b:c9:88:
cf:3e:ad:a8:c1:23:d4:15:e0:ca:53:1c:06:c4:bc:
ac:45:ef:9d:7d:05:86:1f:98:40:3a:ad:87:a2:8b:
b1:e7:7b:8f:31:96:f3:c8:0e:bd:a8:8a:52:91:d3:
79:14:c1:b6:9c:a1:5a:4d:36:8b:aa:b1:13:19:de:
81:d9:79:19:83:7e:f0:97:73:13:83:4d:52:23:e0:
a1:b0:13:ec:5c:78:df:3e:dc:9c:c4:51:4f:da:a5:
75:d1:04:d2:bc:b1:40:63:bb:c0:a0:7b:21:ad:1e:
c1:c7:12:b3:02:6f:0e:c0:1d:f2:66:51:93:64:45:
8b:d1:22:e0:9a:6c:18:05:ed:91:dd:fb:c4:1d:a3:
cb:f8:9d:15:33:7c:0c:1b:f0:bf:81:c7:d5:90:40:
48:6a:51:6f:04:8e:dc:9f:a2:d9:14:1e:d8:1b:56:
3d:69:a4:32:e7:cb:31:8b:49:5d:3f:23:29:d3:01:
cd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:58:29:FC:12:5A:78:FD:54:15:5D:CF:FB:81:07:6D:9D:61:89:63
X509v3 Authority Key Identifier:
keyid:1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9c:9a:33:5f:39:a6:cd:6b:ca:0c:7e:c9:4e:d9:c8:c1:d7:
4e:ae:05:21:fa:9d:2f:8d:20:1a:62:e6:ea:da:52:db:2c:0a:
64:b2:2b:78:03:db:ea:04:8d:d5:bd:c0:aa:54:6d:25:10:3d:
be:09:de:f9:d0:0f:3b:38:68:c8:02:5a:4a:0b:43:4e:19:11:
e3:fd:53:6e:3b:08:f2:83:c1:f9:37:69:1d:d9:f3:ac:a1:12:
76:04:e4:47:18:4a:a6:8f:73:44:0f:af:7f:76:2f:16:4d:b7:
bd:2e:bd:b4:9c:92:e2:61:e5:04:5d:89:09:6a:6d:ce:bc:ff:
9d:2d:9e:1f:fa:55:3d:d2:da:79:7a:42:a4:52:99:e5:15:8e:
30:86:4c:82:95:99:a7:df:f9:b3:9b:1c:eb:df:4c:1f:85:96:
d0:e1:a5:23:dd:a7:05:55:55:7a:c9:c6:86:65:d9:24:1e:50:
fc:32:40:33:69:95:4b:32:56:fa:83:c5:fc:83:6a:26:f5:ff:
db:ef:1b:f6:1a:db:f1:47:a6:c5:34:a1:f8:35:d6:46:9b:b4:
ed:40:74:97:2c:a9:8a:66:9a:fb:b6:a5:40:12:f7:04:4f:bc:
89:63:ce:00:b4:4a:7b:ab:94:6e:09:45:60:3f:37:cf:85:15:
de:f0:60:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:07:07 2026 by rpki-client