Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
File: hk3xEo99QsaISGO18nPz66ZZYVY.mft (raw, json)
Hash identifier: pkm2gdCKFEHQOF9Cei1m5ulA6Ma9mVoMW51sVc4vP7Y=
Subject key identifier: 7C:59:CA:57:3D:3C:89:FA:09:F7:63:E6:93:28:08:A6:6D:D8:EA:38
Authority key identifier: 86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
Certificate issuer: /CN=864df1128f7d42c6884863b5f273f3eba6596156
Certificate serial: 019D9D75F78D703852B7302EDE561F671EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
Manifest number: 0491
Signing time: Fri 17 Apr 2026 22:00:47 +0000
Manifest this update: Fri 17 Apr 2026 22:00:47 +0000
Manifest next update: Sat 18 Apr 2026 22:00:47 +0000
Files and hashes: 1: 1-YhcIhEEArw6IoG9b79g8foLA58.roa (hash: pZFDtYibY4f6p1KpnyYKR++X/1rjAASd4QgMl9sz5X0=)
2: hJF_Qf_RH8PNrcx0oAWzmG_6QvI.roa (hash: ITLAoU923u7FKi0+iXA4NTM9zJ20lGavrZ5Z4X2QkmY=)
3: hk3xEo99QsaISGO18nPz66ZZYVY.crl (hash: 4ctedqwdWfAvSvAjOypNY9PL3LYnXwtd0UGu0lLxtSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:f7:8d:70:38:52:b7:30:2e:de:56:1f:67:1e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864df1128f7d42c6884863b5f273f3eba6596156
Validity
Not Before: Apr 17 22:00:47 2026 GMT
Not After : Apr 18 22:00:47 2026 GMT
Subject: CN=7c59ca573d3c89fa09f763e6932808a66dd8ea38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:86:b0:f0:34:46:2b:d1:73:cf:1f:c1:3a:
2e:d6:b3:44:a2:2c:0a:79:fe:5f:c8:3d:94:0f:ac:
21:94:76:7d:09:eb:8c:45:4e:48:e8:df:63:76:b5:
3b:15:34:d0:52:8e:88:d4:f8:4a:9f:2a:e6:b8:82:
49:2c:21:dc:60:64:ef:a4:8f:80:00:a3:24:81:13:
7f:11:4b:f9:ce:53:db:a4:1e:51:10:13:45:bd:6f:
34:d3:b7:8e:49:3f:56:5a:e5:1f:ba:28:7f:a0:f7:
6c:30:c1:40:21:31:34:e2:18:94:a8:33:0e:d6:ee:
6d:0b:4a:54:ce:5b:ca:bc:00:01:ca:18:bc:a1:d1:
62:64:30:23:01:bd:90:91:4e:1b:72:b6:72:f8:c8:
5c:fe:a0:ad:33:de:88:ab:08:4a:49:c7:79:95:39:
cb:0a:26:63:56:c3:21:25:b4:e8:01:d9:4f:af:09:
0b:71:aa:89:13:12:78:b8:82:46:7b:62:2f:f9:1b:
1f:02:59:bd:4b:03:ed:97:4b:54:1f:b5:d4:55:ba:
81:ed:9a:91:5d:01:a9:5c:c0:3a:b8:de:a3:94:02:
26:a6:3f:1a:83:74:bd:0e:91:81:65:f1:8c:92:0a:
30:78:a2:e9:dc:79:ef:ef:d0:c0:77:ea:ba:bc:e3:
61:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:59:CA:57:3D:3C:89:FA:09:F7:63:E6:93:28:08:A6:6D:D8:EA:38
X509v3 Authority Key Identifier:
keyid:86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:33:9c:2a:f5:4a:fc:31:78:05:fa:07:6c:ad:2b:69:fb:45:
e3:38:c1:07:8c:e7:cd:25:36:ea:1d:1d:27:93:af:75:23:ab:
d2:6d:ab:8b:a2:e4:b4:c8:30:06:68:a4:7d:b6:71:3d:68:40:
49:07:ba:0d:14:ed:3f:ba:90:c9:f0:21:47:ac:db:10:b2:4f:
bc:9b:ce:e4:ed:dc:6f:01:86:5e:e1:eb:dd:b9:f0:64:e6:66:
14:b3:cd:3b:d2:fe:8b:a4:28:05:bf:07:44:75:03:7c:d5:ef:
2a:86:dc:be:dd:bd:53:65:7d:02:0b:fb:d1:f7:6d:a0:21:20:
27:22:f2:36:a7:5a:52:b8:b6:f4:f5:50:b1:da:e9:3e:47:8a:
a6:b7:50:2e:f1:62:b9:b0:dc:ef:48:ed:44:bd:26:fe:26:9f:
21:53:c0:4b:e1:d1:a1:99:4b:0d:69:a9:4c:d3:8b:f4:59:e7:
0c:7d:29:63:2f:df:f2:c5:4a:45:77:9f:1e:6a:e6:96:43:b0:
46:26:5d:c4:14:87:54:41:72:31:fc:e6:ba:2e:d0:16:e7:f8:
c8:b4:63:19:77:74:38:65:38:24:3d:26:a5:0e:a2:db:a9:e5:
b5:04:2d:7e:01:99:71:fd:80:2c:8c:8d:38:02:df:a0:49:4a:
a3:6d:3e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:11:12 2026 by rpki-client