Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
File: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft (raw, json)
Hash identifier: u6H0cfBctkgv6GCPBUJt2LFL07Wl6jqpW69iSVCteMg=
Subject key identifier: 30:9C:E7:1F:B5:97:6E:8B:97:07:57:E9:48:61:FB:89:2B:48:7F:65
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019D9B19F1933B40C85199B8F53C1919BBBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
Manifest number: 01B5
Signing time: Fri 17 Apr 2026 11:01:01 +0000
Manifest this update: Fri 17 Apr 2026 11:01:01 +0000
Manifest next update: Sat 18 Apr 2026 11:01:01 +0000
Files and hashes: 1: F7OazNxmHQIZG_1NbQyBZDuRfp0.roa (hash: kfyCu9kGmBZWf6iCvzc+imifHO9IEOu6CS+tqE1Bls8=)
2: HpCfEImHkb3OVRB7Cg-DUXnBu1g.roa (hash: cdsGXatsZSEPYOtFACJlSbDzB+wwXF1txphXoAyPSt4=)
3: LjlO1ofuYmhqoyn2NlCRL_J5HTw.roa (hash: jsk6wV+xRGDXW32pveWO5wizMKfLghxcNIdSPlEaCLg=)
4: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl (hash: q9CiWsqDG07jFKDHK6kqWuGdteyvmqji3OMCJybI5/k=)
5: lsiyM54BBzpQuET-XZoryhgj5Fc.roa (hash: D7wAdPXpUkQBrLPttbGEryAEGM/tkPDIMcLbM5iF1RM=)
6: opdAPP4XfkWYA7yU3ItVjBZuv-c.roa (hash: 0Hfm1qyjd3lUos1jStXhOtEuhh/ZjqT6H9OzWUho5SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:f1:93:3b:40:c8:51:99:b8:f5:3c:19:19:bb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: Apr 17 11:01:01 2026 GMT
Not After : Apr 18 11:01:01 2026 GMT
Subject: CN=309ce71fb5976e8b970757e94861fb892b487f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:33:4c:12:78:5b:58:b3:dc:92:26:82:40:e7:
a0:64:1e:51:f4:9e:89:35:83:be:aa:04:b4:20:55:
9a:bb:84:86:ea:a9:f1:d0:63:7c:fb:14:e6:7f:fa:
84:82:24:43:75:d5:ec:c1:2e:af:43:47:46:c9:f3:
37:59:b7:ce:e7:8f:95:c2:4d:26:a5:f9:b5:42:d3:
4d:6e:9e:f2:9d:ec:7d:97:c5:f8:07:e8:bd:4e:88:
d4:1e:13:bb:07:d2:20:6b:ee:dc:f6:c0:c4:74:60:
16:98:c7:2f:d2:d8:30:56:13:ac:2b:74:9a:ad:3b:
4f:c8:5d:7e:d7:e2:9e:5d:e2:e4:8c:47:96:4d:60:
51:6b:3a:ec:be:fb:a6:2c:bc:a1:84:e0:55:25:d2:
4a:73:c4:99:97:4b:a5:c4:8c:31:3b:7f:1c:16:1f:
ed:aa:14:b7:d6:bd:47:e9:16:bb:ba:90:3a:b0:fa:
c2:1f:2f:69:a1:ca:68:e1:d4:13:54:72:ef:5a:a3:
61:df:c9:8d:7a:15:e0:7f:b6:bb:8a:0d:bd:5d:c9:
e1:35:5a:11:5d:9b:cd:f5:fb:73:05:c5:7c:b6:2c:
b2:dd:65:c9:87:a6:84:6f:d7:c7:14:74:69:db:1c:
f8:00:da:40:cc:30:62:a1:20:12:6f:65:1f:15:22:
57:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9C:E7:1F:B5:97:6E:8B:97:07:57:E9:48:61:FB:89:2B:48:7F:65
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:df:9e:ef:3a:4b:9a:41:17:b3:e3:81:85:3e:58:c7:1d:f8:
d9:87:63:11:32:34:76:18:68:a9:7a:f4:e1:06:bd:e9:d0:3d:
20:26:ec:f6:3b:5f:67:03:d9:af:e0:e1:69:26:04:79:51:b3:
2a:af:91:cd:23:9b:75:5c:27:c3:99:65:da:12:37:94:04:48:
6b:68:b1:fa:f8:5b:50:82:4e:e6:b0:4a:ed:0e:f0:a0:20:a6:
63:cc:48:45:98:08:ec:34:2f:7a:1a:a5:77:84:c1:1c:44:95:
cf:90:bc:ea:11:53:86:8e:24:a8:41:94:1b:54:64:0c:99:85:
2c:f9:eb:94:8d:a1:5b:fe:4b:65:11:c0:6d:4e:fc:1c:c9:1d:
ac:96:32:1a:78:87:da:75:e5:ae:1d:ca:41:4d:a5:2d:5f:96:
e3:d6:53:42:e5:5f:37:97:61:12:f1:de:67:3a:de:e4:c7:78:
12:61:e7:e2:02:87:0c:fc:1c:76:5c:05:a9:f0:2b:c5:bb:9e:
d1:0b:03:14:f0:17:ef:a6:46:af:75:eb:ca:65:e4:f4:9b:fb:
6d:32:74:fc:50:dd:2b:6f:19:28:5f:39:16:6e:9e:1f:54:33:
91:9f:54:f7:74:41:32:5d:e5:fe:56:ec:74:18:1c:c5:56:61:
c2:32:3b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:56:18 2026 by rpki-client