Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
File: HSixjfJE24nyuXpscmKXM7OIYC8.mft (raw, json)
Hash identifier: jhONyuXJtFs1niuQIWXUsJ2giwnGxwBxbZSMmgY0N/A=
Subject key identifier: DF:ED:4F:D7:5A:19:13:02:9B:13:DE:D9:9E:D7:35:6C:00:F2:18:24
Authority key identifier: 1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F
Certificate issuer: /CN=1d28b18df244db89f2b97a6c72629733b388602f
Certificate serial: 019D98509093BED6198678B8F00311D9A036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 22:01:49 +0000
Manifest this update: Thu 16 Apr 2026 22:01:49 +0000
Manifest next update: Fri 17 Apr 2026 22:01:49 +0000
Files and hashes: 1: F2tzVDQBbkmIrf7Rzc0Z1mCkiic.roa (hash: 9oOlsoWuljVApYdk+dHkE0uI0xd3Y1H6oZJ44vPob6Y=)
2: HSixjfJE24nyuXpscmKXM7OIYC8.crl (hash: 3lGWSHY01oP6LscV2PhGfzTWwc5k5P+pQnK5O6REmtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:90:93:be:d6:19:86:78:b8:f0:03:11:d9:a0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d28b18df244db89f2b97a6c72629733b388602f
Validity
Not Before: Apr 16 22:01:49 2026 GMT
Not After : Apr 17 22:01:49 2026 GMT
Subject: CN=dfed4fd75a1913029b13ded99ed7356c00f21824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:18:d1:2c:e1:e4:e0:b1:bd:52:64:af:fe:
b2:cb:f4:e1:62:5c:a4:0d:7d:b6:16:5d:98:74:d7:
0f:db:2b:ab:a7:12:31:e0:8a:d1:56:0d:11:91:8b:
b0:87:53:96:08:2c:8a:09:c4:7f:87:a2:77:9a:96:
97:cb:02:cf:34:b8:2b:d6:0a:b6:9b:f1:fe:ad:47:
b2:4a:19:25:5c:be:2f:db:df:99:40:d5:a9:2f:a7:
97:5e:ed:67:de:a0:81:43:08:66:a3:af:28:81:03:
f9:4e:7b:78:2d:aa:ea:b8:fe:c8:4e:99:d4:c0:c2:
47:84:c5:dd:b7:8d:fe:fe:bb:70:4f:f8:84:06:cc:
ff:31:0e:84:05:33:ed:bf:b9:eb:48:31:d7:1a:21:
bb:6e:2d:e7:46:e0:52:7e:f8:b2:41:68:63:bb:33:
8c:95:00:6f:73:d9:cf:8b:fa:1f:af:93:26:e6:63:
ec:5b:19:ad:b2:76:f8:f3:e1:d2:f4:f7:0c:2a:4c:
d0:05:82:07:6c:56:e0:78:e6:1c:c1:f8:f7:2b:db:
a4:d6:ab:ee:c3:3a:49:7b:26:fb:42:d2:8c:c4:c0:
e0:9b:98:84:1d:bb:69:5c:f0:24:1c:08:b6:65:ae:
b8:29:f6:b7:1d:3d:4f:59:fc:11:28:8a:25:53:54:
d1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:ED:4F:D7:5A:19:13:02:9B:13:DE:D9:9E:D7:35:6C:00:F2:18:24
X509v3 Authority Key Identifier:
keyid:1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b5:e1:b4:75:68:c1:a4:e2:53:fc:86:20:92:4c:4e:cf:7e:
e5:c8:ff:d7:15:30:02:60:1d:fe:9f:7e:da:c9:34:ed:31:c3:
a2:9c:f2:a0:2a:46:33:37:eb:7c:bd:3e:12:cd:a9:61:38:54:
78:5c:7f:0d:72:3e:a6:f0:c0:3e:39:53:9a:d3:c8:12:f6:4c:
6e:98:ba:53:97:36:6d:57:a3:ba:a7:7b:fa:81:70:a9:3c:7b:
d9:0f:31:94:5b:49:1c:87:4e:ab:b8:97:13:60:e8:53:f4:fe:
82:9a:05:f1:50:61:0e:49:01:e0:43:e3:b5:1f:38:6c:81:cc:
73:da:f5:53:09:22:10:63:a4:a8:a8:79:0a:39:64:4c:4e:2f:
2a:3b:6d:84:a0:f5:38:23:1b:30:62:1d:f1:58:c1:d0:68:24:
5c:de:aa:bc:b0:ec:9f:34:f3:3e:5d:a4:cb:20:c8:9c:ed:2b:
04:20:11:3b:0d:68:87:c3:68:68:66:19:cc:42:bc:3a:bb:d6:
dd:59:dc:57:69:90:d7:25:2b:fd:96:6c:5e:1f:88:eb:88:81:
48:50:0a:d1:9e:24:f7:9b:03:c9:16:c7:bd:a9:f7:ac:9f:7c:
6a:35:29:53:ad:15:69:6a:6e:89:5b:84:0a:f6:f6:05:3f:5e:
c9:fa:8f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:47:04 2026 by rpki-client