Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
File: hFPR6GGO-ProB13dWCcNCUAGvpk.mft (raw, json)
Hash identifier: JWHhBZidqlRrWMdE75SzU99DNx/vZbBW/33ipeV9Tk0=
Subject key identifier: 65:94:E8:8D:53:67:F3:43:FC:8F:92:4D:C4:33:78:09:9E:23:FF:47
Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
Certificate issuer: /CN=8453d1e8618ef8fae8075ddd58270d094006be99
Certificate serial: 019DA4540B26F76801516D6311AF294AB085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
Manifest number: 0542
Signing time: Sun 19 Apr 2026 06:01:04 +0000
Manifest this update: Sun 19 Apr 2026 06:01:04 +0000
Manifest next update: Mon 20 Apr 2026 06:01:04 +0000
Files and hashes: 1: H6fEkqVKszpXDZG-GKB24yi6fGA.roa (hash: VZx0qzECb8pJ5sSNI4YrIdOddJh7Fq3Sv2eEUes2jOk=)
2: hFPR6GGO-ProB13dWCcNCUAGvpk.crl (hash: gRtQi81ngkyuuIMDwBr637jF0UeE5PUnGmQ4L4Wfq0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:0b:26:f7:68:01:51:6d:63:11:af:29:4a:b0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99
Validity
Not Before: Apr 19 06:01:04 2026 GMT
Not After : Apr 20 06:01:04 2026 GMT
Subject: CN=6594e88d5367f343fc8f924dc43378099e23ff47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b1:ff:d0:7d:06:9c:a1:7b:09:1b:73:a9:77:
5d:8f:24:8f:08:ec:f0:e7:3b:87:b3:7a:79:3b:84:
66:a8:f7:7c:d8:7d:53:64:82:77:7b:96:88:e7:44:
32:19:03:41:ae:a1:ca:87:13:e8:fe:b3:b8:b1:f2:
20:88:d3:0e:f4:21:7a:0d:cc:eb:4e:d6:1e:a5:0f:
24:fb:54:cb:fa:1e:07:d1:5f:ed:48:33:a7:fb:a3:
a4:93:31:c3:c8:56:bf:34:e3:03:6a:4b:da:8b:cf:
40:c9:e7:6c:95:70:98:13:d4:6b:8d:ac:67:24:c6:
85:65:36:78:00:62:bb:ec:b0:28:e0:c4:80:e2:6c:
68:d4:33:e7:97:d4:a3:92:04:2a:67:2d:d2:ac:c3:
0c:11:52:04:19:fe:32:f3:0c:67:1b:7d:a9:db:9b:
77:a3:14:e8:78:48:f3:9f:4c:ff:bb:c7:e1:e9:4a:
dc:d3:db:e1:f0:a6:b1:fc:af:76:85:49:34:b0:d1:
af:87:78:f8:f3:02:e8:e9:e3:af:57:4a:7d:45:3d:
ca:6a:03:30:bb:4d:63:f2:b0:6c:a1:86:a9:df:a8:
0e:e3:a0:62:cb:3e:f5:9c:61:bc:5a:86:f6:97:b4:
db:ee:1a:19:54:62:ad:91:91:fb:0a:a7:2a:82:ed:
cf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:94:E8:8D:53:67:F3:43:FC:8F:92:4D:C4:33:78:09:9E:23:FF:47
X509v3 Authority Key Identifier:
keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:0d:5d:70:3f:a4:36:31:37:cc:22:d3:3d:18:44:fa:1c:61:
15:3f:0c:07:22:3f:15:17:50:49:68:9c:54:a0:f9:9b:3f:e6:
56:b4:27:11:9a:9a:04:df:24:dd:a5:38:7f:0b:41:02:6c:23:
b2:e9:d9:4f:4d:fc:2f:e3:65:ba:28:da:46:10:c7:f6:c9:cc:
f2:39:b5:f8:40:c6:c5:82:82:97:4d:5b:da:42:bd:6e:79:43:
9c:0b:fe:4e:65:08:06:91:8a:1e:f3:b8:18:98:a2:a0:fa:31:
45:d4:cf:07:fd:f8:cf:d4:70:58:e1:77:4e:bf:98:5c:0f:17:
de:ee:b5:02:dd:5b:9c:d0:3f:75:0a:76:bd:e9:f6:0b:af:ee:
a3:e3:40:b9:08:da:aa:8a:c4:85:15:94:3b:c3:77:c9:ef:1c:
1e:a9:2d:b2:43:1b:28:ce:70:21:53:01:91:ae:97:a4:91:42:
64:ea:80:a2:51:31:18:b9:79:cb:4e:a3:bf:e7:b3:f5:c3:00:
ee:98:f3:44:49:3c:e7:64:89:91:1f:d2:44:0e:11:24:b9:f8:
76:59:71:f6:d8:4a:8b:7b:db:0b:31:a6:85:a1:aa:e1:aa:c0:
31:a7:90:dc:84:f0:77:b9:bc:23:b8:ce:ce:cf:bd:b0:de:3d:
28:10:ea:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kVAsm92gBUW1jEa8pSrCFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NTNkMWU4NjE4ZWY4ZmFlODA3NWRkZDU4MjcwZDA5NDAw
NmJlOTkwHhcNMjYwNDE5MDYwMTA0WhcNMjYwNDIwMDYwMTA0WjAzMTEwLwYDVQQD
Eyg2NTk0ZTg4ZDUzNjdmMzQzZmM4ZjkyNGRjNDMzNzgwOTllMjNmZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrH/0H0GnKF7CRtzqXddjySPCOzw
5zuHs3p5O4RmqPd82H1TZIJ3e5aI50QyGQNBrqHKhxPo/rO4sfIgiNMO9CF6Dczr
TtYepQ8k+1TL+h4H0V/tSDOn+6OkkzHDyFa/NOMDakvai89AyedslXCYE9Rrjaxn
JMaFZTZ4AGK77LAo4MSA4mxo1DPnl9SjkgQqZy3SrMMMEVIEGf4y8wxnG32p25t3
oxToeEjzn0z/u8fh6Urc09vh8Kax/K92hUk0sNGvh3j48wLo6eOvV0p9RT3KagMw
u01j8rBsoYap36gO46Biyz71nGG8Wob2l7Tb7hoZVGKtkZH7Cqcqgu3POwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWU6I1TZ/ND/I+STcQzeAmeI/9HMB8GA1UdIwQY
MBaAFIRT0ehhjvj66Add3VgnDQlABr6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83ODBjMzQtMTgzYi00NmY0LWI5NjEt
ZDRhZTQwNzEzMjhmLzEvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83ODBjMzQtMTgzYi00NmY0LWI5NjEtZDRhZTQwNzEzMjhm
LzEvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5g1dcD+k
NjE3zCLTPRhE+hxhFT8MByI/FRdQSWicVKD5mz/mVrQnEZqaBN8k3aU4fwtBAmwj
sunZT038L+NluijaRhDH9snM8jm1+EDGxYKCl01b2kK9bnlDnAv+TmUIBpGKHvO4
GJiioPoxRdTPB/34z9RwWOF3Tr+YXA8X3u61At1bnNA/dQp2ven2C6/uo+NAuQja
qorEhRWUO8N3ye8cHqktskMbKM5wIVMBka6XpJFCZOqAolExGLl5y06jv+ez9cMA
7pjzREk852SJkR/SRA4RJLn4dllx9thKi3vbCzGmhaGq4arAMaeQ3ITwd7m8I7jO
zs+9sN49KBDqQQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:47 2026 by rpki-client