Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
File: hXLVrMJRZ2mcf886G4BOoyWsTl0.mft (raw, json)
Hash identifier: I1+Yk2v2ZV6qe0MYVd7CNoIsUXJhfNyrDBwfkWQ6tac=
Subject key identifier: A1:67:F5:04:06:60:26:8E:82:F6:92:9A:0C:48:C3:39:14:69:9A:ED
Authority key identifier: 85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
Certificate issuer: /CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Certificate serial: 019D9A3E1A4E467531C0A9D70D836BC3B581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
Manifest number: 17F1
Signing time: Fri 17 Apr 2026 07:00:54 +0000
Manifest this update: Fri 17 Apr 2026 07:00:54 +0000
Manifest next update: Sat 18 Apr 2026 07:00:54 +0000
Files and hashes: 1: hBm5sqEsYgYzGLvahciDaWXB5tc.roa (hash: B8HbKYDNFdLFprrv9ZSAbv02c/Z7c5d/cp8eKIMZxIo=)
2: hXLVrMJRZ2mcf886G4BOoyWsTl0.crl (hash: yiNoWbO7U5aV5Yoemoqhl+J4l8ejIaXFAmuayw8NJLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:1a:4e:46:75:31:c0:a9:d7:0d:83:6b:c3:b5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Validity
Not Before: Apr 17 07:00:54 2026 GMT
Not After : Apr 18 07:00:54 2026 GMT
Subject: CN=a167f5040660268e82f6929a0c48c33914699aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:10:f6:ce:44:89:d2:70:b8:2c:15:d8:6d:f8:
c5:4e:e7:db:50:27:a6:78:e4:c0:38:2b:d0:45:69:
9b:7b:cb:11:76:75:59:25:08:0f:53:48:cf:cc:45:
62:99:ca:34:f9:7a:80:54:f4:34:28:d9:d7:eb:94:
cc:47:3e:ce:bc:8c:77:ec:7d:c2:3f:cc:d8:fe:8e:
27:ed:bb:a2:2e:64:13:09:af:30:67:02:4d:31:17:
8e:19:1f:c3:fd:22:d3:7f:d1:6b:f2:9a:8c:bb:c9:
9c:cd:24:8b:ef:e0:71:a8:9e:82:b5:a3:33:ba:97:
f3:a9:6e:77:10:3d:ad:c9:19:a1:55:d2:be:03:f6:
6e:a7:36:75:bd:01:d3:4b:82:9a:80:53:ab:57:0e:
ab:77:a7:5a:3c:95:54:61:eb:2c:47:9c:d6:4d:04:
18:ba:df:6b:ac:f1:ad:56:40:e6:4b:64:ee:9b:55:
43:74:be:eb:36:07:af:4b:45:ea:df:26:b3:6d:64:
82:9b:2e:79:33:3c:c7:c8:72:09:4a:9f:bc:9a:3d:
29:84:ba:fa:2c:fb:66:92:0a:68:83:b4:99:1a:f2:
a6:08:4a:a7:2e:7c:57:0c:c7:ab:bd:b0:68:ee:7d:
fe:28:30:d3:17:25:7d:71:16:2f:dd:3e:6e:5c:5f:
bf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:67:F5:04:06:60:26:8E:82:F6:92:9A:0C:48:C3:39:14:69:9A:ED
X509v3 Authority Key Identifier:
keyid:85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c6:c9:ef:b9:e9:1d:2f:07:79:bb:ea:dd:d7:41:3e:dc:09:
6f:e9:1a:b8:54:89:cd:8b:50:3e:6d:4c:be:00:67:d7:31:76:
db:5c:03:13:a2:66:e2:ec:01:85:2d:70:1f:6d:0c:a3:47:9b:
78:55:3f:0b:fd:3e:0c:37:9a:1e:87:39:3f:d1:60:2e:39:ed:
e8:20:e4:b4:bf:90:32:6a:2e:1c:24:eb:6b:9d:e5:f8:fd:9e:
57:73:9a:7f:ba:7d:04:88:eb:ea:fe:78:df:9a:10:d7:c9:af:
26:59:fb:42:25:f0:6b:eb:20:ff:6f:af:24:60:d5:65:e2:5d:
60:0c:62:43:2a:ec:ee:78:bc:b8:dd:b0:a4:9b:02:94:22:96:
87:f3:89:a5:49:63:7b:96:e9:1b:f6:f2:61:66:ea:50:2d:9d:
31:ec:78:06:b2:f2:27:00:b8:e1:44:ef:fc:b3:a1:83:43:65:
b2:40:cb:4e:12:38:cf:da:5f:4a:82:2c:11:08:f6:4d:e4:17:
a6:8c:e7:4c:83:8b:fb:98:fa:e5:45:e0:db:49:0e:f9:1e:05:
fd:ac:09:06:bf:cf:3a:af:7e:0c:5e:0c:c4:95:85:d0:a0:f4:
c1:15:a1:6d:45:fe:e4:c3:ea:2a:7e:b7:34:2c:2d:94:c3:39:
91:4a:7d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:02:11 2026 by rpki-client