
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
File: hFxYdS8zNkIv8O4XJkdFkeekHl8.mft (raw, json)
Hash identifier: mrn3MKApgzKnhSEwm+R6JWBaGVqWQleQ0P10gOc/neg=
Subject key identifier: BE:BE:45:39:E9:A8:BD:BB:88:56:B5:B2:60:D3:F6:BC:EB:66:C7:E6
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial: 019D9C9A0480795A88560BD8AC54B7B7523E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 18:00:32 +0000
Manifest this update: Fri 17 Apr 2026 18:00:32 +0000
Manifest next update: Sat 18 Apr 2026 18:00:32 +0000
Files and hashes: 1: JXD9OGEgFf3Wk4sh84udKIfqooU.roa (hash: qrmAAi4FfndLs6wG6DvmHeD7s+/mauxwlNM+tOn8N8I=)
2: aI-ahOCwvF9dDyH09tBe3WnKiGg.roa (hash: W4z3ROiXmDdwVFy1xkMGSOsTs29f9yswRvpywgw4Gjk=)
3: bcdCYadegTnuv1kyS3SFpw7_obg.roa (hash: FHoWoxIPPut7YlIBnS9RiEjsnw6/GTtGF64PoDTZc+8=)
4: fL9-5NNFmNXeaEJzQdcv1aJZxaE.roa (hash: vgxMoBNi3xBe1kEG9Dep1UcVzUmrFFhkaO0RcMn0W+o=)
5: hFxYdS8zNkIv8O4XJkdFkeekHl8.crl (hash: 5ids0Td+K0rtgdKFHMrPlJuRn/Mt7ErXm9zBJybTuNo=)
6: q4J7inXLdfvTxzgZzcdEl_n6nio.roa (hash: tU27AK3PO1qj8TjiCSuyTiU7iIickoD0PNPU49OzhWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:04:80:79:5a:88:56:0b:d8:ac:54:b7:b7:52:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
Validity
Not Before: Apr 17 18:00:32 2026 GMT
Not After : Apr 18 18:00:32 2026 GMT
Subject: CN=bebe4539e9a8bdbb8856b5b260d3f6bceb66c7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:86:46:8d:12:aa:7e:4f:9f:97:9f:04:63:be:
c9:e7:f9:a3:e5:71:dc:18:96:0f:15:05:3f:39:2e:
13:2d:bf:5a:2d:d1:38:7e:a8:8b:22:33:81:c8:ca:
0b:4e:ae:b6:d3:8e:f9:14:7b:cc:f7:2e:51:43:1f:
67:11:53:01:1d:d3:7c:ee:7e:7f:31:f8:be:23:d0:
81:96:a0:89:24:e5:b4:af:40:d3:3b:20:0f:ca:b3:
10:13:e9:3d:1f:62:e4:79:b5:68:bb:f4:a5:2d:93:
36:23:0e:3f:fa:a5:12:20:30:fa:7f:86:4b:84:dc:
4b:a6:e1:0c:44:a8:c5:f8:02:b3:0d:76:0d:9a:09:
1e:c2:f8:b5:10:97:13:75:44:e0:c6:c8:a5:4a:85:
e8:8c:2a:5c:db:e5:1b:e6:84:69:ee:31:45:c8:55:
ed:21:a6:8d:9e:00:3a:d7:bf:25:81:2b:10:ab:c3:
63:06:6b:d0:c3:34:d9:8a:26:fe:4c:2d:28:a8:d0:
8e:19:04:16:c3:a4:15:c4:7b:a3:24:09:83:57:b8:
9c:46:b2:20:80:c5:ce:0f:87:d8:29:9c:3d:77:46:
6c:a6:89:0b:f1:ba:19:4f:68:ff:04:2d:33:73:5b:
66:06:23:52:66:98:3f:da:7f:0c:49:6e:e3:cc:62:
92:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BE:45:39:E9:A8:BD:BB:88:56:B5:B2:60:D3:F6:BC:EB:66:C7:E6
X509v3 Authority Key Identifier:
keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4e:96:b5:1f:ed:dc:b6:fc:3a:01:61:b1:41:1c:4f:7b:ea:
ec:c9:0a:38:b4:e9:12:c0:74:77:0e:a5:fe:1a:8e:de:d7:c3:
37:eb:21:1e:e4:03:04:af:a1:ab:8f:75:91:88:50:97:6c:61:
85:63:e5:a0:ab:ff:6f:37:db:a6:7b:bc:7c:b3:0b:ea:6d:9a:
95:c6:a4:87:bd:3b:55:73:44:3e:87:74:93:8a:da:75:53:e7:
df:3a:74:07:b2:67:ae:f2:e2:10:ad:e5:34:bc:fd:80:94:68:
9f:45:87:e2:8f:2d:c6:6e:20:00:15:21:c6:33:b4:04:a6:89:
d6:af:59:81:6e:09:d0:94:af:dc:4a:9c:c1:af:f1:0f:f3:3f:
67:d6:45:2e:a6:7f:f2:82:1a:dd:1f:96:7e:ba:35:7b:ce:e9:
1f:1d:a0:6e:52:2a:8d:43:3b:0d:fe:84:e6:39:84:b4:4e:1c:
19:cb:ed:1f:33:d3:af:b4:cd:65:c8:b7:55:b9:89:52:48:d6:
b3:1a:05:85:d1:36:06:e4:62:01:9a:e3:b2:5c:9d:d8:77:73:
26:f3:ce:26:d3:bf:68:25:e8:38:a3:8f:6c:6d:23:39:b7:f8:
05:69:7d:1c:25:15:33:83:bc:06:84:a9:51:8a:43:31:40:ed:
d9:26:dc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:50:03 2026 by rpki-client