Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
File: hFxYdS8zNkIv8O4XJkdFkeekHl8.mft (raw, json)
Hash identifier: tsUFqD4Akchs6BrVeaqXmtMiulYV1S2HY15PZcJ9w/g=
Subject key identifier: 66:1D:80:5A:D1:DE:1F:97:CB:29:0D:B8:18:7B:56:BC:55:A5:6E:D2
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial: 019D9AAC273D3450BF2C60DDC9A71BD5C9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 09:01:06 +0000
Manifest this update: Fri 17 Apr 2026 09:01:06 +0000
Manifest next update: Sat 18 Apr 2026 09:01:06 +0000
Files and hashes: 1: JXD9OGEgFf3Wk4sh84udKIfqooU.roa (hash: qrmAAi4FfndLs6wG6DvmHeD7s+/mauxwlNM+tOn8N8I=)
2: aI-ahOCwvF9dDyH09tBe3WnKiGg.roa (hash: W4z3ROiXmDdwVFy1xkMGSOsTs29f9yswRvpywgw4Gjk=)
3: bcdCYadegTnuv1kyS3SFpw7_obg.roa (hash: FHoWoxIPPut7YlIBnS9RiEjsnw6/GTtGF64PoDTZc+8=)
4: fL9-5NNFmNXeaEJzQdcv1aJZxaE.roa (hash: vgxMoBNi3xBe1kEG9Dep1UcVzUmrFFhkaO0RcMn0W+o=)
5: hFxYdS8zNkIv8O4XJkdFkeekHl8.crl (hash: n5ZGyygoiIDpAlohFmeHQUOBoaudYPE2+WE0r4N5arE=)
6: q4J7inXLdfvTxzgZzcdEl_n6nio.roa (hash: tU27AK3PO1qj8TjiCSuyTiU7iIickoD0PNPU49OzhWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:27:3d:34:50:bf:2c:60:dd:c9:a7:1b:d5:c9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
Validity
Not Before: Apr 17 09:01:06 2026 GMT
Not After : Apr 18 09:01:06 2026 GMT
Subject: CN=661d805ad1de1f97cb290db8187b56bc55a56ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0c:71:b7:bd:af:85:e4:df:9d:e5:c5:f6:d7:
1f:b1:be:12:54:0b:9b:84:42:10:d4:b6:7e:b4:4d:
72:af:c7:ae:84:2b:68:d3:3c:f5:a4:59:ff:d5:11:
90:03:95:dc:3d:f6:be:69:f2:16:b6:0b:cd:74:04:
1f:c7:8c:33:9d:cd:8f:ee:8a:96:21:e0:e4:9f:50:
a0:dd:5e:85:d1:63:bc:01:73:50:7a:6f:7e:f4:9d:
de:a4:5e:64:65:d2:fe:5c:f4:4d:6d:8f:e6:44:5b:
db:47:aa:a0:e3:58:b5:4e:3e:b3:1b:af:bd:82:5d:
63:b1:f6:d7:fb:57:86:e5:0a:5d:bd:5d:c1:3d:74:
0e:7f:18:69:fe:34:95:0c:5a:30:9a:97:aa:a2:dc:
c5:3e:ff:e8:f3:3c:89:20:04:96:79:65:76:4f:df:
9e:6c:93:64:8f:22:40:90:99:c6:dc:70:65:62:af:
7b:bb:ee:69:21:6d:b8:96:4a:9a:46:69:22:5a:8f:
e9:9b:ff:6d:59:2b:78:5a:86:2f:3a:ba:89:a7:36:
12:16:c5:c8:97:da:24:77:67:b8:cb:11:13:43:b3:
8c:1c:1a:c0:38:9e:0b:bf:05:01:20:f8:67:56:3d:
80:64:66:09:75:18:a6:21:52:bd:86:b0:39:9d:ff:
1e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1D:80:5A:D1:DE:1F:97:CB:29:0D:B8:18:7B:56:BC:55:A5:6E:D2
X509v3 Authority Key Identifier:
keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6f:78:1f:a2:d1:bc:2d:2c:98:f4:3a:e1:54:1e:54:50:47:
30:9e:a4:94:b2:7a:11:9c:ff:f1:c6:29:ef:6e:54:91:dc:43:
6b:49:58:f6:1e:b6:32:5f:1b:7a:1e:1d:dd:62:ac:eb:e8:83:
5c:f4:22:09:b4:7d:b8:9b:4b:28:6e:f3:b5:1a:b0:a7:f2:bf:
8c:41:d1:a4:f1:f4:a4:56:6a:07:68:c1:df:1d:43:0c:f8:eb:
e6:51:91:b9:34:67:c8:1d:81:87:b0:2e:9e:97:66:bb:a6:34:
a9:d4:5b:7e:a4:ff:8b:9a:b9:a1:43:36:0e:58:36:47:3a:4f:
66:b6:ce:1a:a2:bd:98:84:88:ec:5d:c5:4f:8c:b6:a8:a2:da:
a6:66:cd:1b:fe:d5:2f:e0:01:90:07:58:d6:65:19:82:e0:3e:
14:dc:61:50:82:20:aa:91:0a:2f:12:44:54:d8:fd:0d:44:8e:
73:85:a9:52:06:90:f8:da:c1:75:67:ae:87:2e:b0:54:ee:34:
4f:ed:4b:71:40:85:6d:73:aa:be:7a:52:6c:3d:c7:41:36:b9:
7b:b9:05:b5:c2:69:8b:f5:e0:6f:39:15:e4:58:b3:9e:ec:25:
99:1f:82:cb:f1:30:41:d6:d4:7b:b3:88:15:47:f1:c5:b2:8f:
6b:e0:18:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:25:34 2026 by rpki-client