Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
File: hAfwBj7przHYfP5lubwZPrQsiWk.mft (raw, json)
Hash identifier: r99WF32FdZ3ZZQG1a3gUZuMqrX2d3Hgc3vJvsvx1gBc=
Subject key identifier: 56:AA:CB:10:04:72:67:EE:6B:F3:94:CA:43:63:29:41:46:CA:20:16
Authority key identifier: 84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
Certificate issuer: /CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Certificate serial: 019D992B92BE0B4E9DEF52EF61753EC2C70E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
Manifest number: 0925
Signing time: Fri 17 Apr 2026 02:01:02 +0000
Manifest this update: Fri 17 Apr 2026 02:01:02 +0000
Manifest next update: Sat 18 Apr 2026 02:01:02 +0000
Files and hashes: 1: hAfwBj7przHYfP5lubwZPrQsiWk.crl (hash: oVVx0rMTWRd7TmyJ2rPnDpyOPJj0cQAs/neKlRJSo7U=)
2: ilf77_-o9-q6za7MOsqeG7F-F18.roa (hash: QcXY77GP6oWSI7llT54vOOPgAvyMn7s0Et6LlhSw/kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:92:be:0b:4e:9d:ef:52:ef:61:75:3e:c2:c7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Validity
Not Before: Apr 17 02:01:02 2026 GMT
Not After : Apr 18 02:01:02 2026 GMT
Subject: CN=56aacb10047267ee6bf394ca4363294146ca2016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:27:ec:03:ec:b9:01:f3:eb:9c:c9:6f:3a:30:
51:13:d5:85:67:ea:4f:f5:ef:da:47:50:3e:91:92:
fe:68:0b:8b:df:a3:73:6a:53:10:6d:83:ab:50:60:
37:5c:24:cd:64:f3:e8:a6:eb:4a:e1:f0:1e:c9:20:
9f:df:f7:0f:6a:d5:71:7a:7f:c1:70:08:f3:3e:4a:
ff:02:be:02:d2:d0:06:f3:9c:78:1e:78:9c:c2:95:
de:16:fa:1a:27:12:f5:5e:ca:ae:d6:d6:dd:c3:c5:
4c:68:aa:41:96:b0:23:27:bb:2c:39:1d:84:c5:50:
4b:e8:33:26:6f:0b:c2:3f:30:d0:ca:7f:da:5c:e2:
3e:f4:59:ec:19:d6:ba:e1:26:43:7b:9a:d6:49:ea:
f7:18:33:63:37:3b:b3:42:2d:ff:19:3e:33:61:36:
a5:c9:29:8c:03:8c:ee:43:53:25:e2:bf:e0:7f:c3:
33:b5:54:0c:ea:46:6f:9c:93:8e:36:f9:37:0d:3e:
66:83:f4:03:6d:08:57:7c:7a:28:c5:ca:6b:fe:4c:
a5:c4:a8:f4:43:0e:d2:9a:ab:06:2d:89:1d:46:c5:
78:06:16:93:65:00:88:f7:93:05:50:68:d2:e1:3e:
01:4b:ef:de:c9:a3:07:ee:48:53:61:90:93:92:1e:
55:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AA:CB:10:04:72:67:EE:6B:F3:94:CA:43:63:29:41:46:CA:20:16
X509v3 Authority Key Identifier:
keyid:84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:88:28:2e:c5:3e:ac:2e:fb:39:8d:b2:29:b2:74:13:92:7d:
e3:0c:2d:b4:c0:f6:68:14:b1:0c:4d:d7:8f:2a:d5:7a:ae:60:
fd:00:14:4e:e4:30:c0:a4:9c:fa:40:d1:81:6a:aa:c6:5b:ca:
07:09:5c:1c:96:fc:ea:16:dd:84:91:5f:f3:11:e6:e9:7c:0b:
4e:ee:8b:de:a4:da:51:64:9c:f0:ab:7f:be:02:a7:e3:dd:20:
78:68:df:52:9a:d2:16:39:9e:fd:a6:02:78:f5:73:7d:d8:fe:
fc:80:d7:9a:cf:10:1d:e1:ab:eb:39:d2:c5:46:17:38:ed:07:
e3:e3:15:a5:8f:23:20:fd:7c:60:30:88:45:cc:b6:5a:ae:2f:
ca:1d:96:87:77:ea:ab:12:09:94:5e:37:1b:cc:50:c4:0d:1e:
22:de:11:39:70:7c:e6:99:0a:6c:25:19:7a:25:20:80:48:80:
ae:c6:ce:23:05:f7:5b:c7:b1:9c:eb:b5:19:73:bc:3e:a2:02:
c5:06:96:3d:03:1d:c2:cd:69:97:47:79:d5:26:95:06:51:b0:
24:de:34:9d:fb:94:6c:90:6d:d3:d1:1d:6d:0c:e5:24:d2:25:
90:1a:96:e5:79:de:8a:7c:a8:5e:38:38:7e:26:5b:7a:46:48:
6d:ab:e4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:17:28 2026 by rpki-client