Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
File: cH89q67iT8Q7hlqvo_PJwvNkv8k.mft (raw, json)
Hash identifier: xhHt4H3D+nOU8UgZGE/jztOn26XnEgEQP2bBF7I1mgg=
Subject key identifier: 82:EA:C2:EA:59:52:FB:27:60:D4:61:0F:65:8E:5D:67:3B:C4:0F:D8
Authority key identifier: 70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
Certificate issuer: /CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Certificate serial: 019D9A3EB49128DC723CC0315F99F1EE4D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
Manifest number: 1855
Signing time: Fri 17 Apr 2026 07:01:33 +0000
Manifest this update: Fri 17 Apr 2026 07:01:33 +0000
Manifest next update: Sat 18 Apr 2026 07:01:33 +0000
Files and hashes: 1: YFuXlkN-MljNRVYZCMihnQz4RoU.roa (hash: ZnDgTtky6cYn6D0/F0mae8ReoG9f3tqFA2qYPiw3SoE=)
2: cH89q67iT8Q7hlqvo_PJwvNkv8k.crl (hash: kaU7QcK8UdxIwp0MCP6GlElI9OzAuOaSlcNN8725FkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:b4:91:28:dc:72:3c:c0:31:5f:99:f1:ee:4d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Validity
Not Before: Apr 17 07:01:33 2026 GMT
Not After : Apr 18 07:01:33 2026 GMT
Subject: CN=82eac2ea5952fb2760d4610f658e5d673bc40fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5d:35:86:ad:11:22:3b:42:7a:78:9a:58:af:
e1:92:c5:70:3a:76:13:ee:6e:d0:60:a6:99:71:1c:
d0:54:1e:6d:b2:20:99:d6:82:58:8d:c5:b3:64:8a:
68:ca:bb:29:bc:94:d3:cd:ae:a0:78:fe:24:21:c4:
a0:83:f9:b7:a5:d6:65:49:40:b8:cf:78:d7:23:14:
69:e6:30:17:7c:c5:42:cf:53:7a:f4:24:ae:4b:1e:
1e:a9:e9:f7:d0:37:7a:0c:d3:5e:b3:08:08:b3:c6:
1c:ab:50:04:6a:7a:35:8d:47:db:5e:43:55:c7:bc:
3e:28:63:3e:ef:24:71:10:f9:c1:99:63:40:1f:77:
b5:b2:9f:52:30:57:53:a8:1b:c6:dd:82:04:9e:8c:
8a:3e:cd:33:24:8f:f7:13:e9:4d:3a:d6:a3:f0:33:
52:97:79:77:42:3f:6e:b1:b9:b0:02:7e:32:30:c5:
c2:91:a4:3a:55:7a:ad:b6:c8:16:85:83:12:6b:a8:
1d:38:27:dc:d8:bf:43:ae:06:22:e1:69:14:2f:94:
06:2d:0b:fa:94:71:a3:d2:3a:1f:4a:cd:9e:cd:f1:
70:ef:a8:bb:ba:de:46:4f:1e:a0:4a:aa:d5:76:6f:
81:bf:b9:55:ae:59:da:2d:72:e8:94:9c:d1:f8:0b:
0b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EA:C2:EA:59:52:FB:27:60:D4:61:0F:65:8E:5D:67:3B:C4:0F:D8
X509v3 Authority Key Identifier:
keyid:70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:a8:27:8d:7c:d5:dc:f7:25:19:b6:c4:24:fe:be:58:bf:d9:
44:8b:fb:84:ac:27:eb:3f:ac:43:65:a4:d2:0f:ab:ba:06:44:
45:d3:e4:fc:43:fe:3a:b3:be:3c:cd:94:f3:69:e0:f3:0e:6a:
ca:3b:88:f7:87:d3:30:b7:fa:9b:ab:61:98:d3:28:8e:33:cc:
2f:89:08:52:54:23:e2:ed:c8:e1:7d:e3:df:7d:2f:1d:f3:ae:
70:f4:a4:1d:9a:a5:9a:f9:0b:a6:f9:7a:15:fc:e1:f6:08:8d:
d8:26:a4:c7:a2:23:eb:14:03:dd:b9:20:33:3c:13:6b:d3:29:
09:32:89:a3:20:46:41:19:59:67:50:d2:c6:e3:8a:bd:4b:13:
cb:c4:93:73:3c:0b:fa:7b:18:11:27:82:ad:1e:58:42:a0:30:
0e:46:9a:77:42:84:a6:a4:b8:c0:98:1f:4c:0b:a3:a3:52:dc:
4f:86:df:c9:d7:3d:ee:ef:e0:57:63:01:01:97:a8:16:45:8b:
da:ea:ee:83:3f:22:20:2b:52:d1:6f:0e:21:78:79:5d:7b:9c:
b8:a6:a6:2c:64:f4:a3:29:1f:46:dd:8d:75:fc:60:cf:bf:31:
e0:bb:45:ca:85:e7:c4:15:93:da:b0:e4:bf:20:bb:89:5b:91:
a5:e6:b1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:34:55 2026 by rpki-client