Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
File: rHpOXEMf9seeT1vRtGsF-fRBEM4.mft (raw, json)
Hash identifier: 04T9PdN9fMjkfopWRWQVN7VdLFlW/Nw1US8iWDbTbks=
Subject key identifier: 1F:B8:E6:50:5C:4E:F1:08:49:F3:CA:9E:04:3F:EE:82:54:78:D9:D7
Authority key identifier: AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE
Certificate issuer: /CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce
Certificate serial: 019D9AE35EFFD06085FF94D317D5E3189306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
Manifest number: 0F5F
Signing time: Fri 17 Apr 2026 10:01:25 +0000
Manifest this update: Fri 17 Apr 2026 10:01:25 +0000
Manifest next update: Sat 18 Apr 2026 10:01:25 +0000
Files and hashes: 1: _zlIXE7-h25_ow4E9RjKnNQhPj8.roa (hash: hpvg+CFOE1drWZR6fUE97UGt95Uv377gPrIZqvoM3kw=)
2: rHpOXEMf9seeT1vRtGsF-fRBEM4.crl (hash: MdiSGHUJMZVVx5YGZwpCjGqzbqNn+0ZQ5TPtqvbKSJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:5e:ff:d0:60:85:ff:94:d3:17:d5:e3:18:93:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce
Validity
Not Before: Apr 17 10:01:25 2026 GMT
Not After : Apr 18 10:01:25 2026 GMT
Subject: CN=1fb8e6505c4ef10849f3ca9e043fee825478d9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bc:74:6a:2a:b3:c8:60:f8:50:10:fe:26:db:
52:da:e0:48:c9:5f:dc:ad:39:b6:ca:7a:fe:23:88:
f4:21:24:f7:81:9e:c3:d6:81:cb:81:5d:c9:6b:0f:
b4:74:b5:c9:8d:ca:a2:76:43:7b:61:3a:00:b1:c6:
9e:d7:e1:27:f1:14:67:f8:49:2e:6b:c1:24:9f:68:
54:df:c7:94:42:3a:9d:20:1c:2f:c9:2e:b3:87:51:
bd:48:5c:4f:ec:b3:b5:d6:19:93:74:48:e3:09:74:
38:f9:aa:3f:2c:18:53:24:db:6d:2a:7f:73:70:e6:
b1:26:5b:af:57:ba:98:a2:63:2b:5e:91:07:2f:17:
6a:3b:c4:83:4e:2c:4d:e4:29:10:fc:87:de:a3:c2:
cd:6f:d7:61:ba:89:5d:e9:9d:74:30:db:7a:fc:46:
0f:dc:55:c6:0d:ee:02:37:54:ea:fe:7d:6f:d9:86:
7f:ed:9f:03:e5:e5:a8:4a:e5:3f:5d:e7:83:4f:d3:
ec:ad:2a:70:9b:14:71:2b:62:99:21:ee:63:56:fb:
b3:79:df:c5:dd:9a:78:60:0a:b8:d3:1f:61:f1:f0:
81:d6:43:29:ed:41:07:73:53:dc:12:9e:d0:4e:e7:
35:6b:1c:5d:27:4e:e7:f7:31:d4:26:2b:6b:52:b7:
ae:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B8:E6:50:5C:4E:F1:08:49:F3:CA:9E:04:3F:EE:82:54:78:D9:D7
X509v3 Authority Key Identifier:
keyid:AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:81:bf:5e:ce:f1:70:5e:01:c0:b5:2b:b0:e7:b7:b3:dd:cb:
b1:13:f3:1b:7c:53:98:05:3e:81:c6:13:08:04:7d:b9:70:e5:
5b:27:53:38:dc:a3:c9:10:c6:34:fb:db:da:44:1b:b3:93:55:
db:9b:b6:5b:af:df:6b:f0:76:78:80:4d:b6:bf:90:f6:6d:20:
8c:a6:f2:94:64:c3:d8:85:c4:0f:9a:27:03:43:4c:45:20:87:
38:e5:e7:a1:f4:30:2a:ad:01:eb:65:fe:4c:b8:e7:2b:f4:93:
b3:2a:9c:0f:d7:a9:d6:dc:cf:e0:34:fa:7c:77:af:db:da:71:
12:80:4b:e8:54:a5:ee:6b:cd:55:c3:0a:82:58:87:96:93:e6:
8e:ab:ee:1f:d2:95:8e:f2:63:b7:e7:9f:0c:e8:a9:a4:0a:00:
ca:3f:83:9f:a2:c3:e5:d7:b5:68:36:63:45:a5:d7:ba:db:43:
64:9e:0a:dd:17:03:f7:7a:8d:03:d4:8e:37:f2:d0:22:c7:30:
9a:90:20:8f:95:75:63:6f:67:d9:88:fe:a4:9c:0d:1d:a0:1d:
a5:1e:55:da:14:1a:3c:4b:3c:f6:38:41:e6:47:e8:e2:50:1b:
a5:ee:ca:46:ac:28:80:fc:ec:96:d4:87:79:f6:e6:3d:0c:01:
cd:f6:c5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:22:25 2026 by rpki-client