Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
File: HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft (raw, json)
Hash identifier: nMbOj34TfjJq4O/KESr7u0KjvamvCu2EhonIq5i1AfM=
Subject key identifier: 27:03:50:CA:BB:A1:D1:26:0C:B4:1A:7D:56:9D:37:77:5D:85:CC:1E
Authority key identifier: 1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
Certificate issuer: /CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Certificate serial: 019D9AAC1E2E0032A84778149E58F174FA9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
Manifest number: 0DF9
Signing time: Fri 17 Apr 2026 09:01:04 +0000
Manifest this update: Fri 17 Apr 2026 09:01:04 +0000
Manifest next update: Sat 18 Apr 2026 09:01:04 +0000
Files and hashes: 1: HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl (hash: N8c07wGh+KzTXaRCI+ZOLYWr/fvRr35KTsDPodZ0C/o=)
2: gusOyZenv7586RqtEWmnhh7N0MA.roa (hash: 2ylZF1yMijEe2k4/d611VBCjiq1WUabPgeneyDm3vsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:1e:2e:00:32:a8:47:78:14:9e:58:f1:74:fa:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Validity
Not Before: Apr 17 09:01:04 2026 GMT
Not After : Apr 18 09:01:04 2026 GMT
Subject: CN=270350cabba1d1260cb41a7d569d37775d85cc1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:be:02:74:24:69:b3:da:01:5b:66:a7:3c:36:
25:0b:7a:88:00:d2:b5:ef:9e:fc:2c:45:a5:c1:3a:
b4:97:48:c4:5b:07:46:a3:55:b1:5b:c7:b4:ce:dc:
f1:17:aa:58:14:2a:5a:32:90:0d:9e:89:40:bc:85:
6f:4b:8b:b7:5a:ec:dd:45:aa:38:1d:9c:a5:92:3e:
64:b1:a8:ff:b4:75:42:36:37:a1:76:0b:67:90:42:
24:31:db:f4:6d:f0:dc:a2:c0:d9:76:74:fa:53:b4:
48:1b:57:81:42:83:42:50:1b:4d:90:ca:f2:df:87:
70:38:34:47:7a:e2:22:aa:b7:c4:93:dd:c8:3c:db:
cd:58:bc:ae:79:05:c6:40:30:86:cc:61:38:99:2b:
35:c7:7f:d0:e8:0c:99:01:69:f1:86:40:e3:bf:12:
8e:0f:9b:c2:7e:62:1c:3c:e7:82:b0:92:9c:d2:eb:
05:ca:33:86:c0:6f:11:60:da:23:34:6e:6d:32:47:
49:1e:46:87:7d:12:c7:42:ba:ff:42:41:7d:17:32:
62:c9:79:24:8a:0d:c4:8b:b1:ef:64:c4:3b:3d:18:
34:e1:d8:2b:57:c5:f2:01:67:85:e0:51:9e:56:e3:
e8:ee:85:3c:f9:49:ff:5b:17:45:f4:02:76:72:d2:
e7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:03:50:CA:BB:A1:D1:26:0C:B4:1A:7D:56:9D:37:77:5D:85:CC:1E
X509v3 Authority Key Identifier:
keyid:1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:50:5d:90:16:2e:2a:5a:0f:e8:3a:67:7f:7d:e0:c4:64:af:
78:e1:34:4b:ff:b6:19:52:2d:63:1a:4b:a5:91:d3:70:32:b7:
f3:ad:e9:2f:45:fa:65:b1:74:54:b1:3c:22:b2:74:6b:33:c3:
ca:dd:ac:aa:a4:14:06:1f:0c:0e:cc:19:d3:cf:a4:17:b8:45:
94:8d:b5:71:7d:2a:69:ec:8c:c9:43:eb:fb:c1:cc:61:1c:4e:
51:76:41:18:d6:38:20:53:cc:bd:11:f0:fd:1e:20:b4:c4:32:
d2:6b:66:ad:62:2b:a3:11:e3:44:e2:6c:81:3f:b4:1a:ba:08:
4e:5f:7d:27:97:16:d8:ac:9a:5c:8f:d6:f7:46:77:5f:ed:24:
47:55:72:47:f8:c9:31:36:50:96:ff:62:a5:ee:8d:ba:e4:2d:
19:16:38:ea:bb:4a:f6:6e:46:8c:87:fc:44:c5:47:47:6a:a7:
0e:89:9f:75:c7:60:59:e4:f1:ef:4d:39:b6:a7:77:b9:f5:7d:
20:2b:7f:5f:32:59:78:5f:9f:f3:c7:9f:9e:8b:09:03:f9:87:
f6:0c:e3:20:6a:dc:1a:29:c9:71:cb:5e:5b:54:6a:c9:af:71:
33:07:20:3c:9e:59:41:23:92:ad:31:70:8d:70:e0:db:ec:4b:
d2:22:1e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:36:54 2026 by rpki-client