Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
File: H6EtaHxiehgvgdTMyz8yIBhh9nc.mft (raw, json)
Hash identifier: T5ZOUeAzDt9nJSSurXe/lCQ03v+nlCcXhpQKagUaq2I=
Subject key identifier: E4:D3:8D:D4:3A:B4:24:AB:82:A4:97:D4:40:BF:52:72:40:7B:BA:03
Authority key identifier: 1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77
Certificate issuer: /CN=1fa12d687c627a182f81d4cccb3f32201861f677
Certificate serial: 019D996224EDE2D4D6F77611259D8C28B781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 03:00:38 +0000
Manifest this update: Fri 17 Apr 2026 03:00:38 +0000
Manifest next update: Sat 18 Apr 2026 03:00:38 +0000
Files and hashes: 1: H6EtaHxiehgvgdTMyz8yIBhh9nc.crl (hash: 3TLoq29HTfHNiXKqNDFL4R//zttMA1GMY+sHIpQYHXE=)
2: ceYmE1oaPyKVZRonjYP1PTafzn8.roa (hash: 0/TxJlznPul/CoRcib1v0fGMrVkoJzg/UmlQz2/FZNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:24:ed:e2:d4:d6:f7:76:11:25:9d:8c:28:b7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa12d687c627a182f81d4cccb3f32201861f677
Validity
Not Before: Apr 17 03:00:38 2026 GMT
Not After : Apr 18 03:00:38 2026 GMT
Subject: CN=e4d38dd43ab424ab82a497d440bf5272407bba03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:17:f1:4b:6c:f8:4c:97:fe:31:31:cc:e5:
f5:4c:a4:67:cb:46:6b:00:dd:f7:b7:dc:f4:76:bf:
f0:aa:2d:84:32:c3:ac:ca:30:d6:3f:30:94:e0:f3:
cd:82:7b:ce:16:6c:64:ae:96:44:51:39:c1:a9:db:
0f:81:a0:c7:63:3f:18:93:7c:8e:c0:6f:d7:b9:c1:
f6:43:05:2f:d4:05:3c:df:39:40:64:9e:98:ca:ac:
9f:e7:95:34:29:aa:e4:e5:ea:8a:bb:59:a2:46:da:
65:36:08:fc:c4:72:d0:3f:0a:5c:b9:1b:96:e1:c7:
9a:b3:b7:81:4c:0f:7a:e0:80:79:b0:eb:7c:df:7b:
82:40:60:d1:f4:0e:4f:ee:b5:64:8f:cd:b0:6d:f9:
2d:27:2b:f3:1a:23:18:aa:10:7a:28:aa:f8:04:7d:
88:f0:bd:dd:64:f6:d3:12:01:f3:b8:f7:34:6b:bf:
f7:1d:bd:6c:2b:43:e4:37:fd:cc:e7:83:81:8b:8c:
36:5a:a6:0c:a7:3e:6d:c1:67:36:c5:27:5e:2b:08:
5f:78:8e:7a:98:4b:51:36:d8:b7:da:ee:5d:37:80:
49:b7:2b:87:82:93:8a:06:9f:6d:8b:69:66:e2:e4:
17:50:40:b3:50:09:0e:71:f9:bb:7e:e5:b7:ef:25:
e2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D3:8D:D4:3A:B4:24:AB:82:A4:97:D4:40:BF:52:72:40:7B:BA:03
X509v3 Authority Key Identifier:
keyid:1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:38:d6:b3:bf:66:0d:1b:b0:27:28:c1:19:46:55:e2:c8:cf:
40:7a:8e:85:63:93:3b:6e:52:59:f0:9f:1e:83:4d:b4:7a:61:
53:7f:ea:39:99:5a:2d:22:79:f0:06:c5:f2:09:62:db:7e:c4:
8a:ef:91:8e:e7:8a:94:e8:51:8c:c1:33:35:db:80:99:75:25:
6d:72:f0:0f:6e:25:ac:8a:1b:3d:25:38:e3:2a:e4:54:b4:cf:
ef:da:c3:b0:fd:0d:39:6a:c3:17:5b:6a:02:83:65:62:94:eb:
87:17:ba:a7:4c:ae:73:03:21:63:5b:a7:6b:40:af:8e:4a:6d:
10:01:71:8a:08:08:60:83:b7:70:54:84:30:20:36:72:23:2a:
8e:39:3b:b0:46:65:4a:5b:5b:cf:f0:4f:2c:14:c4:02:df:8d:
b4:0a:62:3c:2c:75:45:4e:7a:a5:5e:4d:eb:0b:88:c5:bd:01:
75:a6:18:5b:54:3b:3f:d3:8f:de:61:25:5a:47:e5:e7:fb:63:
90:03:e7:05:4d:bd:23:df:1b:8e:7b:cc:a7:98:eb:bb:be:a1:
2a:de:03:95:e1:90:35:ac:22:9b:7f:7a:02:12:ce:76:52:6b:
91:af:26:18:b1:a5:a6:11:a1:9b:58:a1:d6:2a:69:ab:b9:76:
32:5d:c5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:13:16 2026 by rpki-client