Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
File: hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft (raw, json)
Hash identifier: kVW2F53z3ypCNPV1Cw4UNVE72fD+SMWlUpJRwWfktTA=
Subject key identifier: 6E:8E:7A:72:C1:2C:C9:57:8A:BC:70:A4:11:78:95:70:D8:98:B8:D6
Authority key identifier: 84:7D:C7:65:D1:A0:39:E6:FB:D6:B8:FB:B6:4D:07:D5:8B:F5:84:F5
Certificate issuer: /CN=847dc765d1a039e6fbd6b8fbb64d07d58bf584f5
Certificate serial: 019DA378E6E3AFDA433ECF79BD3812397C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
Manifest number: 14A2
Signing time: Sun 19 Apr 2026 02:01:42 +0000
Manifest this update: Sun 19 Apr 2026 02:01:42 +0000
Manifest next update: Mon 20 Apr 2026 02:01:42 +0000
Files and hashes: 1: 5SV9yLFClS0rtDz8fvJnS6J9W6g.roa (hash: wxSbJvADvi+JoVtEMjMQ/p8f+j3ecPxHDeFzbrEqmdg=)
2: hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl (hash: eYt6efAkxkHtanzxGom/05CEPfB2S4UyCH2rkSZV9ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:e6:e3:af:da:43:3e:cf:79:bd:38:12:39:7c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847dc765d1a039e6fbd6b8fbb64d07d58bf584f5
Validity
Not Before: Apr 19 02:01:42 2026 GMT
Not After : Apr 20 02:01:42 2026 GMT
Subject: CN=6e8e7a72c12cc9578abc70a411789570d898b8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bf:fb:7f:01:5e:9e:8c:80:72:6f:e6:e1:51:
da:95:cd:97:d5:08:31:6d:3a:1f:11:da:01:e5:ed:
a2:58:6b:a7:de:5c:d1:76:17:9e:2e:67:60:c2:4b:
1b:79:81:8f:64:56:9b:3b:b7:15:00:80:79:bb:61:
88:35:da:11:d3:ea:b0:f4:0e:82:94:3b:67:1b:c3:
67:7f:9c:3e:5e:aa:4b:24:09:d9:64:c1:71:ed:69:
8f:d6:97:e4:15:9b:07:e5:e2:ab:c1:03:ef:50:79:
f3:a6:cd:01:8f:46:fc:0d:ee:e4:1e:d6:89:19:2c:
f6:0d:4e:fd:30:6b:e0:f3:4e:df:99:da:cd:cf:c8:
b6:17:69:ba:dd:72:76:c3:fd:6b:b6:dc:c3:05:94:
54:6a:9a:09:f0:d5:61:52:c4:f5:54:ef:5d:c2:30:
09:65:e7:76:07:4c:16:7f:2f:bf:f2:7a:df:81:79:
86:47:95:80:4f:75:d1:6d:19:ad:bd:64:52:d6:e2:
7a:85:19:27:2d:d7:de:15:de:34:f2:df:85:f0:5e:
39:8e:bb:bc:be:25:7a:90:73:29:ce:93:b7:ec:05:
8d:56:a4:8b:19:6c:10:65:c4:41:78:85:98:7c:98:
2c:e1:c5:c4:85:2a:ab:71:6f:d3:bf:aa:af:b0:ed:
1e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8E:7A:72:C1:2C:C9:57:8A:BC:70:A4:11:78:95:70:D8:98:B8:D6
X509v3 Authority Key Identifier:
keyid:84:7D:C7:65:D1:A0:39:E6:FB:D6:B8:FB:B6:4D:07:D5:8B:F5:84:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:70:2c:f3:8e:fe:91:08:1f:3d:a6:6e:45:1f:d3:cb:66:d7:
4b:0f:d9:65:6d:5b:37:a0:b2:2b:0d:ca:e6:01:58:49:d4:4b:
1d:26:d4:32:cf:dd:f5:13:65:48:81:57:6a:32:98:6d:50:f9:
92:99:68:11:86:ab:97:91:64:8d:07:7b:6d:d0:2b:fd:99:96:
3b:b6:a9:81:fe:0b:07:04:15:23:c1:9a:0c:13:5f:bc:69:69:
66:36:ac:01:39:5a:fa:43:ea:6d:46:3b:6a:b7:c4:f1:03:69:
12:ec:09:b4:ef:f8:8e:78:99:be:a5:a7:14:52:45:96:d7:a7:
0c:ad:84:a6:74:09:d0:96:4f:e1:9d:2a:82:c3:a4:35:46:bd:
09:43:e4:07:a2:55:49:04:c1:d1:1a:e8:30:e7:81:13:ad:48:
e2:7c:43:83:cb:97:c2:8d:c7:4c:75:4c:c2:c0:d0:16:62:99:
cc:b1:63:f6:27:47:07:db:24:77:65:87:ef:65:4e:b8:80:5e:
3c:dd:9c:03:d7:12:2e:4d:f1:8e:88:ce:4d:69:60:d6:d2:77:
22:7d:55:40:77:82:73:4e:63:2d:22:59:cc:8a:58:ad:48:f5:
90:52:ac:fc:ef:67:67:d9:75:82:02:2c:ce:61:94:75:12:74:
db:ca:68:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:59:42 2026 by rpki-client