Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
File: H7XBu67UTItq4_K1ZtAcwljfws4.mft (raw, json)
Hash identifier: cM1nvMX5bkN7G5GWNk8GRZYOy7aeYJxvRleUsPFnmjI=
Subject key identifier: 15:01:F1:F2:31:C3:63:2C:DE:BD:5A:7B:8E:70:83:E2:92:FD:36:BF
Authority key identifier: 1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
Certificate issuer: /CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
Certificate serial: 019D9818F238DFE24AAE54570891BB466F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
Manifest number: 1448
Signing time: Thu 16 Apr 2026 21:01:04 +0000
Manifest this update: Thu 16 Apr 2026 21:01:04 +0000
Manifest next update: Fri 17 Apr 2026 21:01:04 +0000
Files and hashes: 1: H7XBu67UTItq4_K1ZtAcwljfws4.crl (hash: 5qogUO1Ghp8kp85ranKWSRZi1Xki7nKoLLcaEeSt24E=)
2: SljFkDXNsq7mf2JKVKtWNfaMHYI.roa (hash: UQDsXFS6OQOvy/ZzRN024zvrl2KSRwaHGDpLX5AP3Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:f2:38:df:e2:4a:ae:54:57:08:91:bb:46:6f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
Validity
Not Before: Apr 16 21:01:04 2026 GMT
Not After : Apr 17 21:01:04 2026 GMT
Subject: CN=1501f1f231c3632cdebd5a7b8e7083e292fd36bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:04:d9:09:68:77:b8:da:79:0a:f7:29:ee:85:
80:27:89:0f:42:74:e7:c8:de:41:a6:e5:83:d2:51:
2a:fe:8e:ac:19:92:a7:08:78:a7:80:9a:ac:a9:d5:
bc:f4:bf:f1:f8:12:8c:89:3a:93:bc:8f:63:fb:84:
51:c9:13:f9:a6:a8:da:17:12:e8:70:b6:1c:99:8f:
6f:cd:b4:b3:1a:db:64:b4:78:93:8f:24:81:38:c2:
da:fd:e5:9e:64:0e:b7:33:37:f9:3f:a8:fd:f6:1e:
38:88:a7:37:9c:c5:f1:d0:5c:e8:ee:1b:a5:fa:1d:
b9:de:03:d5:d3:64:9e:cf:28:aa:5e:1e:82:d5:2b:
7a:47:79:8b:4b:3f:80:07:df:56:1c:51:9d:46:34:
8f:d5:9f:01:1b:7c:67:43:38:53:16:8d:2b:73:e5:
28:a6:4d:9e:19:bf:58:9a:ec:1f:12:62:64:fd:7c:
9b:51:ca:cd:0b:f4:cb:e3:97:a5:eb:54:f2:f3:98:
cf:b6:c2:05:da:3a:56:9a:ac:88:17:ee:46:ba:ec:
16:36:c1:dc:0a:0d:97:a1:9a:e9:57:c1:dc:9b:8e:
2a:3a:e2:cf:79:a2:5d:db:95:41:a3:c8:5f:06:a9:
0f:9a:58:70:8c:7d:f3:27:40:41:e9:03:5a:22:a1:
40:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:01:F1:F2:31:C3:63:2C:DE:BD:5A:7B:8E:70:83:E2:92:FD:36:BF
X509v3 Authority Key Identifier:
keyid:1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f9:53:c9:26:2d:0a:35:de:a0:35:7b:27:56:8a:44:25:91:
28:ce:91:1a:f8:4d:d2:0e:26:33:54:30:07:d1:3e:81:42:41:
8f:14:3b:43:bc:de:c2:e4:e3:a3:a2:7b:09:7d:57:b9:cd:62:
d0:78:4e:0c:b4:ff:ef:24:48:17:c9:fa:6d:5a:2d:30:e1:53:
ad:73:bb:26:72:0d:8d:7c:34:03:08:1e:2f:40:72:e2:8a:d9:
1c:8a:38:59:2b:19:06:6e:78:58:57:e2:9c:b8:aa:7a:d6:52:
2c:db:84:2d:c3:38:7d:64:86:b2:e8:e8:38:51:57:50:92:10:
9d:2f:2f:24:0f:ff:ea:38:d2:c6:e1:ac:e0:0b:24:e8:d3:5d:
3b:33:09:7b:3b:64:d8:fe:47:2d:8a:36:f4:58:8d:41:6f:be:
bc:7a:0d:c6:24:0f:62:85:ad:1f:c8:c0:55:92:09:4c:42:35:
40:1a:f9:03:40:96:6d:06:8f:cf:04:02:5e:1a:6c:04:29:2d:
cb:41:b1:54:ee:38:9d:47:7b:ce:19:d6:4d:3e:ea:ce:88:d8:
7d:12:52:15:18:40:c0:02:4d:7d:ce:e5:6f:9a:45:da:4f:a7:
3e:c6:41:71:ff:96:81:23:dd:27:af:19:6d:ac:d1:d5:be:e5:
3c:5c:83:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:38 2026 by rpki-client