Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
File: sH-v24bTjze_DCbT8nMf3vaxTko.mft (raw, json)
Hash identifier: tjhLX3Bc8+HBoaGPx3trqTn/yEaqoDBrrBpOf7f4H1k=
Subject key identifier: 4F:05:84:01:BE:F5:F8:FB:07:4A:8B:9E:33:B5:FB:74:91:ED:6D:AA
Authority key identifier: B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
Certificate issuer: /CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Certificate serial: 019D98BD547D95CA4568220FCCBB04939765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
Manifest number: 0A1F
Signing time: Fri 17 Apr 2026 00:00:37 +0000
Manifest this update: Fri 17 Apr 2026 00:00:37 +0000
Manifest next update: Sat 18 Apr 2026 00:00:37 +0000
Files and hashes: 1: lZWH-2ISRkDqDMQnCqDWW-98xnk.roa (hash: JDtc5t6fobEneseGSEO/aqOB7d3WkNL4mqQCpDAemQg=)
2: sH-v24bTjze_DCbT8nMf3vaxTko.crl (hash: il0E09MkKk0VJdTs7uAG8cfh8u86ypq5NeRPQAu32mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:54:7d:95:ca:45:68:22:0f:cc:bb:04:93:97:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Validity
Not Before: Apr 17 00:00:37 2026 GMT
Not After : Apr 18 00:00:37 2026 GMT
Subject: CN=4f058401bef5f8fb074a8b9e33b5fb7491ed6daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:1e:44:46:c8:f6:14:09:a4:3f:cf:87:3b:
fc:b8:06:8d:98:7c:23:94:af:2b:7d:40:f7:64:09:
0a:1f:c8:f9:ff:e1:08:e5:46:80:55:07:99:e9:03:
83:37:4e:43:65:3f:3e:4a:ae:2e:d0:b1:d7:bb:c4:
bb:83:dd:b0:9f:82:95:c6:18:45:5e:f9:44:2a:93:
d1:08:b2:6d:be:56:73:0f:32:55:51:19:38:ef:43:
14:de:32:4c:e7:04:2d:1b:bf:7d:56:b4:98:ea:ad:
c6:3a:99:f1:06:38:7e:2f:2f:f4:82:46:38:5e:d8:
bd:dd:9b:7d:5d:5d:d1:85:0a:75:5c:f5:25:22:d2:
1b:71:8a:f0:95:6d:d8:0d:b3:e1:32:bc:1f:96:7f:
d9:cf:36:11:a9:60:77:b5:14:55:e0:ea:6c:97:97:
b5:0e:4e:4c:b0:9d:9f:f2:08:f7:4a:c2:08:60:7c:
f5:3d:2b:04:d7:7e:c4:c1:ec:07:95:92:37:18:cb:
dd:ee:28:84:7d:55:77:f8:f2:97:96:34:b8:60:39:
08:ec:ef:17:33:dc:e1:82:2a:29:4e:76:6a:1f:2b:
bf:22:ef:20:26:87:2b:72:f9:d6:ab:0c:36:91:6e:
55:3b:3b:c7:03:2a:c2:c6:07:74:11:31:b8:a7:e9:
bf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:05:84:01:BE:F5:F8:FB:07:4A:8B:9E:33:B5:FB:74:91:ED:6D:AA
X509v3 Authority Key Identifier:
keyid:B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e7:32:55:0f:42:ea:05:58:66:7f:c4:8e:71:7d:95:62:be:
9a:7f:70:0f:3b:8d:d9:1a:74:9a:b2:4b:f1:94:ff:31:7c:04:
b1:f5:3d:48:2e:d4:8f:44:f9:f5:76:4d:7b:ae:3f:e8:ea:64:
82:13:6e:89:58:8a:5f:3b:36:ec:a6:52:57:91:62:34:8e:b0:
84:d5:13:a5:2a:53:ed:04:25:02:20:d4:dc:40:af:6e:4b:a6:
12:58:01:fa:d5:98:e6:04:67:a2:1b:59:93:7a:88:96:e0:69:
fe:2b:fc:36:8e:c0:b1:7b:ec:b6:e2:0c:05:fa:85:37:e4:83:
08:9a:55:d4:c9:f3:f0:36:4a:4f:62:f7:14:65:99:77:19:a6:
12:a4:93:0c:f5:cf:1f:bb:2d:66:03:0f:d9:a6:d8:19:34:0d:
b6:22:8f:16:47:6e:81:7c:bb:16:3e:05:53:df:1f:ed:93:e5:
b8:c6:bc:b9:29:77:e8:56:f9:ec:13:dc:5e:62:ef:b3:ef:de:
f8:e3:ad:14:b8:93:41:33:78:0a:6d:87:ed:d9:11:97:a4:ef:
e0:2b:19:41:d4:88:39:6e:d6:0f:ee:f1:49:a1:fa:5e:8c:49:
dc:3a:79:34:d1:8a:d2:d4:0e:6a:95:7e:c1:b4:2b:95:38:2a:
0f:33:b5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:34:11 2026 by rpki-client