Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
File: hT8dWhiK5rK18qoTjbj5mqWq16E.mft (raw, json)
Hash identifier: FHRMLAsNFmyWfz8Cmj0QzGQHNxv2E6vMAgHs1ngifZo=
Subject key identifier: 1C:7A:95:37:97:22:A7:07:9A:8D:F7:98:7E:E0:09:FE:3B:76:54:67
Authority key identifier: 85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
Certificate issuer: /CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Certificate serial: 019D9B1A006EF821897788FD405DF7C1ECEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
Manifest number: 01FD
Signing time: Fri 17 Apr 2026 11:01:05 +0000
Manifest this update: Fri 17 Apr 2026 11:01:05 +0000
Manifest next update: Sat 18 Apr 2026 11:01:05 +0000
Files and hashes: 1: FC_VFDWxRgvoLdyaf52ezfjlzY4.roa (hash: ikf5D2Q+V7XdSE1hWi8KX7L8XUe1goHfTjIB4LBsAqg=)
2: hT8dWhiK5rK18qoTjbj5mqWq16E.crl (hash: lTwza4vhZdgk6e/9gUa8jDMzVmteOgDrhNXz9V2xakI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:1a:00:6e:f8:21:89:77:88:fd:40:5d:f7:c1:ec:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Validity
Not Before: Apr 17 11:01:05 2026 GMT
Not After : Apr 18 11:01:05 2026 GMT
Subject: CN=1c7a95379722a7079a8df7987ee009fe3b765467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bf:5a:7f:37:28:12:87:fb:e9:bf:90:c5:1a:
17:cc:2e:ce:40:7f:f5:1e:e2:05:cc:dd:cf:f4:7b:
14:87:52:7d:42:ea:ef:b8:52:47:54:68:80:78:3e:
3f:8e:36:5b:f3:93:ae:32:05:f5:cc:85:e8:40:6f:
d3:e8:62:c3:41:63:d2:e5:fa:36:28:bb:05:6d:e1:
8b:47:6e:fc:99:57:e3:e4:38:29:c9:08:9e:4c:0b:
11:dc:d0:8d:52:2e:87:fe:18:23:32:39:23:0f:a5:
4d:d5:13:b1:e2:80:b2:f3:0b:8a:e2:9f:ee:c0:0d:
df:99:57:16:08:3d:de:2f:fc:c1:d2:60:d1:c9:07:
15:26:b8:77:1b:c5:08:2b:3f:9d:c1:07:09:2c:79:
45:14:e7:de:c2:0e:e6:76:3b:bc:f4:8d:e9:29:e5:
32:da:db:89:85:17:3f:f1:74:ff:97:6e:6a:8d:c2:
99:a6:08:fd:72:4c:95:c8:06:b9:b4:4a:60:b5:b9:
cd:2b:39:1a:89:97:0d:ae:9b:ec:22:d0:58:93:27:
bb:51:cf:42:80:2e:68:14:eb:b4:3f:b1:0c:fb:cf:
47:c4:9d:72:b0:c0:1a:26:b4:2a:e1:65:1d:dd:e0:
ee:b0:08:b2:35:3a:60:23:87:7e:5d:54:c4:32:c7:
36:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7A:95:37:97:22:A7:07:9A:8D:F7:98:7E:E0:09:FE:3B:76:54:67
X509v3 Authority Key Identifier:
keyid:85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:af:7a:2b:b6:25:e0:06:74:43:5f:c2:b7:90:ea:00:53:cd:
11:3c:64:a7:d2:bb:28:1f:92:60:fa:02:1c:5e:3f:b7:92:88:
72:8b:80:f7:c7:d0:7d:5d:e8:1d:78:ec:60:5d:7f:5d:40:02:
0f:13:08:2c:15:00:f0:72:eb:b6:19:c8:92:fc:ea:76:c6:f2:
e4:dd:bd:5d:55:38:5f:eb:e0:ba:56:c5:bf:7f:dc:40:95:20:
e1:69:9c:a6:0c:8a:6a:59:6a:9d:72:79:fe:c5:b6:06:5a:c8:
62:a7:c5:aa:46:69:da:88:5d:b7:c4:fd:88:f2:be:31:ba:7f:
5a:75:a4:06:f3:9e:48:e0:e2:b9:fd:a2:f8:92:fe:78:4c:a2:
92:ce:ac:ea:93:da:ba:33:9f:ea:31:2f:56:7f:8f:9f:97:d2:
b7:d6:60:cf:a0:85:fa:d7:3a:e5:94:dc:98:c4:d9:e0:e2:e7:
a6:0c:f9:0c:0b:05:0e:c6:d2:ff:63:75:c9:b6:22:de:a2:5d:
5a:76:72:a2:19:0a:31:d5:ea:d6:e9:72:e8:bd:44:a1:47:81:
61:56:f6:27:6b:77:aa:dd:a6:20:be:ac:93:97:97:4e:fb:b7:
f2:29:99:16:84:d7:cc:30:70:37:22:96:1a:91:a6:a7:05:21:
09:e4:65:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGgBu+CGJd4j9QF33wezsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1M2YxZDVhMTg4YWU2YjJiNWYyYWExMzhkYjhmOTlhYTVh
YWQ3YTEwHhcNMjYwNDE3MTEwMTA1WhcNMjYwNDE4MTEwMTA1WjAzMTEwLwYDVQQD
EygxYzdhOTUzNzk3MjJhNzA3OWE4ZGY3OTg3ZWUwMDlmZTNiNzY1NDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb9afzcoEof76b+QxRoXzC7OQH/1
HuIFzN3P9HsUh1J9QurvuFJHVGiAeD4/jjZb85OuMgX1zIXoQG/T6GLDQWPS5fo2
KLsFbeGLR278mVfj5DgpyQieTAsR3NCNUi6H/hgjMjkjD6VN1ROx4oCy8wuK4p/u
wA3fmVcWCD3eL/zB0mDRyQcVJrh3G8UIKz+dwQcJLHlFFOfewg7mdju89I3pKeUy
2tuJhRc/8XT/l25qjcKZpgj9ckyVyAa5tEpgtbnNKzkaiZcNrpvsItBYkye7Uc9C
gC5oFOu0P7EM+89HxJ1ysMAaJrQq4WUd3eDusAiyNTpgI4d+XVTEMsc2NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBx6lTeXIqcHmo33mH7gCf47dlRnMB8GA1UdIwQY
MBaAFIU/HVoYiuaytfKqE424+ZqlqtehMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFQ4ZFdoaUs1cksxOHFvVGpiajVtcVdxMTZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MmMwOTUtZDY0MC00MWVjLWEwYmQt
OGQzMjAwNjJhZTg5LzEvaFQ4ZFdoaUs1cksxOHFvVGpiajVtcVdxMTZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC83MmMwOTUtZDY0MC00MWVjLWEwYmQtOGQzMjAwNjJhZTg5
LzEvaFQ4ZFdoaUs1cksxOHFvVGpiajVtcVdxMTZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF696K7Yl
4AZ0Q1/Ct5DqAFPNETxkp9K7KB+SYPoCHF4/t5KIcouA98fQfV3oHXjsYF1/XUAC
DxMILBUA8HLrthnIkvzqdsby5N29XVU4X+vgulbFv3/cQJUg4WmcpgyKallqnXJ5
/sW2BlrIYqfFqkZp2ohdt8T9iPK+Mbp/WnWkBvOeSODiuf2i+JL+eEyiks6s6pPa
ujOf6jEvVn+Pn5fSt9Zgz6CF+tc65ZTcmMTZ4OLnpgz5DAsFDsbS/2N1ybYi3qJd
WnZyohkKMdXq1uly6L1EoUeBYVb2J2t3qt2mIL6sk5eXTvu38imZFoTXzDBwNyKW
GpGmpwUhCeRlkA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:01:31 2026 by rpki-client