Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
File: hT8dWhiK5rK18qoTjbj5mqWq16E.mft (raw, json)
Hash identifier: xAL0TxMKQNrlh64Oozsa0exXQRPBpd3M6ErZcgYc6eY=
Subject key identifier: B9:29:A8:FB:6F:01:63:B8:25:4A:50:32:D4:EE:F0:A3:19:1A:E3:B9
Authority key identifier: 85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
Certificate issuer: /CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Certificate serial: 019D9D086B31FF8CCAD8F0DD7DBE09C7C3E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
Manifest number: 01FE
Signing time: Fri 17 Apr 2026 20:01:07 +0000
Manifest this update: Fri 17 Apr 2026 20:01:07 +0000
Manifest next update: Sat 18 Apr 2026 20:01:07 +0000
Files and hashes: 1: FC_VFDWxRgvoLdyaf52ezfjlzY4.roa (hash: ikf5D2Q+V7XdSE1hWi8KX7L8XUe1goHfTjIB4LBsAqg=)
2: hT8dWhiK5rK18qoTjbj5mqWq16E.crl (hash: gZIuwjao1th70B8z1oz5rdQLO/Q09hJlLHVlz5au6EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:6b:31:ff:8c:ca:d8:f0:dd:7d:be:09:c7:c3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Validity
Not Before: Apr 17 20:01:07 2026 GMT
Not After : Apr 18 20:01:07 2026 GMT
Subject: CN=b929a8fb6f0163b8254a5032d4eef0a3191ae3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8a:55:36:ab:e5:0b:c6:16:a7:39:8a:9b:94:
69:b6:0e:ba:8a:44:62:b5:90:fa:fc:f2:48:63:cd:
d1:c5:70:15:79:b1:3c:02:18:7a:02:43:ac:6d:69:
db:16:9a:ea:66:79:fc:fc:0f:dc:fa:4b:fc:4e:f5:
07:ad:ea:8e:3f:cd:75:83:00:80:df:77:b2:56:b9:
f5:6e:f2:cb:36:3e:32:25:30:89:37:9e:9f:33:c0:
1f:d4:98:d0:8f:f5:ba:33:af:d9:88:b7:1e:8d:88:
22:28:e2:e8:d4:50:c3:db:b8:cf:e4:fe:de:8f:e9:
a4:7c:6e:f1:c9:b6:65:7d:09:19:5e:7b:5b:ed:da:
06:9a:3c:eb:4e:d7:b2:2d:03:17:12:0b:9d:fd:37:
29:a1:25:fd:2d:34:42:99:08:5f:27:4a:3a:31:f3:
4c:67:b3:19:2c:65:4d:e1:df:f6:db:0e:37:5a:22:
14:ed:ec:81:2d:62:de:85:c0:b6:38:f5:e9:c9:63:
0c:79:aa:58:da:c3:15:f7:93:3c:fb:e7:62:ea:18:
7d:9b:28:85:fb:9d:7e:1d:b4:5d:cc:0e:80:52:b0:
aa:70:c6:00:4d:7a:09:68:0f:8d:52:7d:dd:2b:da:
21:a1:d8:6e:9c:0b:00:cf:ce:09:5a:3e:0d:25:44:
5a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:29:A8:FB:6F:01:63:B8:25:4A:50:32:D4:EE:F0:A3:19:1A:E3:B9
X509v3 Authority Key Identifier:
keyid:85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:34:3f:a6:c6:b6:f6:7a:ec:f4:27:e2:80:7f:ff:35:34:7a:
6a:d7:79:b8:2f:ee:17:0b:a9:49:60:53:03:ae:57:bc:8c:e3:
24:32:b6:0b:7e:5e:88:a0:8e:a8:73:8a:19:1d:2e:ae:27:18:
ba:45:87:38:99:b5:dd:90:9f:84:75:a9:d0:74:5e:56:30:3f:
2d:2c:a7:07:50:38:34:ab:1f:00:f4:9c:61:60:b0:b4:4e:27:
b0:09:61:79:a6:3b:0a:e5:db:e5:6d:73:8e:ec:a3:0e:10:c3:
52:1a:7a:54:78:b5:57:27:cf:aa:f4:08:a1:92:04:7c:b5:70:
39:ec:ae:cf:30:37:92:ac:b6:51:6d:ce:6f:88:a8:f2:61:93:
e2:12:86:99:06:98:7e:18:63:e3:8d:a3:f2:b6:61:82:89:43:
4e:96:f3:24:d9:bb:6d:5f:a0:e5:4d:1f:e0:7b:63:d0:b5:04:
09:36:d6:7b:57:04:5f:de:39:98:29:e0:4f:c3:42:96:d3:7a:
3b:ab:94:1e:52:86:98:c9:b6:30:69:9d:15:0c:cd:3c:9f:81:
29:cc:4b:9f:06:e2:63:68:54:d5:6e:31:8a:89:d0:c3:82:c2:
e3:d5:a5:b3:8b:88:f6:8b:da:58:ed:d0:4a:4b:91:f8:0f:5e:
17:7d:38:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:48:16 2026 by rpki-client