Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier: +8LeWIqdZldlZDX91eq9CsdnTjY6jLsF2xsaUzrgtO4=
Subject key identifier: 7B:21:F2:23:12:0C:09:B5:B7:73:94:90:3C:03:FE:F0:FB:4D:DF:4F
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 019D9886B9908416273FD08AA99F90591E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number: 1555
Signing time: Thu 16 Apr 2026 23:00:59 +0000
Manifest this update: Thu 16 Apr 2026 23:00:59 +0000
Manifest next update: Fri 17 Apr 2026 23:00:59 +0000
Files and hashes: 1: aBOBuL_H29H0y-_-QBP0Ehj1DT0.roa (hash: O7ZWbL6IufsmlkGlAPRYtWsGACsMquG9gC8M6gOxrwY=)
2: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: 6DMaTcZ3RIJXi7MhRd+1JMEFNxLqhJHPCYOBCa1cFgM=)
3: y0DK2UjH_DKReYw5NUdmHs1btyA.roa (hash: VfLGmY9ACuSYXNETyrRKCoYE5Ubu9KeR/Haw0EJrQro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:b9:90:84:16:27:3f:d0:8a:a9:9f:90:59:1e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: Apr 16 23:00:59 2026 GMT
Not After : Apr 17 23:00:59 2026 GMT
Subject: CN=7b21f223120c09b5b77394903c03fef0fb4ddf4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:e7:85:3b:9b:c3:45:49:07:c4:45:20:6a:
38:81:51:3e:36:7d:fa:3c:89:68:e7:a5:2e:80:3a:
4f:0d:9e:a8:aa:b0:60:7f:4a:32:c4:27:39:6a:70:
90:f1:9b:e6:44:e5:03:e0:7b:d8:52:80:81:6d:fc:
f2:6d:6a:fa:f7:67:50:2e:3d:1f:c9:29:17:15:7e:
7f:33:5f:7b:c4:fb:da:fa:7a:53:2c:99:f9:07:b3:
71:4e:c2:ac:29:0a:45:06:0e:b8:1a:34:4e:2d:ad:
86:ed:1c:3e:0b:85:52:39:b6:a7:08:a7:54:b9:b5:
c3:ed:f0:88:fe:e7:ac:2b:f7:34:64:b1:50:87:97:
ae:be:5b:45:8e:5a:12:e5:4e:18:62:b9:fa:61:62:
46:99:51:c4:a2:d1:25:08:1d:e4:9c:11:72:de:fa:
b6:fb:98:26:96:8c:c2:f7:6e:6a:0c:94:bd:08:aa:
3d:54:31:99:3c:54:ec:4b:45:f5:01:45:1b:c1:d8:
72:35:ea:32:56:c2:b8:c4:12:d8:7c:52:ca:0f:fc:
2f:43:ab:ed:3d:5d:2a:ce:68:55:57:0e:55:c7:14:
86:34:0b:04:2b:f2:5f:5b:53:6c:28:97:4f:95:a1:
38:85:2d:c1:5b:30:cf:34:88:85:bb:5a:f1:96:f6:
6e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:21:F2:23:12:0C:09:B5:B7:73:94:90:3C:03:FE:F0:FB:4D:DF:4F
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:de:24:46:d9:38:4c:2f:b5:05:67:55:a0:84:da:0a:15:71:
78:bf:c1:7c:23:e0:0c:bc:ac:e2:29:ff:d7:35:bf:e2:dd:7a:
a8:05:b8:f5:92:19:94:37:8a:7e:9a:6f:81:80:a8:68:ab:8d:
f1:01:bb:7a:58:ca:eb:5a:7c:8f:b0:8b:67:07:eb:4d:0e:ec:
d1:fc:5f:90:7d:d9:6c:d0:b3:d0:b0:45:da:a6:61:6f:c8:50:
6e:ca:40:b0:37:02:17:a7:62:b4:a6:2f:10:cd:36:96:3a:c1:
71:16:45:54:84:90:d4:58:f8:4d:64:b1:ba:09:f7:45:25:55:
04:60:88:05:76:aa:c6:3f:ba:ea:a9:e2:4c:76:bd:2c:d0:5c:
76:ee:00:cc:73:c2:4b:44:12:6b:c4:39:b0:c6:07:4c:b8:be:
c4:d7:a3:8d:eb:28:bd:24:bc:6e:4a:c4:87:33:22:4f:6c:56:
bd:65:ae:bd:ca:ef:54:f2:68:e3:1e:c3:75:f4:ff:c1:f4:1d:
72:7c:9a:f6:19:57:e3:5f:6e:04:08:d7:0e:76:fe:37:8d:7d:
e1:84:e3:a0:23:3e:95:79:9a:18:07:9d:8d:16:6f:1a:18:12:
0b:cd:0b:f3:da:15:e7:25:5b:1e:a5:e7:bd:75:27:87:c1:52:
4d:c0:82:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:47 2026 by rpki-client