Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
File: hUwNsAZYRNlZTf6N2O_XftHkk_g.mft (raw, json)
Hash identifier: Oz82Xs/Yvr8BVk/CXeqW54/MXStwPdACRBtlC47vQeM=
Subject key identifier: 51:9B:F7:7B:61:69:E6:54:1A:9E:93:1A:FB:2C:43:68:A4:C8:A7:60
Authority key identifier: 85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
Certificate issuer: /CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Certificate serial: 019DA3E6280C2440F9402A3CA125AE5024BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 04:01:02 +0000
Manifest this update: Sun 19 Apr 2026 04:01:02 +0000
Manifest next update: Mon 20 Apr 2026 04:01:02 +0000
Files and hashes: 1: DB-kubcDSriQvnabeDogJ7LkMfM.roa (hash: XGoLRb9s7HKmX6rpBYGsBJA5idHvV3yS22+b7xVn/rY=)
2: hUwNsAZYRNlZTf6N2O_XftHkk_g.crl (hash: Vg999Fu6LFkMi6Dx6kJWf+DpqYgMQXX8cxTS7icWt80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:28:0c:24:40:f9:40:2a:3c:a1:25:ae:50:24:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Validity
Not Before: Apr 19 04:01:02 2026 GMT
Not After : Apr 20 04:01:02 2026 GMT
Subject: CN=519bf77b6169e6541a9e931afb2c4368a4c8a760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cd:b0:86:a6:65:5c:3d:12:17:8d:ca:5b:f8:
7b:08:5d:ab:53:5c:96:43:0d:2d:65:7b:91:45:09:
71:32:b9:42:57:2d:b7:0d:ca:8d:3e:fc:d2:a7:17:
d8:ec:ec:cf:35:49:71:fe:97:6c:8e:b6:ed:9a:05:
7a:57:e3:25:39:0b:9e:a7:0d:86:25:75:2b:f2:8a:
89:57:15:fb:29:91:20:56:f2:ae:3d:7c:34:7c:9d:
00:88:40:12:9b:90:c2:a8:01:46:3c:97:cb:39:c0:
86:d2:ba:4c:ad:f3:2e:fd:90:e5:60:c3:0d:58:83:
b8:da:e8:db:e8:8d:16:7a:66:ea:6f:34:03:95:ad:
a8:c7:90:8b:69:76:f8:11:52:d7:2a:71:60:4a:ab:
94:cf:60:6b:09:ea:7f:e5:85:9c:83:49:11:36:c2:
9c:8c:e3:b4:29:16:aa:85:46:4b:6d:18:f2:a6:ab:
08:ed:22:e7:ce:8a:40:73:8e:f0:93:ef:b3:b7:fd:
7c:fb:b3:1a:87:c4:00:3e:3a:30:2d:be:52:a0:6f:
f3:f7:2a:be:75:41:de:69:e5:a6:52:0c:fc:21:9b:
e4:eb:92:5e:6d:a8:52:2f:b2:c7:e7:00:06:82:35:
c2:cf:58:48:68:62:24:40:f0:5e:5d:99:57:fe:57:
7d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9B:F7:7B:61:69:E6:54:1A:9E:93:1A:FB:2C:43:68:A4:C8:A7:60
X509v3 Authority Key Identifier:
keyid:85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:bc:26:16:32:27:fa:7c:33:6b:45:2e:6e:93:e1:90:cf:45:
34:a2:ca:e8:e1:ed:48:26:25:94:97:a1:44:49:b5:c1:53:15:
af:2f:f9:b3:86:6d:7d:ab:63:1f:ff:3c:73:cc:7e:fe:5e:42:
0f:24:c0:94:3a:33:3b:ab:6c:22:a8:9f:27:6d:04:b1:e0:26:
a0:0d:f5:de:fa:0f:a9:00:6d:58:79:a4:1d:cc:50:6d:46:67:
cb:36:c1:23:33:7e:9a:52:42:fb:b7:12:74:9d:3d:d2:f9:90:
7a:d1:85:5a:55:02:28:a7:b9:ee:92:b7:ff:60:42:bc:ad:91:
e5:21:5e:58:37:c7:95:5f:22:9f:e2:46:2c:54:e9:e2:3c:5a:
1a:ed:2a:d6:7f:7f:dc:21:fa:f3:6c:71:22:4d:57:f4:e2:5a:
9e:37:4d:6e:9e:9f:f6:21:86:47:2b:cc:85:1a:01:1d:7a:ae:
e6:9c:a1:56:7c:2e:e6:c6:d0:08:d9:b1:12:f6:58:d9:6b:2b:
36:1d:e0:81:e5:91:6a:98:c5:76:6f:fb:a4:bc:bf:1d:bb:c8:
b3:85:02:3b:af:21:2b:ae:6c:60:d8:47:f4:19:7c:d0:24:c3:
c2:eb:8f:1b:cc:9b:c7:9a:ad:8a:e4:c8:ea:b0:e9:0a:b2:f3:
ba:f7:87:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 06:59:18 2026 by rpki-client