Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
File: hGzXvBkUIFasr5VzyqGvjehxgVY.mft (raw, json)
Hash identifier: 3GEe9Xdrz8Dnlpq77ur2A7idarACNQ1irFy9p6HrFeQ=
Subject key identifier: 2B:6A:5A:F0:8B:F4:4A:02:B2:99:45:6A:51:7E:49:0C:CC:A7:C9:8E
Authority key identifier: 84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
Certificate issuer: /CN=846cd7bc19142056acaf9573caa1af8de8718156
Certificate serial: 019DA71E2F030047B02AF3F1719BACDA3BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
Manifest number: 0415
Signing time: Sun 19 Apr 2026 19:01:06 +0000
Manifest this update: Sun 19 Apr 2026 19:01:06 +0000
Manifest next update: Mon 20 Apr 2026 19:01:06 +0000
Files and hashes: 1: hGzXvBkUIFasr5VzyqGvjehxgVY.crl (hash: 3705iB+2j2OCjbcaHd45WZ9Dgez+KDrVOfcDFn94AP8=)
2: uoOfCKkTnW2JzFJRrSJDBT5bTzc.roa (hash: jS+d7zXHIn78Fh4bwNdoOL3BSqCzsjrWEmoa3PN6ng4=)
3: wOpotjYca3hIDPpRRC4dKRWIXpY.roa (hash: ILk18RM+vK4poNQ402hCagvt+4XgooFqtYGnOzDde5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:1e:2f:03:00:47:b0:2a:f3:f1:71:9b:ac:da:3b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846cd7bc19142056acaf9573caa1af8de8718156
Validity
Not Before: Apr 19 19:01:06 2026 GMT
Not After : Apr 20 19:01:06 2026 GMT
Subject: CN=2b6a5af08bf44a02b299456a517e490ccca7c98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b4:a5:81:d5:63:63:4c:98:99:dc:86:57:98:
f9:f8:39:8d:3f:51:d0:88:d7:ac:4f:aa:e2:00:4e:
60:ef:ad:1b:fb:2a:f5:88:02:07:80:23:f7:28:68:
ae:42:1d:bf:55:d4:25:ad:6e:22:cc:bf:bf:d9:60:
3a:1a:5b:51:57:59:b8:ef:90:0d:e5:fc:db:7e:e3:
82:82:d7:ac:68:30:d2:cc:5b:fb:e9:a1:f6:52:b0:
ab:da:a4:5a:d2:93:69:ff:85:1a:99:21:b6:8e:f2:
42:a5:d4:3c:2c:43:36:21:e4:01:f5:3c:4c:be:16:
69:e8:a4:ac:f7:90:cd:0e:d1:fa:e3:3a:f3:3f:00:
92:f5:1b:36:de:69:94:10:b6:cf:63:dd:4a:28:3b:
fa:44:dd:62:61:b1:55:1b:8d:e0:c7:5e:78:d7:47:
29:3c:84:dc:97:e5:59:11:96:de:32:8e:41:e5:92:
6c:da:c8:32:7b:4a:bd:90:be:03:8c:a4:da:95:ef:
11:b3:af:fb:a7:93:49:c4:0e:94:c4:12:35:ce:b1:
91:da:1d:97:43:c6:dd:92:13:10:e7:13:9c:a6:75:
19:ee:8e:4c:54:3a:57:88:45:b9:eb:0c:ae:bb:19:
bd:fe:62:bc:5e:fe:3e:35:b3:aa:aa:c4:fb:89:82:
3f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6A:5A:F0:8B:F4:4A:02:B2:99:45:6A:51:7E:49:0C:CC:A7:C9:8E
X509v3 Authority Key Identifier:
keyid:84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:fb:fb:5a:ae:ca:72:55:a9:8c:89:46:1e:4e:e4:e8:dd:5c:
07:7f:74:6d:65:d1:16:26:c2:a5:1d:ba:2f:77:e5:0a:1e:0b:
a0:65:ca:1a:7b:2b:0f:d8:4f:c9:41:74:20:9a:60:79:00:66:
1b:7d:2b:3e:23:5b:78:63:ae:70:11:13:76:69:02:9e:34:0a:
f8:fa:f3:e0:61:9f:d6:9b:97:be:3b:fe:b0:f9:64:e5:8b:2a:
d9:dc:20:bb:8e:25:fe:f3:c2:67:d0:30:2f:2d:05:d3:8e:21:
f9:9b:a4:b6:56:1d:4d:e1:2e:f2:83:56:b9:7d:ef:a4:89:83:
da:25:22:de:d2:ce:f4:91:65:0e:e8:cb:5f:be:65:b8:29:de:
d2:c0:f2:3b:fa:4d:7e:e0:59:d3:f5:8a:39:0e:a3:d5:28:9a:
64:de:3c:56:7d:85:dd:04:30:93:53:c9:44:46:1e:bc:f0:24:
3c:4a:6a:29:0a:79:b7:61:cc:9b:26:f2:9b:c8:5a:a7:62:3e:
b7:08:c7:52:86:df:a0:1b:cc:26:b5:3b:2d:5f:be:a1:1c:99:
3d:a7:b0:4a:7c:c0:9a:d5:41:6a:5c:54:bf:2f:3b:c5:9f:91:
f4:79:14:d1:0b:c6:18:02:83:7d:d5:a5:84:1e:b6:84:ab:9e:
2c:ac:5c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:52:16 2026 by rpki-client