Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
File: hGzXvBkUIFasr5VzyqGvjehxgVY.mft (raw, json)
Hash identifier: igUMLVkd4KD21fkCNgQFvL1wSyjoAuWLBbAd0btuf8M=
Subject key identifier: 15:E4:5D:2C:82:09:21:44:31:AE:C9:2E:4D:03:26:9C:F8:B1:C9:B8
Authority key identifier: 84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
Certificate issuer: /CN=846cd7bc19142056acaf9573caa1af8de8718156
Certificate serial: 019DA90C9129925EFF89567E8957F393EA5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
Manifest number: 0416
Signing time: Mon 20 Apr 2026 04:01:06 +0000
Manifest this update: Mon 20 Apr 2026 04:01:06 +0000
Manifest next update: Tue 21 Apr 2026 04:01:06 +0000
Files and hashes: 1: hGzXvBkUIFasr5VzyqGvjehxgVY.crl (hash: dnckGGBxbJcHSUL6R9fLYM3/Fl/QBDqnzAwRyPlDoZY=)
2: uoOfCKkTnW2JzFJRrSJDBT5bTzc.roa (hash: jS+d7zXHIn78Fh4bwNdoOL3BSqCzsjrWEmoa3PN6ng4=)
3: wOpotjYca3hIDPpRRC4dKRWIXpY.roa (hash: ILk18RM+vK4poNQ402hCagvt+4XgooFqtYGnOzDde5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:0c:91:29:92:5e:ff:89:56:7e:89:57:f3:93:ea:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846cd7bc19142056acaf9573caa1af8de8718156
Validity
Not Before: Apr 20 04:01:06 2026 GMT
Not After : Apr 21 04:01:06 2026 GMT
Subject: CN=15e45d2c8209214431aec92e4d03269cf8b1c9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7b:d8:4e:aa:d1:4a:fd:0e:63:5b:04:04:84:
f7:0d:ef:d8:88:5e:e7:ce:a4:d4:c3:db:8c:46:77:
86:0a:00:cb:a5:0a:08:07:f1:07:34:00:97:63:6b:
ed:7f:cd:4f:70:bf:c9:bf:64:11:0b:67:5b:96:92:
31:e5:6e:f9:9a:2c:30:25:c3:f9:aa:ee:59:4c:f5:
45:b2:6b:fe:c4:31:a7:2a:94:45:be:fc:16:d2:86:
ac:97:3a:b6:50:f7:4e:2c:f2:3f:d8:43:d4:75:e2:
40:f9:d4:f8:7b:e7:34:d5:57:7a:60:38:d4:51:f2:
8d:01:d5:eb:a0:02:f8:2b:9d:59:35:f7:03:34:bb:
d4:5c:f5:9d:c7:2c:8f:42:f2:72:93:25:67:29:4e:
68:b4:08:f9:99:46:9a:83:22:a7:3e:c4:99:55:95:
60:66:22:61:86:e3:2a:9a:57:9e:41:a6:19:fc:f0:
27:e5:1d:21:ee:c2:78:08:91:80:40:07:44:27:09:
71:e5:20:f9:42:b4:c8:36:a9:ec:93:af:f8:41:7f:
37:31:3c:a8:f3:08:f1:ae:e4:dc:73:18:2d:54:59:
6d:4c:d9:00:77:77:2e:09:d0:d3:f5:14:48:ea:e8:
61:a8:f5:de:57:bc:fa:a5:da:34:63:c1:67:cf:94:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E4:5D:2C:82:09:21:44:31:AE:C9:2E:4D:03:26:9C:F8:B1:C9:B8
X509v3 Authority Key Identifier:
keyid:84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0d:6e:33:a1:b1:f4:90:9a:af:64:57:24:ef:41:67:5e:69:
31:7a:f3:a1:3a:d7:cd:89:83:e9:e9:f8:d1:65:e6:4f:08:5c:
01:b4:fc:38:5d:d0:c1:e8:04:f6:2a:6a:b2:1e:00:f2:07:53:
c7:a1:a8:1d:67:2b:18:4c:97:95:8f:76:24:5c:77:d0:a8:db:
0f:6a:1b:e2:63:3f:39:93:51:e7:c7:93:f7:ea:79:80:5c:34:
78:c5:f2:0b:2a:4f:ab:f1:a9:fd:c2:67:3e:91:e1:1c:b9:68:
15:7a:df:2b:e0:1a:9b:6b:70:6c:8f:dc:8b:d4:4d:07:8f:b2:
0d:fe:c3:b2:d0:6c:a1:3b:37:20:aa:4b:29:b8:df:be:60:dd:
54:a3:2a:56:c6:d9:d4:0f:8b:ac:5a:e5:4e:70:d8:bc:0c:bb:
ee:54:b5:fb:9f:f9:ae:34:f1:0f:24:6e:e5:ab:ef:ae:e8:ab:
4c:4d:bd:4b:3e:d3:6b:57:62:30:0c:d2:2d:7b:d7:c7:85:d2:
3a:79:41:ae:cf:61:4a:f2:ac:a7:f2:34:bc:eb:8d:be:27:a6:
41:70:0c:c7:96:fd:58:6f:e6:15:6c:81:b2:f5:54:75:fb:fb:
82:d3:7a:3e:f7:d2:e6:d1:e7:5e:55:b5:00:8a:22:4c:a6:0c:
30:d9:03:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 06:07:00 2026 by rpki-client