Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
File: hFwjee_tEAVs-GXVLDLh4euowUA.mft (raw, json)
Hash identifier: ZbIGIqZIXj5MfVMfKqCvCmm9pQasx0u2tczjwZmsef4=
Subject key identifier: 4C:67:58:23:32:B4:70:60:46:2B:4D:D5:78:E2:EF:4F:4F:1B:D0:21
Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
Certificate issuer: /CN=845c2379efed10056cf865d52c32e1e1eba8c140
Certificate serial: 019DCECFFE4D30BC6486D911FD0506F28172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
Manifest number: 191C
Signing time: Mon 27 Apr 2026 12:00:30 +0000
Manifest this update: Mon 27 Apr 2026 12:00:30 +0000
Manifest next update: Tue 28 Apr 2026 12:00:30 +0000
Files and hashes: 1: 1cB9lohxPvW0aZ8d9tUcZB_hbpA.roa (hash: ZGgmXtZjF6LTHZxN99Ge2atwtWdo2BL+hrKZeJQ6mA4=)
2: RX1r4Qs7sshSi_fFORl-RS8ke2U.roa (hash: 3LSqgK+dEpd1mR7mki06tDkI20cS2e3t1p5igEow5no=)
3: cl4xGAEEhr0atOkS-M875z9YeH4.roa (hash: KmImRnh0KgE+zH9nTs3NJvmrEfwkRWLYqjzje40ykHY=)
4: hFwjee_tEAVs-GXVLDLh4euowUA.crl (hash: yl6ugJXSIw/FtEk6kZkPH43vHZvF/uvCAu3kw/ztj/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:cf:fe:4d:30:bc:64:86:d9:11:fd:05:06:f2:81:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140
Validity
Not Before: Apr 27 12:00:30 2026 GMT
Not After : Apr 28 12:00:30 2026 GMT
Subject: CN=4c67582332b47060462b4dd578e2ef4f4f1bd021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a8:01:1c:f1:c3:a1:47:ee:bf:80:86:66:9d:
97:1b:41:f1:98:ff:0b:88:67:30:ef:1c:1a:2d:22:
a3:7a:d8:3b:60:4d:a5:5f:94:62:37:3c:a9:6b:0c:
17:d0:30:90:cb:65:36:ce:a0:3e:c1:e3:70:26:fd:
29:82:d2:fb:b7:fc:60:6c:c0:1c:41:bb:3b:85:8f:
22:ab:d5:19:88:97:50:7f:d0:cf:f8:a8:80:47:a0:
0a:8a:25:8e:81:c7:29:aa:56:20:78:50:ed:31:1a:
fc:5a:08:f3:78:f0:dd:cf:76:42:c7:ff:32:37:be:
67:e3:5a:a0:e0:65:8d:98:dc:c5:e5:72:6c:50:c6:
f3:4a:ab:bf:4c:b9:0b:f9:4f:16:8a:2a:21:0f:aa:
13:79:4b:27:2b:4b:ca:ed:8f:f9:c8:22:ee:e6:72:
c0:e8:f1:5d:84:b3:d1:e4:86:ad:28:ba:70:e1:7f:
0e:7e:46:46:91:d4:d5:65:40:9f:8d:81:b3:c1:ee:
58:af:3e:30:c0:26:8d:01:74:71:c6:f2:37:1d:ae:
fd:5e:b7:30:b7:a1:42:ee:7a:e1:37:8c:6c:12:ec:
fd:48:c2:ed:ca:f4:45:5e:8f:e5:36:c3:c9:93:a6:
d9:b6:71:ed:ae:46:c4:2c:ee:73:d0:c6:23:74:85:
b9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:67:58:23:32:B4:70:60:46:2B:4D:D5:78:E2:EF:4F:4F:1B:D0:21
X509v3 Authority Key Identifier:
keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c6:4c:34:e9:97:0b:8a:eb:26:19:07:fb:be:a4:06:ab:f7:
e9:f1:d3:69:54:5f:92:5a:3e:b5:c6:62:85:d5:3a:c2:9b:a3:
0d:73:33:8f:a2:bf:e1:1b:fb:78:58:44:1f:dc:a1:89:cb:3d:
b3:91:c1:86:de:8f:1a:d7:e8:c9:a9:fb:3c:8a:be:0a:90:82:
bb:30:e6:d6:c5:fd:85:e5:59:67:81:d9:fc:b5:40:65:53:0a:
43:d2:82:c3:cc:da:8c:47:96:ef:b9:73:66:88:fe:5a:63:0e:
2b:5b:2c:fe:38:43:5f:3a:72:2e:eb:25:4a:c1:45:f0:39:39:
99:25:1f:80:c1:aa:e0:0b:3b:be:a9:d1:93:1a:c6:85:63:be:
73:0b:8c:ca:73:41:5a:57:25:5b:69:f0:ae:4e:99:a6:72:94:
b5:18:73:a1:4e:16:9f:e7:cc:88:96:c9:f0:1a:8a:a9:9d:50:
3f:93:29:ff:8e:4c:a9:51:bf:f0:42:ac:d6:bc:0e:d3:cb:de:
97:ee:7b:db:e9:0f:b3:5b:51:8e:56:73:47:ca:33:a3:c0:eb:
09:e8:c3:65:b7:34:fc:69:4d:bf:e5:92:83:29:27:3a:af:51:
f3:bd:e7:13:2e:c1:9b:87:8e:5f:0b:95:a0:53:ab:1b:39:24:
b4:0b:86:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:30:05 2026 by rpki-client