Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
File: hTYUYRmwRFOQguMmzKkDIAuNSxo.mft (raw, json)
Hash identifier: dCGx1y+zOry4vqJV5njVbwAb/Wl52kAuRSilT6iW+gI=
Subject key identifier: BF:67:64:6F:F2:0A:44:5B:6E:E2:24:0A:A9:1B:4E:59:E6:79:6D:71
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial: 019DCF3E03C0E7EE1A59ACAB3A83A08D9C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
Manifest number: 1228
Signing time: Mon 27 Apr 2026 14:00:41 +0000
Manifest this update: Mon 27 Apr 2026 14:00:41 +0000
Manifest next update: Tue 28 Apr 2026 14:00:41 +0000
Files and hashes: 1: 4IwzD6JWssSfDrS7OsowJYf8F3g.roa (hash: 3STzPQwFjgmuSyiPKC+VcXtn9kHY3QHNznY54Mamy30=)
2: SgMOoWz5gJhb0nyT-ZKsGgLzAOg.roa (hash: zgTRF9Sx7egnoTtrUbB6SPfcPU50038KU3DAntDwjks=)
3: hTYUYRmwRFOQguMmzKkDIAuNSxo.crl (hash: jGz8XuRmuNwVI/3fl1nykl7LodTtwwQX0+B0oB4yjog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:03:c0:e7:ee:1a:59:ac:ab:3a:83:a0:8d:9c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
Validity
Not Before: Apr 27 14:00:41 2026 GMT
Not After : Apr 28 14:00:41 2026 GMT
Subject: CN=bf67646ff20a445b6ee2240aa91b4e59e6796d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a4:2f:d9:05:7b:27:6f:c1:70:4d:d5:36:bc:
38:cf:66:31:2d:bf:83:92:77:da:de:70:ca:76:f7:
51:f8:86:7d:6a:fb:69:0c:81:f0:72:97:2e:70:ce:
b5:30:53:69:ba:66:3d:ef:d5:ce:b9:3f:9f:54:c6:
7c:e2:dc:6e:23:5a:03:6e:f9:40:86:30:e8:6a:a9:
65:05:1c:e3:1e:25:c3:b1:0f:2c:07:ba:af:42:14:
11:71:1e:7b:54:8e:01:32:da:3a:db:b8:2b:0c:ce:
6f:ec:50:f4:76:f7:7d:23:b5:52:16:74:b7:3b:3a:
ba:69:62:dc:d1:be:9f:be:e5:91:d2:20:d4:7c:65:
3d:3e:0a:69:4b:8d:2d:89:eb:c8:b5:d8:94:12:81:
b3:02:8b:18:41:25:94:ba:1e:d4:cc:b5:ef:3f:c3:
46:dd:7b:e5:61:db:2a:9e:58:b1:18:1a:dd:51:21:
55:60:9e:a9:79:af:0e:66:4e:95:a9:10:13:3a:b2:
d9:9e:b5:e2:75:a5:f8:f1:0f:b7:62:a5:5c:d5:42:
19:a3:a8:02:52:34:7b:a7:ad:db:63:f3:f6:6a:a1:
69:11:0b:9c:7e:08:5b:08:f6:85:d1:52:84:09:e5:
cb:ba:97:e6:80:f7:b7:43:ab:e9:72:71:b3:d0:fa:
b8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:67:64:6F:F2:0A:44:5B:6E:E2:24:0A:A9:1B:4E:59:E6:79:6D:71
X509v3 Authority Key Identifier:
keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:79:bc:02:1e:43:31:c9:f5:06:75:74:a0:6b:f7:ea:d5:03:
3b:35:c1:e5:e8:b1:be:08:45:a3:7d:aa:c0:f5:ea:9b:3e:d9:
3a:37:40:7d:40:c4:24:a4:20:5d:63:a0:4e:e9:4d:6c:2b:9c:
c4:17:39:7d:0b:e5:a6:53:93:ba:94:4b:df:85:32:3b:bc:55:
e5:74:a1:52:be:15:d5:38:7b:80:d2:1c:25:dc:a8:b5:1c:53:
3f:ac:48:86:05:a9:7c:0e:4a:93:c1:29:4a:22:d1:e3:9c:85:
d9:2d:59:0d:25:41:20:3e:d9:b2:21:d7:fd:70:55:99:ec:4e:
a9:d6:96:0d:e3:da:88:39:47:20:7e:32:5e:bc:34:da:cd:21:
dc:7c:8e:7e:93:ef:15:b4:eb:0d:9f:ab:48:4f:a7:53:37:c3:
01:e7:8d:1d:a8:b4:84:65:8b:c5:d3:11:6f:4c:1b:53:d7:c1:
b9:c8:85:35:4a:1c:d0:fa:a4:da:9c:2b:93:b1:e2:82:3b:3d:
0d:d1:02:51:65:d7:1c:25:26:6a:8f:c7:6a:86:53:1f:2e:9f:
4e:b0:55:7b:92:ab:4c:09:f4:48:14:cf:5e:41:1d:2f:8e:a6:
23:6e:64:23:b5:20:91:b2:76:cd:33:bd:2d:6d:e3:98:cd:fa:
de:93:54:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:26:14 2026 by rpki-client