Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
File: hNt0eyiXF6BoTNasgjB6pnuy17s.mft (raw, json)
Hash identifier: W51umihR/rKu5mPn0azlkejpxpYGOimtgnWjVBXfkMM=
Subject key identifier: 87:D9:8A:C7:49:36:D8:7B:7C:9C:1F:4A:51:BA:6E:00:2B:66:14:3E
Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Certificate issuer: /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Certificate serial: 019DD163EBAA081D035F3B28AA7F9DCA76D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
Manifest number: 161F
Signing time: Tue 28 Apr 2026 00:01:19 +0000
Manifest this update: Tue 28 Apr 2026 00:01:19 +0000
Manifest next update: Wed 29 Apr 2026 00:01:19 +0000
Files and hashes: 1: 1-3Gcx58fzra_v9eEZ6N_xRMnk-U.roa (hash: LxQsMlE6dccDgJVSFe4kQrNckGUI9bmtbjF5OIYdtrs=)
2: 4KN1agjGCetNojWRsDbUJbjhQKs.roa (hash: yTfVhH1Hf4jYfP2TiWx0oinRMtZ2QHu/x1BdH7OqRl0=)
3: hNt0eyiXF6BoTNasgjB6pnuy17s.crl (hash: UudB9URNxh6ugxiWSwE82ecQAu6UuukKMMxBhvRqnoY=)
4: yyn2geOIU_--UUnG8pkuvnJsDpQ.roa (hash: bxmnlrGKd567WF+3ZEEy2gfmdqW2wGXYEodGeY8tXEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 00:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:63:eb:aa:08:1d:03:5f:3b:28:aa:7f:9d:ca:76:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Validity
Not Before: Apr 28 00:01:19 2026 GMT
Not After : Apr 29 00:01:19 2026 GMT
Subject: CN=87d98ac74936d87b7c9c1f4a51ba6e002b66143e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:02:21:0f:c3:98:5e:87:ab:ae:65:f2:83:
b2:cf:82:4d:f9:0e:68:e7:92:cb:7a:23:9b:ba:1c:
e1:0e:56:c2:89:88:c2:db:dc:f0:10:29:19:b0:dc:
23:3f:c3:b3:e5:7f:87:b2:e5:00:0a:ff:36:e3:fb:
1b:8a:e7:2a:58:86:f4:62:37:78:d4:78:e3:33:64:
54:21:7e:e4:8b:8e:33:69:50:90:53:ee:8a:88:42:
96:e8:f4:8b:0d:a2:b9:1b:d4:48:06:49:42:ee:3b:
76:80:5b:64:a8:5f:01:9b:c7:de:14:50:90:67:82:
92:99:35:df:24:c8:b1:71:48:fa:41:bd:0e:04:23:
e8:46:0c:b3:33:1b:4f:a6:51:ea:1d:fc:fc:9e:b1:
13:8a:0e:17:0f:c2:69:01:95:10:4b:8a:38:32:7c:
cc:aa:de:25:3b:9a:91:f6:0c:43:41:ae:41:4b:e6:
0f:62:73:b6:d2:32:ab:e7:6e:06:2b:ca:88:6c:28:
6a:14:e4:9d:fd:e2:40:cc:3d:88:a1:8f:9d:72:b2:
fb:51:ae:d4:56:b7:ef:3e:13:39:1c:31:8a:c5:a0:
16:d8:31:4b:7a:fd:b8:e9:95:aa:ba:f5:27:26:eb:
ed:f4:22:a9:5a:41:ae:66:38:31:83:d7:89:fa:cf:
1e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D9:8A:C7:49:36:D8:7B:7C:9C:1F:4A:51:BA:6E:00:2B:66:14:3E
X509v3 Authority Key Identifier:
keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:54:85:96:cc:19:eb:71:ee:5c:33:ef:92:77:bb:75:7f:56:
46:cb:ff:4f:6d:54:9b:ba:a0:5b:9d:de:2f:d5:9c:13:83:bb:
d2:aa:6b:78:c0:69:56:ce:c3:d4:37:36:ab:ab:f1:be:b4:33:
d0:4f:fd:10:7a:f4:2d:5a:3f:98:2c:96:9b:17:3f:1d:1a:64:
f8:6b:6d:d4:8c:60:25:af:d9:86:a4:4b:51:38:30:10:7c:06:
0e:3e:f1:bb:92:97:c9:aa:d2:57:bf:b1:e4:12:21:a9:b4:7a:
f3:3c:98:20:8b:ad:6f:96:6f:b2:e4:5d:77:cd:5b:38:38:e8:
c2:99:09:d3:27:7a:6c:1f:86:5c:aa:ca:9c:ca:fe:f6:26:fc:
b2:36:44:87:c7:3e:5e:2c:b8:97:ac:62:94:28:53:90:e0:77:
1d:0c:e3:05:2a:98:e0:cc:d9:70:c2:0b:77:2b:35:73:31:8c:
58:2e:df:2b:f0:36:1b:03:99:1a:9e:8c:95:90:b3:41:0d:5f:
30:43:e6:28:17:4c:c8:b5:c6:65:bf:b4:7e:46:74:f1:01:b0:
9b:5e:c3:99:3d:fc:cb:ff:f4:aa:fa:df:ab:a3:a6:2e:7c:10:
ef:21:d3:15:7c:ee:bb:75:af:44:3c:3d:f3:b8:be:c1:5e:cb:
32:7d:34:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:52:06 2026 by rpki-client