Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json)
Hash identifier: /lW4f7OaDaXDDQXU6p195+LIU1xyJ4/AurSyS5LkSKA=
Subject key identifier: B0:2D:46:E2:32:E9:FD:7D:71:CF:32:07:DF:9D:A6:96:06:32:D0:45
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 019DCE2BB9809621319FD1577924126E567F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
Manifest number: 0E54
Signing time: Mon 27 Apr 2026 09:01:05 +0000
Manifest this update: Mon 27 Apr 2026 09:01:05 +0000
Manifest next update: Tue 28 Apr 2026 09:01:05 +0000
Files and hashes: 1: ILRt9LkKcLV8zTDhe4daBlelpbE.roa (hash: NtW+TS7Xs6SFuc4EVBUAJ27kGuxkzyU+HkBhm6grJWo=)
2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: gkhlt6MvQYvVxcdOleH1QCOSNf8VMiYe27GEuM6kvz0=)
3: T5tca3eRSBXQYZ3SqJhOW7Yc8mQ.roa (hash: cOn2EnZ6WvGENwI0qXwoWVZXLsqu0B3PPBV5nncT3Hs=)
4: aMnzI3Vlx1VkjK-AhtMje8rEUrA.roa (hash: clrVl3R15Nf5RVyElPWOOa52ljSeBdDqyIlVAivM47k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:b9:80:96:21:31:9f:d1:57:79:24:12:6e:56:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Apr 27 09:01:05 2026 GMT
Not After : Apr 28 09:01:05 2026 GMT
Subject: CN=b02d46e232e9fd7d71cf3207df9da6960632d045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:7e:33:fc:04:bd:7f:e2:61:64:2c:fc:33:
64:af:e4:e9:35:3b:b6:7e:7c:51:04:be:18:f4:0f:
30:ef:98:b0:89:ba:5c:50:87:13:8e:88:10:46:61:
fc:f4:f9:6c:11:11:8a:2b:27:4d:00:f5:67:b0:b1:
5e:1c:26:a9:b5:df:36:30:5f:1f:ea:54:e9:fe:ae:
3f:4c:91:42:c1:c0:a1:09:ff:a8:5a:62:5f:b6:d3:
fe:00:7c:6f:d1:41:33:46:91:a8:44:89:2c:64:6f:
ef:1d:4d:5b:4c:97:6a:5e:2b:5c:89:61:78:61:1b:
d6:a3:b0:0f:f4:fa:8b:eb:d3:48:1c:c6:c3:30:23:
ff:de:3a:ed:a0:22:66:01:1d:05:5e:fd:83:65:72:
42:9f:cd:f7:3e:3e:2c:e2:09:0a:04:ff:e1:83:f4:
49:a0:0b:38:94:bb:12:cf:77:2d:bd:04:44:3f:4c:
f4:ba:6b:1e:00:ae:2f:9a:fd:e7:d4:9d:e5:13:a1:
b1:27:66:59:54:ad:0a:b9:06:2a:96:48:c8:ad:da:
91:3f:c2:6c:dc:2c:15:a2:0e:9d:67:70:89:42:59:
8e:81:11:3c:c7:2f:8a:30:4c:c5:59:04:77:61:72:
70:47:e0:c9:49:08:ff:fc:a2:24:5d:f5:0b:95:6c:
96:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2D:46:E2:32:E9:FD:7D:71:CF:32:07:DF:9D:A6:96:06:32:D0:45
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:0a:6d:ac:b9:3e:19:ee:38:8f:00:14:7a:e2:29:5b:b1:48:
03:ac:00:0a:8f:1a:93:fe:11:d3:d1:13:a9:9f:91:76:06:dd:
26:3c:84:05:51:9c:d8:31:3c:e0:65:88:0b:01:67:20:cb:38:
16:a8:7e:b9:0a:59:46:f4:23:36:b8:6f:74:3a:2e:52:06:59:
d0:a0:51:54:76:ac:d2:4b:3d:cb:e3:6d:3b:9d:44:b5:e1:ee:
e5:6f:ac:5c:80:fb:71:cf:de:1f:83:41:26:50:6c:df:6f:86:
4b:d2:b6:45:58:47:8e:28:c5:8f:7f:50:29:bc:2d:5a:83:92:
db:ad:ac:04:8f:b7:fc:00:c2:a1:9c:4e:53:c1:34:2b:f7:6e:
3e:f5:1a:a2:58:9e:1e:2d:c7:5f:8c:cd:08:ac:11:cc:14:ee:
96:36:4e:9d:53:f2:55:2f:a7:49:73:53:83:74:61:e1:cc:ca:
2b:bb:e8:d8:21:53:08:9c:0f:48:fe:8e:b6:82:74:38:b2:a3:
a6:64:28:35:88:e2:25:36:88:c4:d9:65:ec:2b:34:1d:f9:90:
9e:01:41:31:b6:2a:ae:f6:2d:54:96:69:72:01:28:94:0d:42:
32:3c:7f:08:9a:94:c1:9a:f0:59:e7:e2:ba:96:65:63:ca:6a:
8e:8e:23:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:53:32 2026 by rpki-client