Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
File: sHATRrrVXff13IGLu7z7t9sQcKs.mft (raw, json)
Hash identifier: fN1RGuSr/y9zuCOdJg4o7bxwgit3ThIL6bz0SblEgbU=
Subject key identifier: 96:2A:22:96:E6:98:4F:70:43:BA:3C:81:EF:CC:DC:74:24:CC:89:D2
Authority key identifier: B0:70:13:46:BA:D5:5D:F7:F5:DC:81:8B:BB:BC:FB:B7:DB:10:70:AB
Certificate issuer: /CN=b0701346bad55df7f5dc818bbbbcfbb7db1070ab
Certificate serial: 019DCE62920F7B4A8C880BCE687276C3FA2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
Manifest number: 0AB4
Signing time: Mon 27 Apr 2026 10:00:59 +0000
Manifest this update: Mon 27 Apr 2026 10:00:59 +0000
Manifest next update: Tue 28 Apr 2026 10:00:59 +0000
Files and hashes: 1: WnIgFqDUtt5MOFYPPxGh5mG_FSA.roa (hash: x54UNNX5k2mt5behlKnqsueUS0vpAx/Jev9aIjgXAdg=)
2: sHATRrrVXff13IGLu7z7t9sQcKs.crl (hash: DMzDcn4B/46ZI58xdWLAOVX3uyS/uvcNbJHqM+VV3mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:92:0f:7b:4a:8c:88:0b:ce:68:72:76:c3:fa:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0701346bad55df7f5dc818bbbbcfbb7db1070ab
Validity
Not Before: Apr 27 10:00:59 2026 GMT
Not After : Apr 28 10:00:59 2026 GMT
Subject: CN=962a2296e6984f7043ba3c81efccdc7424cc89d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:12:50:28:96:df:7f:96:32:2c:84:bd:7a:22:
1e:8b:c4:fd:6b:2c:01:4b:b9:0c:e8:d9:11:33:61:
33:07:22:9f:c7:a1:07:49:f7:b0:8d:ca:f0:63:0e:
1b:e8:0b:44:b3:e6:e5:6d:da:5d:65:8f:bd:a7:d0:
71:e7:17:40:b7:a6:39:3c:26:2b:da:45:3d:6b:4e:
2d:54:46:e2:7b:3e:c4:49:64:86:c9:81:75:f6:7f:
b8:ed:04:db:2b:11:ab:d4:25:82:0a:9e:c1:d6:0c:
73:38:4e:6a:30:fe:0a:52:be:25:dd:07:c4:f4:01:
15:53:c5:b7:d8:2c:34:f4:3c:90:2d:7d:bf:63:5f:
ab:b9:4f:33:de:61:ee:a1:65:7b:3d:84:11:4f:54:
a8:eb:e6:e2:b2:7f:1c:c6:36:8c:d4:29:7a:c1:b4:
6e:8e:98:69:42:72:3e:98:ed:97:3b:1a:de:6c:f4:
ca:28:91:58:00:d9:8d:75:81:d0:ac:8d:21:1d:c5:
20:6d:4f:ce:a2:93:1c:15:98:a9:b0:a1:4e:6b:f0:
26:1e:a4:ad:41:a8:1e:87:99:02:f1:42:66:79:72:
f6:10:fc:c9:73:e8:10:2a:16:26:78:f2:bb:ee:47:
f4:f9:7f:5e:a5:85:8e:6c:c5:cd:ca:24:10:6f:ea:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2A:22:96:E6:98:4F:70:43:BA:3C:81:EF:CC:DC:74:24:CC:89:D2
X509v3 Authority Key Identifier:
keyid:B0:70:13:46:BA:D5:5D:F7:F5:DC:81:8B:BB:BC:FB:B7:DB:10:70:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:74:e3:96:e2:51:d7:bc:e5:c7:4c:ef:13:fa:06:f8:01:b6:
c8:5f:40:23:a9:c4:91:f3:54:28:58:07:45:e7:c1:8f:27:af:
57:15:40:eb:72:16:b2:3c:35:9b:7e:35:14:1e:4d:9f:f4:4a:
a8:ae:fc:a0:57:3b:7f:39:74:82:ff:5a:8b:ab:7a:92:12:f6:
6a:56:a9:51:48:c9:55:81:69:45:62:ff:dc:00:9f:41:b1:77:
c2:6a:59:6b:5d:f7:c5:9c:f5:35:cf:56:f9:3b:f6:77:80:f2:
62:9d:01:d4:7d:80:2e:be:73:38:b1:72:ed:56:d9:90:03:1d:
a4:05:4b:7a:81:a8:0a:b4:86:5b:3a:72:7b:59:81:1b:36:fb:
96:e9:f2:a6:ed:ac:fd:a4:d1:1a:2e:6f:1e:3b:37:24:8f:fe:
e8:b7:d5:d9:cb:ae:1c:ba:86:4e:21:62:a7:bd:6d:26:94:97:
24:ec:2a:81:85:a0:03:5c:0a:e3:80:77:8a:da:11:ac:ac:fc:
eb:93:1f:f6:e1:3b:3c:46:04:6f:36:a6:d4:aa:c3:84:d5:2e:
7d:15:c1:52:25:df:eb:6c:1c:44:e6:4a:6b:91:08:ec:ef:8d:
4c:94:4b:2b:c2:59:23:56:62:f7:30:b9:40:89:f4:73:af:16:
db:21:9f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:31:37 2026 by rpki-client