Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
File: R01HT5RpSoEE9eQTqyucCVWbefA.mft (raw, json)
Hash identifier: T/5tgC+xUDsmalFO6P66ky+jdzj4EHQL45LheM44wTo=
Subject key identifier: 7D:F5:13:EF:05:6D:B0:78:10:8F:B5:77:E2:EC:F7:10:1F:04:53:54
Authority key identifier: 47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
Certificate issuer: /CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Certificate serial: 019DCF74FE553838E43089C0CE528CCEC2D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
Manifest number: 0500
Signing time: Mon 27 Apr 2026 15:00:44 +0000
Manifest this update: Mon 27 Apr 2026 15:00:44 +0000
Manifest next update: Tue 28 Apr 2026 15:00:44 +0000
Files and hashes: 1: R01HT5RpSoEE9eQTqyucCVWbefA.crl (hash: OBYxaoVznUHVPeW45K7wzczA/+o30mWCvpg7NJ8RxFY=)
2: SBUsospASb3EsMhP62NmTHT6SVw.roa (hash: 0+KXBZnA9I41d7SaRHS/S7In8wI7A6juxPzuhg0b63k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:74:fe:55:38:38:e4:30:89:c0:ce:52:8c:ce:c2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Validity
Not Before: Apr 27 15:00:44 2026 GMT
Not After : Apr 28 15:00:44 2026 GMT
Subject: CN=7df513ef056db078108fb577e2ecf7101f045354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ec:7c:ae:41:0a:a5:86:d0:b7:ae:86:b6:5d:
56:8a:71:3c:33:65:c9:f4:37:4f:5e:84:d7:67:0f:
fc:24:61:9d:f0:81:f0:74:0f:9e:a3:e9:25:4d:b4:
3e:06:c0:8b:c2:00:2c:d1:d8:7b:d6:8d:29:9e:43:
f3:03:89:ee:5a:fb:0b:08:06:36:7f:45:4a:f7:cb:
de:53:15:c0:49:b4:a0:1a:57:87:7d:12:14:e8:22:
65:8e:39:f3:b2:b7:6b:86:21:20:61:b4:fe:af:05:
8f:81:c6:80:b8:af:2c:ea:dc:8c:21:10:cc:8a:f1:
f5:0d:4e:0e:1c:da:c3:c6:e4:f5:c8:65:aa:1e:0e:
c0:88:f8:6f:fd:4d:86:a8:ad:6d:82:23:7e:44:4f:
b4:df:37:50:23:a6:d3:cf:dc:de:db:72:e6:d2:fb:
99:b0:bd:40:0d:17:d8:22:1b:25:69:85:ed:b3:bc:
a9:ba:66:50:6c:f2:db:da:71:4b:e3:85:b4:a1:ea:
d6:2a:b7:bf:b3:00:9f:56:7c:be:2c:68:3d:ae:5e:
66:85:85:1f:04:b5:1f:ce:02:73:c0:c6:c0:a7:24:
bb:65:4f:35:54:fd:4e:f5:2f:cb:4a:7d:c1:87:a9:
e2:36:d7:ea:14:02:ba:76:4d:70:e6:c1:00:4e:75:
fb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F5:13:EF:05:6D:B0:78:10:8F:B5:77:E2:EC:F7:10:1F:04:53:54
X509v3 Authority Key Identifier:
keyid:47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:cd:c3:71:db:e6:52:95:8e:f1:1a:e5:d7:c1:70:3e:0b:c0:
69:94:b0:02:2c:92:53:f7:12:5e:35:48:6c:d6:4b:a6:84:d0:
4a:37:f3:df:0c:22:df:4b:c6:5c:bc:1f:b1:fd:f8:fb:d3:8d:
fa:42:f6:7e:f9:42:ea:51:cd:3c:8d:8e:83:63:12:1d:0e:b2:
6b:d4:c6:36:be:55:c2:ba:40:06:14:97:a3:23:19:d1:c6:74:
92:1f:a3:53:f8:77:ca:b9:c9:f6:5d:a7:ac:9e:9d:ab:90:8a:
59:31:49:92:ad:3a:5c:6f:fe:a7:56:df:b2:f0:46:98:8d:6c:
fd:a3:96:a5:34:8d:fa:8a:87:90:3a:e3:fa:0a:db:5f:f0:33:
84:5e:e7:20:95:e3:7c:9c:46:ab:5c:36:98:31:da:a5:4a:0a:
f7:a6:09:e0:81:c0:5c:30:87:3e:bd:d1:5a:02:f1:38:8f:64:
1b:33:3a:42:17:92:8a:f4:42:5a:ad:b3:20:34:e9:c4:0c:eb:
ac:bb:3f:1e:fe:05:53:b5:e2:2f:f8:7e:f1:6d:42:2c:50:ed:
ac:74:3e:9a:55:c0:9d:09:6d:f6:17:41:5c:32:e0:31:8c:f6:
2c:ae:b3:c4:37:fb:f4:1c:3f:ea:81:18:b6:b7:56:b3:83:a1:
7f:d5:75:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:17:20 2026 by rpki-client