Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
File: hJ463_A6q2LV2yI6w7NeKpuqTqM.mft (raw, json)
Hash identifier: 1jHOMB/esfjQXesZTfhKyAZJpTI4DB+bPG3fHC5Oeg8=
Subject key identifier: C4:C2:FE:11:01:4D:C5:77:75:A9:D9:E3:E2:32:7B:D4:01:EA:51:5D
Authority key identifier: 84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3
Certificate issuer: /CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
Certificate serial: 019DDDD5D6919A0A2406AF8F348551508B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
Manifest number: 18E6
Signing time: Thu 30 Apr 2026 10:01:11 +0000
Manifest this update: Thu 30 Apr 2026 10:01:11 +0000
Manifest next update: Fri 01 May 2026 10:01:11 +0000
Files and hashes: 1: hJ463_A6q2LV2yI6w7NeKpuqTqM.crl (hash: DlkgRiwWsLFaewbErN9DsP+MCjC9LHn2P8GnvxbkPKs=)
2: lGyQDQVBEMCDFsipbxjBTxxJg7Y.roa (hash: /B4wk8kwo/lxwB8Izsd2oZk4yH80dIbNot8H0bXk6bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:d5:d6:91:9a:0a:24:06:af:8f:34:85:51:50:8b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
Validity
Not Before: Apr 30 10:01:11 2026 GMT
Not After : May 1 10:01:11 2026 GMT
Subject: CN=c4c2fe11014dc57775a9d9e3e2327bd401ea515d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fa:b6:15:e4:7d:ca:fe:39:ea:72:7f:c4:83:
41:8a:c6:70:82:06:68:6e:e6:ef:db:be:5c:b1:88:
cb:20:57:bb:79:56:2e:8f:e9:57:a3:39:e4:27:cf:
d7:df:1f:c7:43:6a:4b:27:3c:c6:bb:a7:5f:fa:b6:
66:84:fa:57:42:43:a3:33:6e:d4:0e:80:50:87:dd:
55:e0:1f:3c:b6:47:b4:75:5b:a7:7e:7b:23:09:28:
53:6a:a9:37:04:13:e2:59:f4:46:d7:1f:4b:63:a2:
b8:26:d8:f4:b5:ee:a1:62:0a:3e:88:77:b0:d8:70:
8a:77:ee:79:e3:fb:00:6d:cd:86:8f:21:19:8e:df:
94:49:70:02:b2:b2:16:fd:f7:f0:59:79:32:8a:3b:
ba:b1:8c:61:8c:47:c7:f1:23:2e:6f:d5:ab:9c:1b:
a9:e0:a3:85:1a:26:35:55:ac:de:2b:b9:2b:31:62:
5d:e8:9e:26:c4:47:cf:01:85:89:92:6b:c5:e9:a0:
9e:38:2c:4b:ce:7d:48:84:a3:fc:88:63:28:5a:48:
c4:ee:69:a4:e9:dd:67:a7:06:90:61:90:35:93:25:
3b:88:38:47:f2:3c:75:9f:3f:4b:1f:c1:0b:cc:b9:
30:d0:18:38:c6:94:00:1c:77:ff:2d:8b:a2:84:62:
d6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C2:FE:11:01:4D:C5:77:75:A9:D9:E3:E2:32:7B:D4:01:EA:51:5D
X509v3 Authority Key Identifier:
keyid:84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2f:c4:1b:aa:a8:43:12:ba:1c:62:c8:ea:28:5d:60:90:d5:
31:d4:5d:8b:4a:0a:58:b4:47:5e:9d:f2:3a:9c:72:0b:47:65:
97:64:4c:01:8c:5a:86:a8:e1:d8:e1:5f:4c:61:c8:e7:b6:51:
4c:09:e7:73:68:1d:63:33:66:92:db:d1:e4:f1:6a:93:9a:68:
54:e8:cf:21:12:74:14:d5:8f:9a:6c:73:d1:e6:dd:09:95:91:
32:d2:32:01:e7:df:a3:6d:e1:bc:de:78:03:e2:7e:45:b0:cc:
5d:d4:3b:28:23:30:ef:2a:7e:98:a1:ea:47:41:f5:9c:22:c7:
7d:47:fc:79:10:d2:5a:08:34:39:a0:93:f3:92:13:53:07:92:
9c:3a:75:11:87:18:e1:ed:9a:ad:4b:41:99:1f:f3:cc:44:ff:
c3:ad:67:0a:d4:66:f3:b7:c3:fb:42:0d:cf:4d:16:7d:d8:da:
d6:c2:51:fe:31:6a:75:9b:a4:2f:b4:0c:80:cb:e2:3e:23:2a:
56:a8:89:64:81:f7:95:80:fd:af:2c:28:ae:98:d5:38:20:3e:
43:c0:4e:2a:c9:1b:cb:fd:54:fc:a8:78:af:c6:2a:61:21:51:
66:94:81:6d:c8:30:49:c2:a6:b0:57:9d:ef:e7:61:c5:cd:78:
98:f8:f5:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3d1daRmgokBq+PNIVRUIt9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0OWUzYWRmZjAzYWFiNjJkNWRiMjIzYWMzYjM1ZTJhOWJh
YTRlYTMwHhcNMjYwNDMwMTAwMTExWhcNMjYwNTAxMTAwMTExWjAzMTEwLwYDVQQD
EyhjNGMyZmUxMTAxNGRjNTc3NzVhOWQ5ZTNlMjMyN2JkNDAxZWE1MTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPq2FeR9yv456nJ/xINBisZwggZo
bubv275csYjLIFe7eVYuj+lXoznkJ8/X3x/HQ2pLJzzGu6df+rZmhPpXQkOjM27U
DoBQh91V4B88tke0dVunfnsjCShTaqk3BBPiWfRG1x9LY6K4Jtj0te6hYgo+iHew
2HCKd+554/sAbc2GjyEZjt+USXACsrIW/ffwWXkyiju6sYxhjEfH8SMub9WrnBup
4KOFGiY1VazeK7krMWJd6J4mxEfPAYWJkmvF6aCeOCxLzn1IhKP8iGMoWkjE7mmk
6d1npwaQYZA1kyU7iDhH8jx1nz9LH8ELzLkw0Bg4xpQAHHf/LYuihGLWPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTC/hEBTcV3danZ4+Iye9QB6lFdMB8GA1UdIwQY
MBaAFISeOt/wOqti1dsiOsOzXiqbqk6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEo0NjNfQTZxMkxWMnlJNnc3TmVLcHVxVHFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8xYzFhNDktNDI4NS00OGJlLWExMGUt
ZWQxNjAwZjg3MmJiLzEvaEo0NjNfQTZxMkxWMnlJNnc3TmVLcHVxVHFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8xYzFhNDktNDI4NS00OGJlLWExMGUtZWQxNjAwZjg3MmJi
LzEvaEo0NjNfQTZxMkxWMnlJNnc3TmVLcHVxVHFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHC/EG6qo
QxK6HGLI6ihdYJDVMdRdi0oKWLRHXp3yOpxyC0dll2RMAYxahqjh2OFfTGHI57ZR
TAnnc2gdYzNmktvR5PFqk5poVOjPIRJ0FNWPmmxz0ebdCZWRMtIyAeffo23hvN54
A+J+RbDMXdQ7KCMw7yp+mKHqR0H1nCLHfUf8eRDSWgg0OaCT85ITUweSnDp1EYcY
4e2arUtBmR/zzET/w61nCtRm87fD+0INz00Wfdja1sJR/jFqdZukL7QMgMviPiMq
VqiJZIH3lYD9ryworpjVOCA+Q8BOKskby/1U/Kh4r8YqYSFRZpSBbcgwScKmsFed
7+dhxc14mPj1Mw==
-----END CERTIFICATE-----
Generated at Thu Apr 30 16:43:15 2026 by rpki-client