Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
File: hAKSSGHLwIjGVahyU1qQMQige_E.mft (raw, json)
Hash identifier: roB0o72ai2Ui96mCCyrGoo8UQeUFESpXBLLRnOqYgfs=
Subject key identifier: FC:98:3C:EF:13:69:A8:D9:A1:CC:F2:D0:FE:43:0D:EE:03:AB:CB:3B
Authority key identifier: 84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1
Certificate issuer: /CN=8402924861cbc088c655a872535a903108a07bf1
Certificate serial: 019DA78BEDF0AB22C048EF77BA055D34B606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
Manifest number: 1502
Signing time: Sun 19 Apr 2026 21:00:58 +0000
Manifest this update: Sun 19 Apr 2026 21:00:58 +0000
Manifest next update: Mon 20 Apr 2026 21:00:58 +0000
Files and hashes: 1: EApMV8-N-zmao3CAo-NQpD3Lz2A.roa (hash: aR54mqSnxFgOPc79I9yN0jBUTDGkCFj+YEV/eOtu4c4=)
2: hAKSSGHLwIjGVahyU1qQMQige_E.crl (hash: FnIudB1ml6Q2koVLsx6DThLxAkViqQEbgIqtVTwfqZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:8b:ed:f0:ab:22:c0:48:ef:77:ba:05:5d:34:b6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8402924861cbc088c655a872535a903108a07bf1
Validity
Not Before: Apr 19 21:00:58 2026 GMT
Not After : Apr 20 21:00:58 2026 GMT
Subject: CN=fc983cef1369a8d9a1ccf2d0fe430dee03abcb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6d:51:7a:c5:f0:b4:43:3a:bf:06:87:cd:77:
36:eb:59:e6:e9:2a:8f:7a:33:d5:e2:6f:79:38:cf:
ea:0d:b2:e0:42:a2:78:13:ee:b1:8b:2f:d8:17:9d:
a2:4a:65:7b:33:af:1e:90:75:33:af:45:76:4e:ff:
69:56:19:14:b3:89:ad:b1:35:e6:61:72:4e:42:2e:
59:b1:ca:28:53:b5:d0:4f:3b:a7:d1:b8:b7:06:57:
05:14:29:aa:eb:ed:14:39:22:a3:a3:f6:a1:b4:3e:
11:a1:6f:d6:ae:7c:03:83:5a:66:a5:68:08:52:d1:
e2:6b:ed:58:60:7e:e6:16:f4:21:e8:e2:37:18:c3:
85:63:ab:b3:26:bd:be:44:dc:13:02:fd:98:db:99:
8b:c5:d0:34:99:35:f4:09:d5:ea:93:2e:34:50:b0:
a4:d5:23:77:ff:30:df:59:5b:b9:43:cb:28:3e:97:
91:6b:82:8b:0b:ad:07:0a:a0:72:c5:5a:53:5b:15:
52:f3:59:d1:7c:80:c7:c4:29:79:a5:57:f0:b4:16:
f5:74:97:4f:0b:e7:61:c5:bf:d9:59:b8:66:25:be:
e9:d4:af:a0:0c:41:aa:0a:b1:43:5d:d9:a0:ee:3a:
14:8d:c5:36:fa:ed:d8:95:8a:00:5f:6b:0f:f2:e4:
49:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:98:3C:EF:13:69:A8:D9:A1:CC:F2:D0:FE:43:0D:EE:03:AB:CB:3B
X509v3 Authority Key Identifier:
keyid:84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c7:bb:20:63:52:5f:c7:75:48:a7:5e:54:bf:29:60:e6:82:
d9:42:10:d3:c4:ad:30:25:df:35:6c:5c:e3:35:a0:3a:28:47:
bf:30:01:00:1e:07:a5:53:6e:19:62:53:2b:1b:b7:63:41:f5:
24:38:35:3f:78:4a:48:4b:96:e8:83:e4:33:81:af:41:67:01:
6c:6a:97:05:d8:8f:75:70:41:84:e2:3b:f9:6b:d8:bf:d4:e2:
eb:3b:94:16:03:48:62:af:ec:2f:3f:05:fa:e5:ee:d1:f1:c0:
cf:ce:9f:92:b2:6f:3a:7e:f6:ce:ca:fa:72:b3:5f:b0:df:ef:
69:28:e9:b0:19:ff:c0:55:9c:12:6b:ca:cb:d3:c7:0f:d0:38:
f5:ad:92:38:91:9f:e6:85:55:e4:99:12:e7:3e:c5:c6:7f:02:
55:50:3a:64:e1:28:55:bc:6e:0e:68:73:e8:0a:c0:0f:96:2b:
39:04:65:d0:da:8b:97:46:eb:92:ad:d8:b8:46:e5:7c:bf:52:
35:f2:e3:43:fe:2c:a4:0a:08:a1:1c:b5:34:f8:92:9f:72:82:
4c:94:82:63:b8:29:50:dc:d2:53:03:40:23:4e:58:49:2f:8a:
97:e8:ee:b5:6f:59:dd:63:36:a3:fb:b3:eb:80:3d:a7:73:5f:
bb:5b:12:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:52:12 2026 by rpki-client