Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
File: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft (raw, json)
Hash identifier: FZZwHYoSe0iA/FLpsQl3fc4lGtldMx14dBOwMeZy9us=
Subject key identifier: C0:E1:78:B5:F8:6E:BE:16:7B:6F:37:75:1E:45:BB:38:E5:10:BB:77
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial: 019DDCC3278DE5CCC8F31BBC09DEB511CAD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
Manifest number: 18E5
Signing time: Thu 30 Apr 2026 05:01:10 +0000
Manifest this update: Thu 30 Apr 2026 05:01:10 +0000
Manifest next update: Fri 01 May 2026 05:01:10 +0000
Files and hashes: 1: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl (hash: VevWCBHKUoRLGkYs8gf2NkLUZ+iE+PTZ3B7Pk581Zxg=)
2: lFgdap73IKN-x6XHvGiMEA7qWxg.roa (hash: Cy3+NfE+G8o591s23SgJa1A+OW1ox1rr66Hm02Ee6OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:c3:27:8d:e5:cc:c8:f3:1b:bc:09:de:b5:11:ca:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Validity
Not Before: Apr 30 05:01:10 2026 GMT
Not After : May 1 05:01:10 2026 GMT
Subject: CN=c0e178b5f86ebe167b6f37751e45bb38e510bb77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:9d:98:8a:25:8e:a9:0a:51:06:e5:c9:b5:
18:eb:6a:c8:8a:3a:7f:f0:20:4a:23:72:93:bc:b3:
26:99:31:05:9f:91:c4:25:60:a6:d7:bb:aa:4e:0d:
96:1b:a8:c6:0f:f4:bd:19:8a:d7:5f:1c:49:3f:61:
af:a1:44:a3:a3:e8:e5:37:b2:de:f5:52:62:68:b3:
bf:06:4f:58:72:dd:03:45:0a:79:70:79:18:6c:9c:
38:47:70:a6:90:13:0e:2a:f9:fa:e6:20:86:7c:aa:
19:e8:66:22:4c:7f:0f:01:60:21:d6:84:d8:3f:93:
f8:cb:2d:c4:89:88:b6:5d:20:24:fb:5c:da:69:ea:
f2:6d:bc:1c:c9:88:8b:a2:1b:d5:bf:4c:fd:45:ea:
a0:89:c6:e2:fc:76:ad:11:f8:16:3b:66:41:92:08:
0c:9a:13:76:15:6f:cf:9b:d4:21:68:a3:0d:95:62:
30:92:ae:d0:51:ca:2e:e0:c4:eb:bd:2c:49:7e:d9:
0d:e0:62:b2:70:a9:06:96:6f:3d:c3:8c:26:82:62:
3b:32:67:9a:11:65:dd:2b:08:be:91:34:f1:70:9e:
08:df:b9:03:61:3c:88:2b:76:79:12:13:ec:f2:7b:
13:d0:f2:72:73:14:4d:bc:a1:7a:bf:b0:9c:01:18:
69:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E1:78:B5:F8:6E:BE:16:7B:6F:37:75:1E:45:BB:38:E5:10:BB:77
X509v3 Authority Key Identifier:
keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:37:42:4b:40:a1:9c:30:0a:de:52:b1:02:ed:7b:4a:f6:fa:
60:d4:3a:33:3f:09:33:df:c6:d0:e2:74:ee:00:f8:a4:72:86:
09:6b:58:71:27:16:53:a7:a4:8b:ee:24:49:e7:ad:6d:1c:01:
02:8a:34:c9:af:28:4e:43:7a:49:76:0f:7c:d4:c2:90:07:38:
98:17:35:bb:51:5d:96:c6:36:79:03:ef:1c:ca:57:2a:f7:7e:
8c:00:f6:ed:2c:91:56:55:35:84:b9:2f:8c:4b:fd:06:26:00:
ee:a1:b0:71:3a:5b:6a:dd:e7:cd:2e:0c:45:78:93:d9:b5:4f:
ec:30:89:38:5d:cc:b5:05:3b:99:fa:87:21:d3:13:62:03:e4:
4c:fd:47:4a:bb:1b:29:bc:9e:13:45:26:d2:74:3a:1c:13:93:
da:e1:a2:00:ea:50:b4:77:88:37:fe:41:1f:0d:2b:7b:f1:3d:
09:0d:e1:3a:be:cb:9d:ac:90:75:f3:ad:3b:d1:c8:5b:f6:7b:
93:17:ee:36:be:ae:e8:90:93:7b:9e:1c:8b:b4:74:99:da:f1:
15:f9:92:22:3f:56:9e:31:eb:4b:a3:22:ce:9d:ce:53:72:1e:
9e:06:87:d3:cc:ae:be:3e:0b:09:2e:27:4f:52:9d:f1:c6:b5:
35:7b:fe:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:47:41 2026 by rpki-client