Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
File: hGbpF0La0bn0x5ayOzfres2FgWE.mft (raw, json)
Hash identifier: r+1OBrA4nfOdNLlLzAAf1GtUK63EK9yEXoN33oI0CJM=
Subject key identifier: 31:48:F2:CD:72:F5:46:DB:0C:C4:F1:98:50:07:B3:9C:3A:0A:4B:29
Authority key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
Certificate issuer: /CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Certificate serial: 019DCDF51862AF9F38AD43512708D62B15FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
Manifest number: 137E
Signing time: Mon 27 Apr 2026 08:01:24 +0000
Manifest this update: Mon 27 Apr 2026 08:01:24 +0000
Manifest next update: Tue 28 Apr 2026 08:01:24 +0000
Files and hashes: 1: V6Mvsnc7Z774Ev5q6h6Mb-ytj-8.roa (hash: /GNFnTbzQDf+YRxBgnXt7mG8KTDdxxNld8mJ/4Y6skk=)
2: hGbpF0La0bn0x5ayOzfres2FgWE.crl (hash: HXrECSeoXJR+qQFRrd1XTlN8Gyuga99/GkCwUgg3i4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f5:18:62:af:9f:38:ad:43:51:27:08:d6:2b:15:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Validity
Not Before: Apr 27 08:01:24 2026 GMT
Not After : Apr 28 08:01:24 2026 GMT
Subject: CN=3148f2cd72f546db0cc4f1985007b39c3a0a4b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:4b:98:bf:ac:31:d2:b1:03:8d:0b:fe:11:
8f:23:1d:cf:60:a6:8f:7d:67:4e:b2:f1:0e:cb:04:
a0:0e:87:14:89:99:0f:97:82:5a:56:71:ef:36:55:
ed:ac:c7:4e:6c:82:b6:30:4b:eb:8d:57:92:aa:b0:
90:e4:45:be:8f:9a:47:92:58:1a:76:b0:0b:5a:37:
1d:e2:94:48:62:77:08:15:4d:96:bf:73:8b:0b:0f:
21:86:b3:00:b8:c4:90:c8:7a:fa:74:04:0d:8c:17:
12:6b:f4:9e:a5:9d:77:1e:11:77:b5:fa:5f:60:88:
a0:17:05:2e:11:59:23:bc:6a:f5:13:0a:ee:fd:f4:
5e:74:b3:f6:74:f8:2e:78:68:cd:8c:1d:b2:83:e3:
e7:7b:48:0f:07:f4:4d:71:0c:f6:ea:d9:dd:f3:25:
01:24:89:de:e1:04:ed:ff:b9:de:29:2b:c5:d3:8e:
d9:a6:03:bd:6c:06:af:d5:db:74:97:a4:b9:3c:b3:
13:17:7c:a6:24:42:55:2e:ed:42:c8:27:4a:2f:47:
59:13:0a:28:3d:e9:43:bc:fa:b4:21:48:51:7c:9f:
08:6f:64:8f:6b:6d:8c:8e:56:9a:31:2e:b3:59:b9:
de:0a:e1:e0:03:3a:54:a6:3c:39:8a:6d:aa:4f:ed:
cf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:48:F2:CD:72:F5:46:DB:0C:C4:F1:98:50:07:B3:9C:3A:0A:4B:29
X509v3 Authority Key Identifier:
keyid:84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:05:4e:b0:8e:0a:19:e0:2b:aa:91:cb:82:6e:7b:13:0c:84:
8f:c1:47:20:ea:a0:70:5a:c0:0e:c7:04:db:3d:dc:d3:52:50:
a1:53:8d:7a:77:a6:f8:96:5f:e9:4c:b6:df:0b:da:59:9d:ea:
a1:81:58:6e:13:44:05:b9:24:cb:95:21:cd:55:b5:b4:c2:b4:
39:33:79:e8:9a:fb:dd:dc:27:65:5f:cd:71:ba:ed:cd:2f:e0:
87:1a:17:0c:26:b0:9a:8e:ff:cb:85:74:dd:b9:32:e9:c1:21:
5a:a4:51:82:dd:7d:75:11:80:e4:b3:89:59:7a:1d:80:2b:dc:
78:aa:c2:d1:04:4b:7f:14:0c:6d:14:78:a1:b8:70:8a:77:a4:
5f:b3:66:b9:95:2a:32:9e:31:97:6d:c9:80:5e:a5:a8:f8:00:
ee:b4:f7:c3:7b:33:5f:9f:74:86:82:ed:06:a5:84:70:5b:40:
7a:4d:cf:6a:c8:ea:e3:0c:90:e2:c5:b6:0e:80:67:58:64:fa:
e4:6e:39:63:61:bc:d6:7f:8b:ba:e8:d7:8d:6e:e1:67:63:26:
b7:42:3d:2b:2f:82:c8:8e:32:3d:fc:38:eb:7b:9a:87:e0:92:
72:f8:8d:d8:f9:f4:5b:1a:9e:b6:8c:a6:0a:4b:82:09:c0:0c:
ad:86:61:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:12:24 2026 by rpki-client