Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
File: HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft (raw, json)
Hash identifier: fZdRMqzyflvgezipOogOxokMzNYTskEEhZCgaFn+Xlc=
Subject key identifier: 5A:0D:C9:52:EE:DC:A8:9E:6F:D2:83:04:3C:5F:FD:38:1C:E3:64:9D
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 019DB16ACCFFF9DDD340379F8227BB2D7FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
Manifest number: 1860
Signing time: Tue 21 Apr 2026 19:00:59 +0000
Manifest this update: Tue 21 Apr 2026 19:00:59 +0000
Manifest next update: Wed 22 Apr 2026 19:00:59 +0000
Files and hashes: 1: EUQPSRByg2QMDNqMMHo2oQZNlbY.roa (hash: H+d5ds358KBr4HrcZ0lWa3uis3q9gOlPohiMxXosS7w=)
2: HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl (hash: pRVpO7TkVgXEFnuVV4ypRm40mpbLa77RFKGU6u6HROk=)
3: zj0oGLpPGtWJ6IpHxLEQfH2DpKo.roa (hash: ctimHgQjwKly2d3TDS9AzpF0v6QUFIibm4H4p93sG5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:6a:cc:ff:f9:dd:d3:40:37:9f:82:27:bb:2d:7f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Apr 21 19:00:59 2026 GMT
Not After : Apr 22 19:00:59 2026 GMT
Subject: CN=5a0dc952eedca89e6fd283043c5ffd381ce3649d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d9:ab:ec:94:3d:35:9c:66:8f:d0:c1:c6:61:
c5:75:ad:14:3c:bb:a4:2d:c9:ec:26:e3:55:77:d1:
29:7c:00:f4:d9:0b:e4:95:6f:a2:57:bb:34:c4:13:
49:a9:0d:ce:eb:b3:9c:28:fa:a8:f6:f8:2f:ef:5c:
da:e2:fb:f4:01:a4:76:d3:78:4c:f6:dd:20:6b:48:
da:a9:44:fe:b8:63:37:01:db:89:8d:2d:92:3b:9b:
79:f9:57:b4:f2:a2:b2:7c:8a:73:61:a0:b1:a7:a4:
90:5a:fe:38:85:de:38:d2:28:fa:91:ce:30:8f:3a:
ee:7f:d7:d9:25:38:32:09:a8:8d:45:ca:1f:88:d8:
d4:65:c6:7a:33:ab:06:27:fb:f9:79:3f:b3:b8:5e:
c6:8d:f8:3a:ce:04:00:8a:b4:cb:09:64:14:7f:fc:
56:b6:bc:e5:cc:b1:e6:76:d0:13:7d:23:99:43:62:
22:a1:e3:a2:99:3e:99:07:83:5d:ae:df:29:a0:ad:
62:ad:b4:72:d0:9a:0d:54:5b:f1:73:0a:b2:cc:c9:
ca:b0:f2:b3:e0:b2:7a:8a:23:59:5c:b0:f7:9c:94:
df:4b:fa:d1:3c:e6:bb:9e:d5:ab:f9:b2:6c:47:76:
5b:fa:0b:b1:a2:2c:8e:b7:03:03:a0:bc:20:ec:5a:
8e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0D:C9:52:EE:DC:A8:9E:6F:D2:83:04:3C:5F:FD:38:1C:E3:64:9D
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:12:da:a2:d1:e6:96:5e:01:e0:7a:c2:e8:f5:8e:a3:1f:aa:
66:44:ad:d1:b0:99:25:9c:e3:02:d9:dc:8e:74:0e:65:84:c3:
7f:9d:b0:f2:6d:3f:93:77:e4:a9:00:80:dd:06:93:3f:4b:42:
60:e6:c1:f5:a9:5b:d9:57:1a:13:8b:00:9a:82:4c:78:44:f5:
ec:de:b9:23:05:2e:82:31:f9:33:46:18:0f:3e:fa:07:03:17:
06:6e:53:84:9f:97:79:cd:8d:c6:25:af:32:91:64:b5:55:60:
89:26:a0:be:f4:a2:06:80:b0:3d:4f:97:3a:9e:3b:d0:a6:88:
04:b9:68:90:90:b5:2d:75:be:79:8a:20:61:c0:3f:44:e8:87:
6c:27:57:47:66:ae:26:03:12:b0:0e:18:0f:c0:0a:79:35:0c:
6b:0b:ca:12:89:8d:06:24:da:e3:00:5f:3c:51:2d:e2:a1:b8:
db:99:87:f2:fb:20:12:e1:d1:98:b1:7e:9e:4f:d2:a3:33:fc:
5e:84:b7:2e:80:43:59:6f:cb:19:1c:b0:9b:37:47:c3:fc:27:
58:a6:9d:78:e1:15:04:69:60:c2:32:dd:f5:12:39:25:bc:fd:
03:1b:57:19:95:22:c8:b0:44:54:2c:39:1d:13:7d:28:c2:c1:
8f:f8:eb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:41:52 2026 by rpki-client