Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json)
Hash identifier: GGu/BR+2lrHz84qMYDTOHbuwogZhMYdwMttxM3DfopM=
Subject key identifier: E6:27:11:DC:B1:D6:AD:27:C0:9A:C1:C1:A5:37:CE:FB:AB:E2:4F:EB
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial: 019DB16B701F8396A6E5E06C209E6755B4DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
Manifest number: 091D
Signing time: Tue 21 Apr 2026 19:01:41 +0000
Manifest this update: Tue 21 Apr 2026 19:01:41 +0000
Manifest next update: Wed 22 Apr 2026 19:01:41 +0000
Files and hashes: 1: 6Zls-m6M9cBINWFd4w7uZTmGtY8.roa (hash: G1IdsClkRwxJrpDcDQsqLk4FP+v4Gfd2cicmc4XSPyc=)
2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: Suk9uG7YtbQpBV2tpWYrAFtwZN4kYqFJiwXD4z4fM1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 19:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:6b:70:1f:83:96:a6:e5:e0:6c:20:9e:67:55:b4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
Validity
Not Before: Apr 21 19:01:41 2026 GMT
Not After : Apr 22 19:01:41 2026 GMT
Subject: CN=e62711dcb1d6ad27c09ac1c1a537cefbabe24feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:fa:af:51:ba:7a:a2:58:71:a6:c6:d6:e5:
92:fb:d0:7d:0f:0c:1c:1e:d0:da:e9:32:29:50:82:
a9:be:06:48:87:f8:5a:a9:78:b0:e6:be:f7:99:76:
cf:cc:d6:7c:b2:1d:7a:76:15:e2:cc:2e:4f:57:17:
03:ae:f6:e3:2f:53:63:7d:5d:cd:d0:1d:9d:1f:5c:
59:fc:18:d1:f5:fb:15:65:eb:23:99:bb:65:a3:2a:
6c:b5:9f:c1:82:90:08:46:4a:26:61:3b:e6:88:2b:
f6:24:ef:35:c7:62:07:dc:43:37:f0:47:b1:7b:f6:
f0:40:f1:1d:72:74:89:65:bf:1f:8b:37:20:41:71:
85:40:f0:27:9a:bb:79:ae:3e:19:a5:3c:8a:46:26:
14:43:0b:07:3e:8e:58:6d:72:b1:03:1e:cd:58:e8:
b1:f8:05:95:ae:20:07:1d:42:a3:fc:9d:a2:c8:6e:
54:dd:7e:57:c7:53:f7:3f:45:19:f3:24:98:cf:42:
13:c8:3d:26:87:79:61:ab:ed:fb:4f:53:de:90:22:
97:3c:42:26:08:5b:17:25:e0:2b:27:2b:c6:5e:df:
f2:72:8f:e9:f6:cb:7d:32:86:70:7d:c5:91:bf:21:
46:31:70:ce:47:46:c3:d9:72:bc:b7:77:2c:81:93:
02:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:27:11:DC:B1:D6:AD:27:C0:9A:C1:C1:A5:37:CE:FB:AB:E2:4F:EB
X509v3 Authority Key Identifier:
keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5c:06:24:77:a8:2c:6b:01:ba:b3:84:06:e0:dd:cd:a5:b3:
1b:33:85:ae:29:43:d2:de:c3:ad:aa:8d:5b:48:ed:2c:32:c3:
1c:2c:8e:cb:9b:70:d7:e3:2f:0f:59:a8:60:c9:b6:e6:5b:3b:
9e:3c:c5:ce:0b:8d:c2:2d:47:ba:7c:d0:be:e6:b6:2a:96:28:
93:0f:e3:33:47:ea:95:f0:d7:76:c0:27:6d:aa:7a:0b:86:98:
06:d6:79:69:53:3e:83:8b:96:19:f8:83:6a:b9:55:e2:80:c8:
13:9d:04:0b:18:69:e8:1b:89:ff:3f:1f:30:06:a3:1f:7a:f9:
72:ad:5d:a5:7e:d2:5f:0f:34:14:03:47:1a:06:6f:b0:19:b7:
ea:49:a2:5a:95:8c:60:20:92:22:ed:6b:b1:d4:0a:41:c6:74:
1f:2a:02:4b:0f:0a:e7:96:3a:c4:78:12:44:35:62:72:d1:bc:
d4:83:96:7c:2a:95:3e:1a:a3:0c:da:42:85:eb:60:08:47:f6:
e3:a4:58:a3:50:73:e9:95:1c:4d:e7:5b:22:79:09:62:2d:8c:
99:71:ea:6b:46:8b:c1:91:83:c8:d2:5b:70:2f:a1:7b:40:f7:
dc:81:7c:b9:ce:93:2e:a2:c3:5b:ca:37:82:c5:5b:6b:53:b2:
7e:ec:f4:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2xa3Afg5am5eBsIJ5nVbTbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OThjYmM0ZThkZmYxODUyNDA0YTk5Mjc1ZDIzMGE1NjEx
MTA1NWYwHhcNMjYwNDIxMTkwMTQxWhcNMjYwNDIyMTkwMTQxWjAzMTEwLwYDVQQD
EyhlNjI3MTFkY2IxZDZhZDI3YzA5YWMxYzFhNTM3Y2VmYmFiZTI0ZmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8D6r1G6eqJYcabG1uWS+9B9Dwwc
HtDa6TIpUIKpvgZIh/haqXiw5r73mXbPzNZ8sh16dhXizC5PVxcDrvbjL1NjfV3N
0B2dH1xZ/BjR9fsVZesjmbtloypstZ/BgpAIRkomYTvmiCv2JO81x2IH3EM38Eex
e/bwQPEdcnSJZb8fizcgQXGFQPAnmrt5rj4ZpTyKRiYUQwsHPo5YbXKxAx7NWOix
+AWVriAHHUKj/J2iyG5U3X5Xx1P3P0UZ8ySYz0ITyD0mh3lhq+37T1PekCKXPEIm
CFsXJeArJyvGXt/yco/p9st9MoZwfcWRvyFGMXDOR0bD2XK8t3csgZMCCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYnEdyx1q0nwJrBwaU3zvur4k/rMB8GA1UdIwQY
MBaAFIWYy8To3/GFJASpknXSMKVhEQVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wNDlhYjItOTIyNi00YjQwLWFiOGEt
NTFlNGE1ZWFmYzhlLzEvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8wNDlhYjItOTIyNi00YjQwLWFiOGEtNTFlNGE1ZWFmYzhl
LzEvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVwGJHeo
LGsBurOEBuDdzaWzGzOFrilD0t7DraqNW0jtLDLDHCyOy5tw1+MvD1moYMm25ls7
njzFzguNwi1HunzQvua2KpYokw/jM0fqlfDXdsAnbap6C4aYBtZ5aVM+g4uWGfiD
arlV4oDIE50ECxhp6BuJ/z8fMAajH3r5cq1dpX7SXw80FANHGgZvsBm36kmiWpWM
YCCSIu1rsdQKQcZ0HyoCSw8K55Y6xHgSRDVictG81IOWfCqVPhqjDNpChetgCEf2
46RYo1Bz6ZUcTedbInkJYi2MmXHqa0aLwZGDyNJbcC+he0D33IF8uc6TLqLDW8o3
gsVba1Oyfuz0uw==
-----END CERTIFICATE-----
Generated at Wed Apr 22 05:19:29 2026 by rpki-client