Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
File: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft (raw, json)
Hash identifier: dwGPdMOojlq7jQD9Kxr180T2qZUSzMlCnKTcCs7Lws4=
Subject key identifier: BF:FA:7C:94:1E:61:0D:47:E4:05:30:19:83:25:56:83:F5:D9:0B:6C
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019DB24681A3DFFA611354AAB32545FE2109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
Manifest number: 01C1
Signing time: Tue 21 Apr 2026 23:00:58 +0000
Manifest this update: Tue 21 Apr 2026 23:00:58 +0000
Manifest next update: Wed 22 Apr 2026 23:00:58 +0000
Files and hashes: 1: F7OazNxmHQIZG_1NbQyBZDuRfp0.roa (hash: kfyCu9kGmBZWf6iCvzc+imifHO9IEOu6CS+tqE1Bls8=)
2: HpCfEImHkb3OVRB7Cg-DUXnBu1g.roa (hash: cdsGXatsZSEPYOtFACJlSbDzB+wwXF1txphXoAyPSt4=)
3: LjlO1ofuYmhqoyn2NlCRL_J5HTw.roa (hash: jsk6wV+xRGDXW32pveWO5wizMKfLghxcNIdSPlEaCLg=)
4: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl (hash: oE/BEJTzBOqgsZlpmIE0yy6x/2tZ5r3J7JIukKWnILA=)
5: lsiyM54BBzpQuET-XZoryhgj5Fc.roa (hash: D7wAdPXpUkQBrLPttbGEryAEGM/tkPDIMcLbM5iF1RM=)
6: opdAPP4XfkWYA7yU3ItVjBZuv-c.roa (hash: 0Hfm1qyjd3lUos1jStXhOtEuhh/ZjqT6H9OzWUho5SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:46:81:a3:df:fa:61:13:54:aa:b3:25:45:fe:21:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: Apr 21 23:00:58 2026 GMT
Not After : Apr 22 23:00:58 2026 GMT
Subject: CN=bffa7c941e610d47e405301983255683f5d90b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:cf:dc:21:92:fc:d1:de:ba:ce:4e:8f:a9:
1e:49:73:0a:df:da:d4:9f:9c:5e:73:b3:f4:a0:db:
4a:b6:dc:b0:06:6b:51:54:83:ca:71:be:c0:a6:ad:
c6:91:14:0b:05:fe:1c:b5:0e:de:e7:ac:41:c2:80:
01:f3:35:26:b8:1c:18:66:ec:d1:32:36:d5:b4:cb:
c8:6e:41:dc:7d:45:bd:cc:ba:e7:1b:f2:97:67:c8:
f2:ef:72:a9:1c:df:de:cb:23:f2:b8:39:0a:ed:ff:
eb:61:64:20:78:f5:52:f1:8a:64:17:8d:b3:95:1f:
41:1e:41:3a:c9:c5:42:aa:96:28:f4:69:8b:0b:1c:
f5:a6:df:8a:d0:bb:25:fd:ff:37:2f:91:c8:8a:4b:
04:19:07:4a:82:8c:03:31:0d:da:d0:fc:cb:b9:33:
f3:53:f5:39:a7:61:3c:de:d7:82:6f:54:23:91:31:
c8:11:98:11:63:18:5f:ed:c4:8f:de:14:b8:e1:b5:
e9:27:c6:dd:d1:2e:89:e8:c5:7e:54:52:da:cb:5a:
85:00:cb:84:63:44:da:91:3f:a8:fb:e7:48:c4:01:
72:3e:23:fa:ac:18:a3:37:c2:9d:9c:e5:b8:f6:4d:
69:6a:f3:17:ed:1a:4c:ca:f5:90:23:c0:7d:8c:89:
f7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FA:7C:94:1E:61:0D:47:E4:05:30:19:83:25:56:83:F5:D9:0B:6C
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1f:10:34:9a:62:d9:53:55:cc:1c:b7:d5:2e:ac:2b:6c:e1:
a2:0e:b5:ea:88:6c:47:ac:34:01:7e:61:ab:15:e4:7e:bc:1a:
a5:b0:ef:65:67:4d:b8:f1:f4:da:d8:10:00:fd:77:dc:21:bc:
da:fa:8c:d7:ed:ad:25:07:ca:16:1c:32:ab:81:31:03:c9:7a:
f9:0b:7e:62:43:7a:50:8d:e2:3f:82:31:60:e9:e9:36:49:70:
78:26:d7:71:af:59:be:4c:5a:cd:d3:ed:1a:bd:e1:0a:ec:af:
67:ef:02:77:e6:c9:41:b2:1b:17:88:df:ab:7d:fe:59:93:a2:
f0:a4:57:ed:ab:56:d4:0d:8e:3b:44:bf:1c:b0:cb:2e:14:8d:
09:83:de:82:6a:e1:d1:cc:6b:73:62:6c:b0:10:d2:cd:3c:2b:
48:ce:19:00:14:d7:cc:03:22:6e:3e:0f:9e:67:f2:9f:74:a9:
cd:7f:13:41:42:d9:74:14:a0:ca:cc:62:e4:39:1f:3b:9c:41:
20:99:cb:70:01:a0:f4:f9:8d:58:e9:ba:0a:fb:57:5f:96:00:
ef:be:dd:fe:f6:8b:de:9c:cd:77:43:4e:dc:1a:73:85:80:03:
8d:93:50:a4:89:a4:c0:a8:09:d3:c8:f7:7e:6c:ed:f4:cd:9f:
5f:9a:b6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 07:24:33 2026 by rpki-client