Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.mft
File: h2mm8aRv5rEvfl8cASyKTMvve58.mft (raw, json)
Hash identifier: P+7CeTCa/lQe2g2V3/4juxcX7OMFkbSzkOMKuk4shKs=
Subject key identifier: 04:54:A3:D4:D1:6B:6A:98:15:39:53:04:5F:CB:A9:15:14:90:D0:A5
Authority key identifier: 87:69:A6:F1:A4:6F:E6:B1:2F:7E:5F:1C:01:2C:8A:4C:CB:EF:7B:9F
Certificate issuer: /CN=8769a6f1a46fe6b12f7e5f1c012c8a4ccbef7b9f
Certificate serial: 019DD163CD12083F36BF1B19E3A6CB6D081F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h2mm8aRv5rEvfl8cASyKTMvve58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.mft
Manifest number: 12
Signing time: Tue 28 Apr 2026 00:01:11 +0000
Manifest this update: Tue 28 Apr 2026 00:01:11 +0000
Manifest next update: Wed 29 Apr 2026 00:01:11 +0000
Files and hashes: 1: Pwqn4oY0KPuWxFDB-Ztc1zWrVwI.roa (hash: j9WbrXVSr2U86ODDAeyZl+rZySS1lzxdLUlG17Tpq0c=)
2: h2mm8aRv5rEvfl8cASyKTMvve58.crl (hash: jDU2FfEkXBFeIDfzcewUV2T9yM+u8SJxapYzHY7w/1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.mft
rsync://rpki.ripe.net/repository/DEFAULT/h2mm8aRv5rEvfl8cASyKTMvve58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:63:cd:12:08:3f:36:bf:1b:19:e3:a6:cb:6d:08:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8769a6f1a46fe6b12f7e5f1c012c8a4ccbef7b9f
Validity
Not Before: Apr 28 00:01:11 2026 GMT
Not After : Apr 29 00:01:11 2026 GMT
Subject: CN=0454a3d4d16b6a98153953045fcba9151490d0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c6:ec:25:4e:44:b1:b2:14:ba:b1:c3:76:78:
bf:19:cb:b3:28:f0:f1:f2:5d:66:66:b7:64:82:ab:
ef:38:b7:93:d8:00:2f:f7:5d:19:42:b0:79:2f:d5:
f0:31:70:67:88:4d:24:80:d6:a0:13:a9:07:7e:b7:
16:53:1c:95:63:8c:55:03:f3:6a:72:79:f6:0c:4f:
d4:10:49:73:cc:02:94:66:c7:d6:31:57:6f:72:cc:
6d:b5:88:69:44:4a:c1:3c:9b:6d:df:66:13:9f:7d:
d9:19:24:5c:d9:85:ba:0c:e2:a7:e9:a4:b3:bb:ca:
d9:09:b8:de:33:18:b7:79:33:bd:d7:b3:9c:ce:bb:
47:a1:12:70:cc:a5:94:b7:de:c7:c5:1c:1e:44:4f:
77:c2:a6:3c:d0:bc:b7:a0:28:94:db:f8:23:83:e2:
3b:a4:29:8d:91:2f:bf:83:f4:c1:01:af:91:36:04:
a0:b4:0c:57:9c:45:86:24:70:b9:75:54:0e:0e:ca:
ab:f1:3c:1d:66:fd:19:22:13:a2:e5:af:db:62:0c:
25:50:90:d0:a7:c3:d3:9a:d7:c8:73:92:84:a7:76:
fa:98:69:77:51:13:f9:80:fa:86:56:93:d2:dd:8e:
34:b8:6f:c9:e9:3d:82:0f:02:10:be:b1:b5:6c:78:
60:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:54:A3:D4:D1:6B:6A:98:15:39:53:04:5F:CB:A9:15:14:90:D0:A5
X509v3 Authority Key Identifier:
keyid:87:69:A6:F1:A4:6F:E6:B1:2F:7E:5F:1C:01:2C:8A:4C:CB:EF:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h2mm8aRv5rEvfl8cASyKTMvve58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7c:a6:16:6f:bb:5c:07:c1:01:0f:c6:f6:6c:c3:17:1d:89:
05:76:47:30:0a:90:13:a3:85:ae:aa:29:cc:b2:9a:9d:59:c0:
20:40:5d:51:7a:2b:3c:d0:e7:89:64:b6:c5:1b:63:81:be:e2:
da:73:68:7f:c0:98:6f:a8:35:d7:73:a0:0d:78:a9:61:ce:4f:
08:6a:07:35:17:48:0e:e2:ae:cf:31:e8:b0:2e:3e:38:eb:ed:
3f:71:1e:d2:b5:23:f2:c1:4a:62:59:75:2b:79:78:24:e2:6c:
0e:75:21:ca:f7:0d:24:0b:83:d6:53:f2:c2:4a:fe:02:4e:09:
f1:a6:51:85:e2:1d:e0:e9:49:4e:a8:9f:81:a8:12:33:2f:3b:
db:c9:77:b4:6e:1a:93:a4:83:f4:0f:67:1e:3e:e0:e7:36:9f:
61:b5:d7:23:7a:bf:91:eb:96:cf:4b:2b:49:95:79:43:4b:2c:
f3:04:36:df:9b:db:fc:06:14:90:24:59:39:67:9d:5e:3e:3e:
50:7f:35:87:fa:d2:78:33:7c:06:24:fd:47:ee:b2:00:6f:1d:
5d:44:ec:d6:d4:ee:a2:32:00:f1:6f:5e:6a:bc:8a:08:db:2a:
52:11:0c:f5:3d:ae:c1:d1:1c:49:33:17:ad:37:68:74:61:07:
37:52:6d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:18:02 2026 by rpki-client