Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
File: H9CHXNAFHQwJJaygQQNOeECmdws.mft (raw, json)
Hash identifier: KGIiBpi7HUjBnhfJd3C7x2ImGlSlMdc3IudXUK5ZlA0=
Subject key identifier: 20:6D:93:EF:62:43:10:8A:80:33:9A:61:71:3F:6C:A7:46:0F:CC:75
Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Certificate issuer: /CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Certificate serial: 019DCF0753D33081360E3F8E405A7A32D7C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
Manifest number: 08AE
Signing time: Mon 27 Apr 2026 13:00:56 +0000
Manifest this update: Mon 27 Apr 2026 13:00:56 +0000
Manifest next update: Tue 28 Apr 2026 13:00:56 +0000
Files and hashes: 1: CaBEFYDtaQzQxhyXo4MA7Dtx2rE.roa (hash: knYWc/a4bI5GtK7g0Qth1pZAN74E2q8jYjqFwaqxRKI=)
2: H9CHXNAFHQwJJaygQQNOeECmdws.crl (hash: DCaIhAIzSGO1/P1Pr1kJXWIkN99MqDzcrzjYC+tT13A=)
3: RzzdhI5WQTfIRJ5CT4m2Ue9mGN4.roa (hash: xrR61qMY4oBctclJGvQvpdXymPubQyCDbVzByy1zses=)
4: atjpUn5m_olYo4VMnv5o9bZkp10.roa (hash: zhJgLfRaNhUfkrFUtufurP1akqxnjTREPo55ccYjvXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:53:d3:30:81:36:0e:3f:8e:40:5a:7a:32:d7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Validity
Not Before: Apr 27 13:00:56 2026 GMT
Not After : Apr 28 13:00:56 2026 GMT
Subject: CN=206d93ef6243108a80339a61713f6ca7460fcc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c3:3d:98:73:43:9f:f1:15:0a:8e:ba:a2:69:
5b:88:03:bf:50:54:c2:42:9f:0a:15:47:e8:34:5b:
27:9f:9b:77:6d:bd:61:e5:57:6d:a8:a4:2e:05:1d:
38:39:63:19:31:8a:03:df:a0:91:73:53:ed:9d:5f:
22:ff:40:d3:0f:70:67:32:62:aa:e4:47:56:9c:35:
7e:d8:a9:bf:7f:ae:2c:c7:78:18:d1:dd:d0:72:6e:
04:93:45:75:7f:52:24:ca:93:c7:52:5e:35:0d:6f:
48:6b:90:ef:9e:77:75:ec:3a:75:39:57:b6:a8:29:
cf:70:1e:90:c7:70:f8:22:80:df:b0:63:db:c2:e2:
03:3b:ce:17:4a:af:4c:b2:a9:e3:54:9f:dc:e7:7b:
71:d5:66:fa:21:31:a5:1a:b2:b4:eb:42:20:ac:2e:
5d:12:ba:34:ef:b9:3a:26:88:2b:cb:11:ce:4c:4d:
04:c6:7c:0b:ec:b0:17:ff:ca:5b:28:c2:f5:3d:2f:
bf:6c:73:a6:f3:52:c0:f7:fc:dc:c5:53:50:cd:9d:
20:8d:7c:18:d0:64:f4:22:fc:19:88:ba:ff:b9:10:
21:e3:79:6e:40:ca:3e:92:00:15:de:ec:bb:7e:80:
4a:25:c0:d6:84:df:26:3e:8b:46:84:5d:29:95:99:
5a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6D:93:EF:62:43:10:8A:80:33:9A:61:71:3F:6C:A7:46:0F:CC:75
X509v3 Authority Key Identifier:
keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f2:d9:5d:3b:56:36:f5:e3:fa:39:23:81:82:00:09:c4:31:
6e:ed:50:cf:c6:46:4a:80:fd:2d:e7:85:9b:86:d1:8b:c8:d1:
dc:f5:7b:4d:cf:5e:fc:e9:7f:bb:b1:c0:ec:6c:77:d6:35:0a:
54:14:2b:43:ec:c7:6b:1e:19:26:64:5a:c6:c1:52:41:1a:1f:
d3:ef:9f:4f:36:96:3e:0d:93:eb:20:b1:3d:76:0d:ea:af:5d:
c3:f2:82:f9:05:d4:59:5b:e0:e6:a8:9e:5a:46:03:c8:61:7b:
cc:97:41:71:bf:63:8e:8d:c9:d1:78:85:2d:8e:ba:ea:b6:88:
db:73:10:9d:85:f5:d6:0e:30:1d:77:51:9a:72:0d:b8:ce:47:
c6:42:bf:2b:19:5f:a1:c7:18:ca:a5:f8:35:4e:11:4b:55:e3:
0b:ce:b7:5c:c9:a4:52:7c:36:aa:c2:30:f0:c7:c5:ad:25:7d:
28:cb:63:d8:f4:53:78:1e:a3:d7:a8:49:c6:73:99:a8:4e:24:
70:6e:d3:d0:50:ef:2d:9d:f5:a7:d8:fa:78:8b:0b:1e:83:5b:
29:8b:90:f7:23:3c:07:be:1c:bd:7e:03:35:0a:95:e3:bb:95:
ed:8b:22:57:4a:c4:ff:3e:4e:fa:5e:a2:79:61:a4:ff:4e:23:
e7:78:22:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:21:36 2026 by rpki-client