Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
File: hAfwBj7przHYfP5lubwZPrQsiWk.mft (raw, json)
Hash identifier: AfmB36PMFqvBYq/vfFB582nOHIQiFrPK7I16wwqIL7k=
Subject key identifier: F3:AC:83:14:86:4D:5D:3B:43:A4:3C:70:B4:5D:D8:DD:7D:C5:DC:C8
Authority key identifier: 84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
Certificate issuer: /CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Certificate serial: 019DB246EC301949BD40B788DBD51EA849F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
Manifest number: 0932
Signing time: Tue 21 Apr 2026 23:01:25 +0000
Manifest this update: Tue 21 Apr 2026 23:01:25 +0000
Manifest next update: Wed 22 Apr 2026 23:01:25 +0000
Files and hashes: 1: hAfwBj7przHYfP5lubwZPrQsiWk.crl (hash: DJYcrBVrIkWyJ3MKVytNlDSNI9qZMIT6TeBgxqnUq6g=)
2: ilf77_-o9-q6za7MOsqeG7F-F18.roa (hash: QcXY77GP6oWSI7llT54vOOPgAvyMn7s0Et6LlhSw/kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:46:ec:30:19:49:bd:40:b7:88:db:d5:1e:a8:49:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Validity
Not Before: Apr 21 23:01:25 2026 GMT
Not After : Apr 22 23:01:25 2026 GMT
Subject: CN=f3ac8314864d5d3b43a43c70b45dd8dd7dc5dcc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c4:55:55:49:3a:9c:8f:4a:40:37:02:18:ac:
3e:5c:bb:c4:23:a1:ac:6f:6d:d3:de:01:aa:0f:92:
0d:c7:0b:c1:06:5d:e9:68:52:7c:e6:a4:97:41:04:
96:c4:4e:45:f8:83:85:9b:c8:ff:14:80:7a:64:93:
77:9d:c3:87:32:dd:b5:0e:ed:61:0f:b0:35:57:8a:
9f:c5:c3:07:9c:a7:8f:77:77:c6:eb:4f:cd:7f:f9:
68:84:ae:0d:43:ae:e0:8f:f6:5c:58:9d:58:f4:55:
55:3a:40:31:cf:70:4f:72:c2:c8:d1:88:97:13:75:
8c:3b:5a:fa:97:df:4e:a9:16:51:16:62:a8:81:f4:
c6:95:ab:cb:03:fb:48:58:32:89:63:fa:4f:f2:de:
71:a4:0f:80:12:e7:66:0a:ab:2f:0c:c4:28:84:18:
f2:75:d2:f8:f1:7f:63:f4:14:aa:62:35:db:62:37:
9b:54:e9:70:ce:8a:0a:d2:0a:a6:5d:23:41:85:e7:
6a:63:7e:8f:4a:5f:6c:dc:b3:9d:57:cb:b3:ff:c4:
a7:a7:56:c1:bf:6e:54:27:f7:0b:20:da:86:41:96:
11:81:e2:9e:6f:0a:21:9e:f8:ef:7d:3e:6d:a5:32:
81:59:bd:90:00:42:cd:1f:ae:01:11:cf:0a:1b:25:
fd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AC:83:14:86:4D:5D:3B:43:A4:3C:70:B4:5D:D8:DD:7D:C5:DC:C8
X509v3 Authority Key Identifier:
keyid:84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7a:9a:46:01:3c:32:f3:99:b1:89:f3:c2:5e:96:c5:d6:26:
6e:42:1f:0f:42:ad:8f:3e:c7:74:9f:8f:bf:74:40:14:08:66:
5e:42:e3:db:17:04:71:e7:e5:1c:38:97:5f:10:4c:95:62:b2:
9d:8c:33:ec:ff:70:10:de:55:7f:3c:d8:0f:91:66:c8:5e:0a:
2a:02:03:34:9d:59:23:ac:ea:d1:30:a3:ec:95:dc:1c:cf:3f:
6f:67:9d:2a:5e:93:28:c5:20:ea:a1:2c:2a:ed:51:07:28:6d:
db:95:75:13:53:52:19:67:4b:85:7d:3b:34:f0:9e:19:67:13:
38:fc:6d:d0:62:11:94:f5:67:03:d5:1e:c2:91:99:87:94:57:
99:cb:9f:c5:9a:64:a5:c2:d9:55:7e:8b:65:6c:d1:d0:a1:9f:
7a:e9:a0:ed:c1:a7:b3:06:be:92:e2:14:f9:e4:a8:7a:ab:df:
95:27:8a:65:e1:ed:39:36:e9:0b:15:92:d3:35:90:b9:6e:33:
f0:95:9b:51:7d:c1:d7:af:45:50:63:92:00:57:c0:02:97:56:
f6:c8:fc:97:42:c9:96:4c:63:99:0b:e4:78:52:7b:eb:d4:9f:
6e:15:10:e4:6e:78:66:71:ad:12:9a:fc:da:d4:5f:f4:93:cf:
2e:c9:59:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2yRuwwGUm9QLeI29UeqEnxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MDdmMDA2M2VlOWFmMzFkODdjZmU2NWI5YmMxOTNlYjQy
Yzg5NjkwHhcNMjYwNDIxMjMwMTI1WhcNMjYwNDIyMjMwMTI1WjAzMTEwLwYDVQQD
EyhmM2FjODMxNDg2NGQ1ZDNiNDNhNDNjNzBiNDVkZDhkZDdkYzVkY2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsRVVUk6nI9KQDcCGKw+XLvEI6Gs
b23T3gGqD5INxwvBBl3paFJ85qSXQQSWxE5F+IOFm8j/FIB6ZJN3ncOHMt21Du1h
D7A1V4qfxcMHnKePd3fG60/Nf/lohK4NQ67gj/ZcWJ1Y9FVVOkAxz3BPcsLI0YiX
E3WMO1r6l99OqRZRFmKogfTGlavLA/tIWDKJY/pP8t5xpA+AEudmCqsvDMQohBjy
ddL48X9j9BSqYjXbYjebVOlwzooK0gqmXSNBhedqY36PSl9s3LOdV8uz/8Snp1bB
v25UJ/cLINqGQZYRgeKebwohnvjvfT5tpTKBWb2QAELNH64BEc8KGyX9KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOsgxSGTV07Q6Q8cLRd2N19xdzIMB8GA1UdIwQY
MBaAFIQH8AY+6a8x2Hz+Zbm8GT60LIlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NTdjNTktZTNiOS00MDRmLWFmYWIt
ZTFlZmNmMmVkMGE3LzEvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82NTdjNTktZTNiOS00MDRmLWFmYWItZTFlZmNmMmVkMGE3
LzEvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEnqaRgE8
MvOZsYnzwl6WxdYmbkIfD0Ktjz7HdJ+Pv3RAFAhmXkLj2xcEceflHDiXXxBMlWKy
nYwz7P9wEN5VfzzYD5FmyF4KKgIDNJ1ZI6zq0TCj7JXcHM8/b2edKl6TKMUg6qEs
Ku1RByht25V1E1NSGWdLhX07NPCeGWcTOPxt0GIRlPVnA9UewpGZh5RXmcufxZpk
pcLZVX6LZWzR0KGfeumg7cGnswa+kuIU+eSoeqvflSeKZeHtOTbpCxWS0zWQuW4z
8JWbUX3B169FUGOSAFfAApdW9sj8l0LJlkxjmQvkeFJ769SfbhUQ5G54ZnGtEpr8
2tRf9JPPLslZWw==
-----END CERTIFICATE-----
Generated at Wed Apr 22 05:18:51 2026 by rpki-client