Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
File: cH89q67iT8Q7hlqvo_PJwvNkv8k.mft (raw, json)
Hash identifier: SiRXVOcDpcpAXums0QjTkvPpBIQZpEw7hWaRLXoQ5KU=
Subject key identifier: 84:1B:FF:AC:06:AC:58:76:85:E4:F4:52:DB:B6:60:93:3C:98:9D:6F
Authority key identifier: 70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
Certificate issuer: /CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Certificate serial: 019DCE637DC17A4C9E79C3EDC7599A613C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
Manifest number: 1870
Signing time: Mon 27 Apr 2026 10:01:59 +0000
Manifest this update: Mon 27 Apr 2026 10:01:59 +0000
Manifest next update: Tue 28 Apr 2026 10:01:59 +0000
Files and hashes: 1: YFuXlkN-MljNRVYZCMihnQz4RoU.roa (hash: ZnDgTtky6cYn6D0/F0mae8ReoG9f3tqFA2qYPiw3SoE=)
2: cH89q67iT8Q7hlqvo_PJwvNkv8k.crl (hash: zmjX77EqpytbwsoDx0JLVRZ8PXv9hCWvxS7Z7rnh35M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:7d:c1:7a:4c:9e:79:c3:ed:c7:59:9a:61:3c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Validity
Not Before: Apr 27 10:01:59 2026 GMT
Not After : Apr 28 10:01:59 2026 GMT
Subject: CN=841bffac06ac587685e4f452dbb660933c989d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a1:a3:79:b6:22:e4:c0:d3:fa:d0:b9:7e:0e:
23:25:74:64:5a:c3:fa:02:be:d7:93:2c:25:45:4b:
51:5c:41:fa:d4:cd:93:99:12:a3:65:87:99:75:77:
c4:cb:4f:a6:6a:38:66:34:36:bb:e9:65:24:16:94:
76:69:0e:b8:69:fd:e6:5e:80:93:e2:17:05:fd:6e:
9c:89:ca:08:af:83:8e:52:11:06:16:74:d3:e6:7d:
75:db:93:4e:c9:bd:93:99:4b:32:0c:44:5a:cc:ae:
a2:ca:2c:db:64:e7:3f:88:50:b8:b8:47:ed:70:8a:
5e:82:27:c6:b9:00:d1:92:95:0a:e5:ad:26:17:19:
05:0f:5d:1a:14:56:26:26:ba:d2:b7:2f:22:e6:9a:
1b:64:1a:74:a2:cf:a7:78:0c:9b:99:c7:44:ca:c8:
04:0b:9f:bd:aa:57:cf:87:6d:54:44:0b:e3:3d:cf:
af:94:d3:a5:a4:65:92:9d:86:77:e5:2b:26:64:d4:
db:66:a7:72:12:7f:f2:0b:0f:af:fe:11:08:db:74:
65:fd:3b:05:67:b7:33:e9:48:aa:88:82:cc:fa:27:
d0:af:c5:20:8c:88:4e:4c:0f:33:87:44:f1:18:2b:
ad:6d:bd:64:d9:03:2b:6a:7b:fe:eb:42:69:01:a9:
8c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1B:FF:AC:06:AC:58:76:85:E4:F4:52:DB:B6:60:93:3C:98:9D:6F
X509v3 Authority Key Identifier:
keyid:70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:93:2a:fd:4b:1f:60:86:e2:01:39:93:30:1e:92:da:70:28:
e8:12:26:3a:71:be:1a:2a:ef:78:72:3d:ba:17:e4:0d:a7:23:
b4:26:aa:0a:ad:13:b2:0a:4b:40:d8:47:81:36:c3:65:7a:b2:
e3:3f:ad:86:70:38:10:35:60:de:7a:53:8e:2d:73:10:a0:92:
c9:ed:d9:7e:e2:92:95:c9:21:02:f6:a4:82:fa:13:a0:47:21:
5d:b3:c6:22:a8:88:3c:af:36:30:36:c8:52:2c:88:a1:08:c6:
70:01:ba:58:00:4f:0c:b1:d5:a8:2f:ea:c8:91:d7:8a:a5:a4:
e0:91:73:a9:35:c5:25:cc:a3:5b:c0:0c:0a:71:bd:d0:bb:31:
20:38:a4:ad:2d:24:d1:9c:ad:91:ad:a0:25:97:da:19:51:3b:
01:6c:c5:27:6e:af:d2:48:d3:de:34:3a:17:d5:9c:ba:78:af:
f7:1f:73:ec:30:af:31:1c:b6:43:91:67:4b:96:df:e1:c7:11:
aa:90:ac:7b:29:9a:49:7f:82:38:4a:1a:c5:d9:ff:9a:59:11:
48:75:6b:20:50:f1:7d:7a:12:f2:4e:70:01:51:0b:55:83:2c:
68:e0:13:b6:ed:70:30:62:04:95:cc:cb:dc:dd:bc:80:3f:65:
53:53:d3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:48:31 2026 by rpki-client