Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
File: sHplogTjx5n7GDuevkc2L6fP6MQ.mft (raw, json)
Hash identifier: tlTlqA3OCPRUr/1F2kfet6CiJNEXkMGaAXHzMRW2r3Y=
Subject key identifier: 83:40:F5:B3:59:C7:26:9C:9C:3E:F7:1F:D0:92:CB:A4:4A:58:93:B0
Authority key identifier: B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4
Certificate issuer: /CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
Certificate serial: 019DCFE36B4903A97983371815B181089FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
Manifest number: 0323
Signing time: Mon 27 Apr 2026 17:01:20 +0000
Manifest this update: Mon 27 Apr 2026 17:01:20 +0000
Manifest next update: Tue 28 Apr 2026 17:01:20 +0000
Files and hashes: 1: 0HI-hYUQzf4SnFU50ilapMC-N0M.roa (hash: OXBTJCBE8s4VmNGyaynb87VbRk7167Q44yiSXd1oMkw=)
2: sHplogTjx5n7GDuevkc2L6fP6MQ.crl (hash: HhIQZoPzZIy2KuqEj+UGEWp4i9ZyyAIW/5NF+/m9jTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:6b:49:03:a9:79:83:37:18:15:b1:81:08:9f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
Validity
Not Before: Apr 27 17:01:20 2026 GMT
Not After : Apr 28 17:01:20 2026 GMT
Subject: CN=8340f5b359c7269c9c3ef71fd092cba44a5893b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:63:5a:63:63:28:bc:13:6f:98:da:70:91:e4:
3f:bc:a5:9a:ce:84:d8:ae:5e:c2:28:be:6b:b3:47:
81:56:1f:80:66:22:7a:b4:43:d3:b8:f7:f1:d2:5b:
f8:a3:b6:48:ca:43:e5:aa:50:35:10:62:f5:d5:d0:
19:10:c9:1a:9d:df:6c:b1:76:68:5d:41:8c:38:b6:
02:60:e5:b9:0f:ed:63:fb:9c:fd:9a:87:b7:91:28:
75:56:f9:ca:63:1d:2b:76:19:94:60:1e:9e:0d:e9:
f1:8e:ee:7a:5e:62:85:b8:d0:72:15:8d:3c:44:13:
d8:c6:96:e8:16:7d:b3:d9:d5:84:e4:f1:66:b0:9d:
c3:5e:45:ec:0f:9c:e6:75:58:8c:83:51:44:a4:c7:
df:f8:00:c6:02:51:ab:7f:10:1f:e5:69:cd:f7:94:
87:7c:cb:9b:50:39:18:ce:36:c2:33:7f:5c:09:f0:
fd:9e:f4:a5:b9:a5:6c:5d:55:ba:71:2a:26:de:15:
0e:93:95:21:3d:8a:ac:af:29:8c:25:d5:88:80:93:
bd:39:09:33:b4:7d:5c:1c:8f:fd:21:54:ca:50:99:
25:73:ad:d4:4c:ff:2d:d9:8a:76:aa:38:83:b1:e7:
73:a3:7e:f4:e1:52:fe:4e:e7:5c:eb:f8:65:e7:3d:
0d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:40:F5:B3:59:C7:26:9C:9C:3E:F7:1F:D0:92:CB:A4:4A:58:93:B0
X509v3 Authority Key Identifier:
keyid:B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:59:0a:4f:1b:46:ae:a9:9d:ef:37:09:b1:36:a0:30:cc:3c:
77:f0:53:3e:78:b7:ed:e6:50:3b:6d:7c:30:74:ae:a2:3d:eb:
a1:e0:8d:45:01:d1:18:77:37:4c:96:93:d5:d5:af:00:f7:f4:
af:61:f8:86:c4:ff:86:ae:6a:bc:38:bf:1e:7f:1c:18:99:64:
83:85:ff:c1:0b:00:55:78:78:45:40:93:26:56:74:5d:ff:31:
0d:bf:17:98:5a:12:e5:51:1a:28:f8:6a:a0:1d:78:35:cf:7f:
78:b2:02:90:ed:84:67:6d:79:70:1d:54:ac:d5:8c:e2:6a:38:
be:64:62:29:83:d5:0c:af:7d:60:64:46:8b:f2:c9:c6:fd:1c:
1c:35:66:5b:03:14:94:44:46:04:31:ff:4c:b8:51:d6:6b:13:
b6:3a:e5:88:7c:0e:41:b9:3b:21:f1:77:24:24:09:82:8c:23:
a0:f7:58:06:00:96:be:ce:d3:6f:58:97:fe:a0:f8:6b:66:31:
f0:0d:4d:6e:f3:de:dd:92:90:57:4a:28:af:7f:b5:f0:98:2f:
86:e4:46:9f:a8:8a:46:03:bd:33:a1:7e:cd:99:a5:83:eb:bf:
93:48:3b:c0:dc:4f:8b:b3:2d:1a:fe:81:9f:3f:17:5d:e7:3e:
0f:26:34:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:43:51 2026 by rpki-client