Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
File: hIJ9422jg4AexCqAQ8eHJTd2A34.mft (raw, json)
Hash identifier: G7jCIQxV7DT0KxiMigIKYDQUYgPaWwEYVHMk2gttjGg=
Subject key identifier: D1:2E:FF:95:C9:24:9A:7F:B1:54:E9:2C:0F:8D:81:28:EF:D1:42:4F
Authority key identifier: 84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
Certificate issuer: /CN=84827de36da383801ec42a8043c787253776037e
Certificate serial: 019E1FB5EBC47C803B404C84761164A33271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
Manifest number: 0D49
Signing time: Wed 13 May 2026 05:01:16 +0000
Manifest this update: Wed 13 May 2026 05:01:16 +0000
Manifest next update: Thu 14 May 2026 05:01:16 +0000
Files and hashes: 1: hIJ9422jg4AexCqAQ8eHJTd2A34.crl (hash: z/CjKB+wyU5qAlvjH53egFUkHrX7uv5GTzJTbKCyyZI=)
2: osHVQH8VsNLb4CfrwBHFrXKWzUM.roa (hash: VoKNeQ3l9XKj9V37+GVfXeQ4vJfOENAKEnCMkVGQkdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:eb:c4:7c:80:3b:40:4c:84:76:11:64:a3:32:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84827de36da383801ec42a8043c787253776037e
Validity
Not Before: May 13 05:01:16 2026 GMT
Not After : May 14 05:01:16 2026 GMT
Subject: CN=d12eff95c9249a7fb154e92c0f8d8128efd1424f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cd:44:82:f8:6c:e4:64:77:62:33:4f:ad:2e:
1d:bf:4f:e7:ef:8a:56:57:1b:1f:0a:71:cb:eb:8d:
67:50:a8:c4:da:34:a3:42:e3:85:8c:25:49:4e:68:
e3:db:6a:4e:bd:91:9e:87:db:26:a8:a5:82:fb:a3:
ea:a7:36:8f:92:1f:6c:8f:f5:ad:39:17:da:a6:64:
fd:13:3a:ec:7b:d2:63:74:eb:01:f1:d1:9e:e6:37:
d4:aa:71:1b:e9:62:f5:b6:e8:2b:e2:d6:37:e1:9f:
b2:14:d3:5e:e0:5f:7b:94:ef:64:b7:4f:97:83:70:
c6:25:77:28:c6:08:ca:c9:1d:b0:19:73:2a:03:45:
8e:a5:f0:fa:e6:76:c0:94:37:32:e0:5f:7c:7a:45:
44:11:ae:01:9c:a3:22:bc:35:6a:5e:d6:03:35:16:
0b:ca:3c:df:59:83:17:e5:6c:42:65:ec:b3:f8:a9:
37:ad:68:f3:f5:da:30:82:d0:a0:5a:4f:a9:fa:bb:
8c:2c:69:d2:f9:0b:5d:7d:2e:a6:94:79:60:69:e6:
4b:d3:61:7f:61:1b:81:d2:30:cd:de:97:2b:cf:4e:
a8:c0:36:e6:31:0f:1a:75:b8:ee:ca:f4:d5:b7:64:
12:8c:84:f2:a2:eb:82:94:14:09:1b:14:09:e7:a7:
01:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2E:FF:95:C9:24:9A:7F:B1:54:E9:2C:0F:8D:81:28:EF:D1:42:4F
X509v3 Authority Key Identifier:
keyid:84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:68:57:e0:87:2f:cc:ea:7f:30:37:49:4a:e8:63:6e:5a:4c:
47:c6:4e:91:4d:62:5f:cc:f9:15:d1:fd:94:8e:7e:f0:3e:4d:
2f:c2:d3:be:d2:f1:48:7b:e7:7d:8b:65:bf:41:c7:a0:a1:87:
8c:88:44:e7:7c:5e:88:a2:ae:93:c1:7c:6e:95:d2:59:09:76:
ce:0d:b6:17:a6:9b:8b:c6:3e:e4:3d:2c:f9:22:f8:a5:7b:6b:
fb:03:23:d0:89:9b:e9:5e:02:0e:e6:d7:fe:5b:0b:47:4c:e1:
36:9d:4e:90:4c:d8:cc:a3:43:53:27:a9:99:a3:4b:42:b2:02:
e2:d2:91:3d:0e:c9:03:ec:2e:fa:b4:60:ce:62:72:4c:55:9c:
05:2e:5d:35:f1:2b:7e:db:4d:a5:cd:00:fc:c9:5e:0e:06:2a:
46:32:f4:aa:04:f6:35:f5:78:f0:db:6a:82:4c:e3:4a:f2:60:
9d:b2:96:81:3f:4c:ce:69:7f:26:2e:d7:56:9c:3c:38:f8:08:
3d:ee:3d:01:d2:57:21:7c:c3:fd:9f:c1:07:e9:04:26:19:3d:
3c:bc:01:ee:fa:e1:1f:db:16:5f:4c:d2:53:e4:b6:d6:cc:39:
96:de:dd:5f:59:3f:68:e7:13:1f:9c:40:d1:ff:05:5f:28:5d:
3c:4b:fd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:32 2026 by rpki-client