Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
File: HiNCQpV7sb4SloFyH5ws0I3we6o.mft (raw, json)
Hash identifier: OIpLGEhu/qujE2A+7/N7pe77d5qxqtd+LFHj0glOg78=
Subject key identifier: F3:3F:EA:E9:0E:72:38:D7:4B:D9:86:B9:87:C7:38:DC:5C:7E:FC:AC
Authority key identifier: 1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
Certificate issuer: /CN=1e234242957bb1be129681721f9c2cd08df07baa
Certificate serial: 019D9C2C7E2A9D67B06D6CAD0237935C0A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 16:00:54 +0000
Manifest this update: Fri 17 Apr 2026 16:00:54 +0000
Manifest next update: Sat 18 Apr 2026 16:00:54 +0000
Files and hashes: 1: GqjpIwPCfuY9AEJq32U-7x8s2Xc.roa (hash: hBgV71RI9VW14WRnhYAdkQpWE93JgEHcBWlBuGyNBy4=)
2: HiNCQpV7sb4SloFyH5ws0I3we6o.crl (hash: Y2XW4C+vr4DEoXP/Nm2H9LvaSMwhH7euG77vCnpAy2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:7e:2a:9d:67:b0:6d:6c:ad:02:37:93:5c:0a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e234242957bb1be129681721f9c2cd08df07baa
Validity
Not Before: Apr 17 16:00:54 2026 GMT
Not After : Apr 18 16:00:54 2026 GMT
Subject: CN=f33feae90e7238d74bd986b987c738dc5c7efcac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2b:26:03:c3:69:b4:c1:96:f1:3f:a4:19:67:
76:ab:50:1e:6e:41:7b:c6:2c:11:69:0a:d1:29:6b:
4c:80:5b:94:0c:19:7b:29:97:dd:9c:63:31:a1:f6:
77:da:8b:da:c6:53:eb:be:f2:fb:38:8e:18:36:2b:
23:e8:21:ed:65:7f:bb:73:7b:6d:ae:8d:22:0a:5f:
d6:5d:f3:a8:8c:fd:34:af:1f:31:3a:0d:76:7b:3c:
73:41:75:16:f1:36:12:c2:9a:56:50:bd:d3:b7:d6:
eb:2b:16:60:8b:22:de:15:20:ed:ba:24:1e:2e:d1:
20:4a:63:ad:07:bd:98:d6:f7:42:a1:e8:25:e4:e2:
6e:8c:a1:b7:5f:0f:3d:26:b7:f4:0f:21:b0:14:ab:
8a:b7:5b:97:2d:76:77:39:9f:2d:67:5d:04:5b:ee:
4d:d9:1a:58:6e:29:fa:3c:68:64:ac:68:4b:1a:b1:
2c:fb:28:21:46:4e:ef:b1:12:8d:46:fd:e7:09:27:
43:6a:ee:04:55:b1:9d:a2:f1:3c:4c:27:21:dc:d1:
dc:cb:91:ad:9e:65:a2:54:71:fd:b0:b5:15:b7:80:
c3:e4:3f:c5:4d:72:1c:84:16:6b:ff:17:1f:71:51:
c3:e4:6d:c2:a0:09:ec:7d:50:05:9c:14:b8:f8:4a:
4a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3F:EA:E9:0E:72:38:D7:4B:D9:86:B9:87:C7:38:DC:5C:7E:FC:AC
X509v3 Authority Key Identifier:
keyid:1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:74:47:a3:c8:bf:d6:3b:42:1e:f9:c7:f5:fb:94:41:c6:03:
b0:81:bd:c4:16:29:af:0a:89:4b:80:bf:a3:5f:bc:1e:c2:da:
b4:f3:8b:68:5a:af:fb:86:e1:f3:ef:87:b0:9a:d6:fa:12:54:
7d:85:bf:a4:2a:af:71:66:b3:bc:35:3b:56:b2:ca:1c:d3:48:
d0:d0:37:e5:7d:7c:86:2a:d3:1c:ae:78:4b:3e:5a:f3:bd:e3:
44:05:cc:78:5f:d7:d4:ac:c0:83:9c:d4:ad:02:12:b5:33:e3:
b4:45:35:b0:66:db:4d:d5:5e:f9:c1:a6:e3:51:71:b1:8a:20:
43:7a:d6:a8:59:69:38:d4:b4:a8:96:9d:27:0c:b0:08:ee:9c:
98:a4:ee:35:47:ee:e3:f6:07:98:73:c7:69:b0:1f:b5:dd:86:
f0:39:51:b2:83:ca:40:ab:63:2e:60:71:35:8f:d9:c1:8d:7e:
bb:9b:d5:22:07:49:d4:c6:76:ce:c6:96:5b:07:9a:5a:bd:72:
08:43:f7:14:07:a7:ff:bc:3b:4f:af:34:ef:5c:14:09:16:0c:
84:59:d3:27:ea:89:f5:7e:9f:96:6f:14:ce:60:93:a4:37:f3:
43:91:58:e8:ca:cd:35:65:df:86:5b:02:fb:af:9a:58:c9:12:
a6:36:35:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLH4qnWewbWytAjeTXApyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMjM0MjQyOTU3YmIxYmUxMjk2ODE3MjFmOWMyY2QwOGRm
MDdiYWEwHhcNMjYwNDE3MTYwMDU0WhcNMjYwNDE4MTYwMDU0WjAzMTEwLwYDVQQD
EyhmMzNmZWFlOTBlNzIzOGQ3NGJkOTg2Yjk4N2M3MzhkYzVjN2VmY2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ismA8NptMGW8T+kGWd2q1AebkF7
xiwRaQrRKWtMgFuUDBl7KZfdnGMxofZ32ovaxlPrvvL7OI4YNisj6CHtZX+7c3tt
ro0iCl/WXfOojP00rx8xOg12ezxzQXUW8TYSwppWUL3Tt9brKxZgiyLeFSDtuiQe
LtEgSmOtB72Y1vdCoegl5OJujKG3Xw89Jrf0DyGwFKuKt1uXLXZ3OZ8tZ10EW+5N
2RpYbin6PGhkrGhLGrEs+yghRk7vsRKNRv3nCSdDau4EVbGdovE8TCch3NHcy5Gt
nmWiVHH9sLUVt4DD5D/FTXIchBZr/xcfcVHD5G3CoAnsfVAFnBS4+EpK+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPM/6ukOcjjXS9mGuYfHONxcfvysMB8GA1UdIwQY
MBaAFB4jQkKVe7G+EpaBch+cLNCN8HuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGlOQ1FwVjdzYjRTbG9GeUg1d3MwSTN3ZTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iM2FlMzMtNmQ2Mi00MDkzLTkyZWMt
NTYzODUyNmZmNjQxLzEvSGlOQ1FwVjdzYjRTbG9GeUg1d3MwSTN3ZTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9iM2FlMzMtNmQ2Mi00MDkzLTkyZWMtNTYzODUyNmZmNjQx
LzEvSGlOQ1FwVjdzYjRTbG9GeUg1d3MwSTN3ZTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHRHo8i/
1jtCHvnH9fuUQcYDsIG9xBYprwqJS4C/o1+8HsLatPOLaFqv+4bh8++HsJrW+hJU
fYW/pCqvcWazvDU7VrLKHNNI0NA35X18hirTHK54Sz5a873jRAXMeF/X1KzAg5zU
rQIStTPjtEU1sGbbTdVe+cGm41FxsYogQ3rWqFlpONS0qJadJwywCO6cmKTuNUfu
4/YHmHPHabAftd2G8DlRsoPKQKtjLmBxNY/ZwY1+u5vVIgdJ1MZ2zsaWWweaWr1y
CEP3FAen/7w7T68071wUCRYMhFnTJ+qJ9X6flm8UzmCTpDfzQ5FY6MrNNWXfhlsC
+6+aWMkSpjY1kQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:12:06 2026 by rpki-client