Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
File: HqsBKTydvRqdatyGGCtSDNF2wAc.mft (raw, json)
Hash identifier: ZpRqpISw5IwUZ/28rJkXIyxdhZ31KIzKFbMjp3qQpyU=
Subject key identifier: D4:6C:68:3C:80:82:9A:C4:BA:49:47:60:C4:AC:FC:7A:73:C9:41:FC
Authority key identifier: 1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
Certificate issuer: /CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Certificate serial: 019D99622988A1F94E0712FC383DB08DFF7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
Manifest number: 1674
Signing time: Fri 17 Apr 2026 03:00:40 +0000
Manifest this update: Fri 17 Apr 2026 03:00:40 +0000
Manifest next update: Sat 18 Apr 2026 03:00:40 +0000
Files and hashes: 1: FD1D3tD8Wgemy0D_hjVkHNyyffA.asa (hash: dC2+srWHZQSVqWN4gNxQ5m+5yJw+nSPbHERxoSOT3g8=)
2: HqsBKTydvRqdatyGGCtSDNF2wAc.crl (hash: QsbTjUljMORMa10DioQ/j4c3bGl+JYt3PD3ySvSxmGQ=)
3: Ygz8nv_cil4CTr3aZUug7yPj4v8.roa (hash: PHkNGvc8VFiKuUZOzOtLVzJuZVZBuOD5WdBuF+PV+G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:29:88:a1:f9:4e:07:12:fc:38:3d:b0:8d:ff:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Validity
Not Before: Apr 17 03:00:40 2026 GMT
Not After : Apr 18 03:00:40 2026 GMT
Subject: CN=d46c683c80829ac4ba494760c4acfc7a73c941fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:09:ca:8b:89:6c:ca:f1:b2:ff:88:11:a1:
7f:64:46:e8:ed:bd:32:ef:96:33:59:70:a8:d4:ba:
ee:8e:06:89:01:4d:59:b0:22:60:af:ee:d9:d6:7d:
89:88:ae:19:33:cb:e5:10:8b:71:dc:83:0a:bf:94:
42:c4:0c:cd:8f:ff:2b:8c:74:c0:97:e5:15:9a:c6:
f4:3d:73:a8:46:b0:af:37:5d:69:37:ad:b7:c3:cc:
d8:10:34:8e:8f:e1:5f:44:34:ce:eb:61:92:1f:a9:
65:5c:97:4f:c9:77:10:68:61:72:12:93:ca:25:25:
23:d1:29:01:98:72:ae:b3:a4:0f:59:a3:02:59:60:
ca:77:6a:72:76:b1:6b:c3:44:a5:a8:f0:1d:ab:d3:
94:b5:07:c8:45:54:f6:25:9d:ea:86:69:86:f9:ac:
e4:44:db:33:e0:09:ea:af:5a:7a:04:b9:15:30:41:
a7:5d:b0:07:4e:0d:74:75:6d:dc:31:7e:5d:54:9b:
b1:ed:20:f1:12:c7:cb:65:41:f7:a1:95:40:90:26:
d7:e3:7d:dd:6b:80:e1:bd:af:48:df:54:4b:ef:63:
2c:96:bc:a2:e6:08:a2:c6:80:66:80:f9:f3:1e:b6:
0b:70:36:c8:99:59:98:78:2b:bc:75:37:8d:d9:48:
f1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6C:68:3C:80:82:9A:C4:BA:49:47:60:C4:AC:FC:7A:73:C9:41:FC
X509v3 Authority Key Identifier:
keyid:1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0f:78:e5:fa:18:07:d5:fb:40:d1:67:06:74:c5:93:02:4f:
1a:5e:51:9e:a6:15:02:f3:cb:82:a1:63:50:40:2d:be:1a:9d:
cc:97:d3:b5:94:c8:31:6c:e0:fe:66:2a:c7:18:45:55:b4:df:
b0:87:16:b0:d9:b7:50:20:88:5a:e2:a8:c0:b3:a1:aa:55:36:
e2:7b:19:2b:d7:36:fd:ab:3d:1d:fe:2e:94:63:ed:55:0a:2b:
fe:ea:a6:62:e2:1d:91:43:55:29:b5:4b:ef:50:5c:3c:0c:da:
cc:3c:a7:27:7e:a3:d8:f8:54:fb:c0:15:d5:9d:ad:80:bc:13:
35:94:92:7f:58:3b:b3:91:78:5c:1d:7c:30:4a:6e:b1:8b:d2:
91:b9:61:2b:98:11:f3:3e:71:4d:71:f7:0d:65:c2:0d:db:60:
68:f3:25:9d:41:ee:5a:a9:39:66:c4:d6:62:34:c7:8c:14:f9:
46:f2:f8:28:15:14:00:98:c3:91:0b:a1:cd:ad:ca:6d:b6:6e:
8c:12:76:4c:ab:cd:c1:6c:d7:43:3a:b5:7e:69:1f:91:7f:ee:
78:88:79:fb:6e:41:9b:24:1a:31:ab:86:84:bb:d1:5f:d1:fe:
d3:95:6d:96:96:2e:50:9c:6e:d9:cc:c2:01:74:8d:9d:fe:4f:
4e:f4:18:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:33:59 2026 by rpki-client