Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
File: hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft (raw, json)
Hash identifier: LiK5FBvlzHhKX9tIbxRl0l1KFFgDr3ZOisWvTY8QmGU=
Subject key identifier: 1D:BB:17:DF:24:04:65:D7:C3:6B:C3:6D:33:FE:07:52:E8:DB:A9:10
Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Certificate serial: 019D9A073F23EC33106C92BF36DCEEA5D621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 06:00:59 +0000
Manifest this update: Fri 17 Apr 2026 06:00:59 +0000
Manifest next update: Sat 18 Apr 2026 06:00:59 +0000
Files and hashes: 1: Xt9gim6uGZAO-XoH9YVT_sjrnmc.roa (hash: EDOq5gPDJvJThydl2Ogu3GFdpWlVfncejE+dMuzQn70=)
2: c06039lKyV_J6xBbo-T4U-OvKpY.roa (hash: iZi7artEej/ZvwjEPmdFR6zAlAdw9xNqyuBRvLMxbow=)
3: hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl (hash: 8iER9d4VKSGO/tyPClFKykEaS9MvhR+mwWLR2AFN3HU=)
4: oEY0i9r3K2XzpeIqb_uHhC_ZJf8.roa (hash: eStOq03pWfBN0BFsIv2si494zM3pBol5A5EHh+T2UJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:3f:23:ec:33:10:6c:92:bf:36:dc:ee:a5:d6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Validity
Not Before: Apr 17 06:00:59 2026 GMT
Not After : Apr 18 06:00:59 2026 GMT
Subject: CN=1dbb17df240465d7c36bc36d33fe0752e8dba910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:39:33:c1:cb:5c:fb:42:99:47:a4:6b:8d:
c2:77:9a:8b:27:9b:8a:33:3b:80:41:c4:8f:77:e2:
bf:57:ed:d1:79:41:ce:a1:5d:dc:61:0f:59:18:7f:
c2:ad:dc:45:41:09:08:9e:c3:22:43:89:4d:fd:24:
07:4c:3d:7b:7e:07:fd:ac:70:c6:bf:c9:7d:25:45:
4a:e2:fc:95:ab:f2:42:a9:e1:d3:50:8f:37:69:36:
72:c3:de:76:5b:32:b7:c6:d6:9d:dc:84:df:01:9e:
1e:0f:65:c5:e7:09:e2:de:f7:9c:64:de:05:6f:33:
14:ac:f5:a6:e7:40:31:9a:4b:3a:7e:3c:60:f4:8c:
68:00:d8:1f:e2:35:70:db:48:61:68:d1:3c:fe:22:
41:4d:08:6c:41:1f:8f:0d:bf:7c:c3:fe:e7:3f:cc:
51:71:3a:96:17:9d:17:99:b5:fb:c6:fb:f0:50:76:
27:3e:29:59:f9:a4:e6:57:ef:f3:6a:d5:9a:57:ae:
38:41:52:de:c3:bb:9d:83:9a:8a:a4:a9:4f:f6:c3:
0f:3b:53:97:c7:60:68:77:35:88:8b:84:6d:2f:77:
09:f0:84:aa:3a:af:7b:91:eb:bf:2d:e0:29:20:16:
89:c3:d6:ea:23:3b:72:63:69:25:cf:06:aa:9b:22:
95:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BB:17:DF:24:04:65:D7:C3:6B:C3:6D:33:FE:07:52:E8:DB:A9:10
X509v3 Authority Key Identifier:
keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0a:3e:b5:c5:7c:f5:a4:d5:19:f0:ec:26:70:bb:23:ff:44:
40:8a:1a:80:c2:71:60:3e:f5:4f:1b:a6:f7:35:05:41:65:f3:
bc:e7:54:36:6b:ca:7e:2d:1a:47:78:80:22:81:63:fa:85:2e:
c8:d8:eb:47:9f:ee:94:3b:51:54:af:b0:c1:ab:db:69:0c:04:
1f:1a:b7:88:d0:37:5b:e5:8d:85:51:b2:e4:3d:1b:65:14:59:
fc:f6:2b:0d:91:20:a3:c0:90:4f:12:18:f0:76:e9:64:84:7e:
d8:c3:4e:b2:25:a2:85:b6:00:83:18:14:f4:13:0a:53:32:86:
96:e1:4c:08:49:00:a3:f7:38:7a:c8:77:4c:3d:18:7e:30:44:
08:0b:0d:33:46:71:88:fc:64:20:4d:2c:59:65:c9:17:bf:7a:
55:c5:2e:5d:77:b7:4b:0c:f8:60:96:a0:11:b4:70:54:b8:69:
bc:5c:a3:ab:83:ff:a9:c6:73:4e:b2:26:55:a3:f8:9c:f1:00:
40:c6:6a:e2:76:cf:a4:1f:c6:b0:3c:fa:37:18:c1:e0:f0:80:
01:41:b1:86:5a:e6:09:d8:eb:54:32:60:1a:1f:9b:93:eb:c5:
47:a3:81:c1:66:f6:8d:6d:5e:c3:3b:bd:12:22:4c:34:d1:70:
81:b4:93:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBz8j7DMQbJK/NtzupdYhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YThmZjRjOWM1NjY2N2Q5OTAyNWQ3ZjAxNTkxY2JmNzdh
ZDJmMDkwHhcNMjYwNDE3MDYwMDU5WhcNMjYwNDE4MDYwMDU5WjAzMTEwLwYDVQQD
EygxZGJiMTdkZjI0MDQ2NWQ3YzM2YmMzNmQzM2ZlMDc1MmU4ZGJhOTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEo5M8HLXPtCmUeka43Cd5qLJ5uK
MzuAQcSPd+K/V+3ReUHOoV3cYQ9ZGH/CrdxFQQkInsMiQ4lN/SQHTD17fgf9rHDG
v8l9JUVK4vyVq/JCqeHTUI83aTZyw952WzK3xtad3ITfAZ4eD2XF5wni3vecZN4F
bzMUrPWm50Axmks6fjxg9IxoANgf4jVw20hhaNE8/iJBTQhsQR+PDb98w/7nP8xR
cTqWF50XmbX7xvvwUHYnPilZ+aTmV+/zatWaV644QVLew7udg5qKpKlP9sMPO1OX
x2BodzWIi4RtL3cJ8ISqOq97keu/LeApIBaJw9bqIztyY2klzwaqmyKV5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB27F98kBGXXw2vDbTP+B1Lo26kQMB8GA1UdIwQY
MBaAFIao/0ycVmZ9mQJdfwFZHL93rS8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQt
MDZhNDk5NjhjMmQzLzEvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQtMDZhNDk5NjhjMmQz
LzEvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAo+tcV8
9aTVGfDsJnC7I/9EQIoagMJxYD71Txum9zUFQWXzvOdUNmvKfi0aR3iAIoFj+oUu
yNjrR5/ulDtRVK+wwavbaQwEHxq3iNA3W+WNhVGy5D0bZRRZ/PYrDZEgo8CQTxIY
8HbpZIR+2MNOsiWihbYAgxgU9BMKUzKGluFMCEkAo/c4esh3TD0YfjBECAsNM0Zx
iPxkIE0sWWXJF796VcUuXXe3Swz4YJagEbRwVLhpvFyjq4P/qcZzTrImVaP4nPEA
QMZq4nbPpB/GsDz6NxjB4PCAAUGxhlrmCdjrVDJgGh+bk+vFR6OBwWb2jW1ewzu9
EiJMNNFwgbST1A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:06:42 2026 by rpki-client