Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
File: HvpZajEmrOApxtcNUpJX4Hs4ugY.mft (raw, json)
Hash identifier: 68byhfRm0EnsNN4O8PjFs99MKfJ7RXgZEc7mtENzB6Y=
Subject key identifier: 15:99:7D:14:88:09:2F:86:4B:B2:A8:4E:8F:54:2D:39:1C:59:1B:F5
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial: 019D9818819BA33292BA851AEDCB80657C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
Manifest number: 18C9
Signing time: Thu 16 Apr 2026 21:00:36 +0000
Manifest this update: Thu 16 Apr 2026 21:00:36 +0000
Manifest next update: Fri 17 Apr 2026 21:00:36 +0000
Files and hashes: 1: 5bPAfHY71g1tz33WhyemzOl8Afo.roa (hash: TP978Gguy7Dyr8s78cghRC57XCgceUKU/R4E1xx5GXM=)
2: FrDGqtAlSdh4w6GnxdkzTd7bHd8.roa (hash: cZLJ2r1Doel5lpVBvhmnLBua06MQetotpEsjgD1nP28=)
3: HvpZajEmrOApxtcNUpJX4Hs4ugY.crl (hash: sSkdrqmmazB3R/xzNUFoEbuWkk0FzfmGXhuWEVLf0RM=)
4: Jgw1Gx1dPclOABYcbQJfITbOPSs.roa (hash: BIdjPDAk2zyiIML1uGPD7J7cytE8YqCkn/DCRcCwXHg=)
5: WmQL_VXpmFEvvoiR5PkxFDta9mk.roa (hash: 17mQDCBUS/Kj6BwRHUdOrAKzENyd7WfmRdfkyMXwsNg=)
6: k0uiX_PSGOLpmHbIawhjH3EL4VU.roa (hash: bIgcQVO40YbjY2beu9BGZjDPrIJm2Cv7wEtLZBhcVvU=)
7: oWfoIebl0vdlosgiWt_PqvTMCvI.roa (hash: sSMkZCHcY8051GIBXnABdJ427F125fjlpin/p+USqXE=)
8: u4N4FwbZU3R4YrPAif2Bhql7uXo.roa (hash: j1Aeh/ewSlpsUAcZ6gs1u3mvHVZZFBD8JqF3ICrH+Og=)
9: ukePksioR9rZ806d8URQYeRLONE.roa (hash: EXhlSdLPcjyLmaBcE0rpgx1b7yqNH2I+X3p7p/NtRc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:81:9b:a3:32:92:ba:85:1a:ed:cb:80:65:7c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
Validity
Not Before: Apr 16 21:00:36 2026 GMT
Not After : Apr 17 21:00:36 2026 GMT
Subject: CN=15997d1488092f864bb2a84e8f542d391c591bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:13:a7:d9:5f:ae:36:76:b4:91:ea:8f:3f:
a7:5c:db:00:d7:08:68:e0:0c:50:48:82:c3:2f:74:
83:85:04:96:e8:f4:ab:91:f7:03:96:57:45:12:0c:
f6:39:bf:ab:51:14:a6:33:6a:52:60:95:56:94:c6:
89:e1:c5:28:9c:4d:d5:0c:19:2f:ad:3f:70:c9:b8:
30:2c:ec:16:02:82:39:24:13:69:a8:2e:6b:ec:e1:
cd:03:05:89:cf:ed:12:d2:a2:71:fd:8d:95:3a:8a:
05:b6:59:c0:6a:79:9e:ea:e6:5b:ca:4c:18:fe:cd:
8c:55:5e:bf:c9:e3:0d:7c:c0:c6:fa:95:bb:cf:02:
d1:50:37:e3:fd:7d:62:3f:96:a9:df:e3:86:9f:05:
e6:54:06:60:85:3e:e1:e0:21:b3:a2:8a:4e:cb:02:
38:b7:8a:91:ac:ff:c8:35:ac:16:d3:37:ba:7a:b7:
c6:de:55:9f:92:52:78:f2:c2:fa:b5:89:b1:e7:13:
f1:c6:3c:ab:f3:eb:2f:54:23:6f:29:19:38:ad:58:
7c:2b:cb:b7:f0:9c:c8:d8:a8:79:29:14:d5:b9:1e:
bd:eb:ae:7f:46:4e:75:17:43:93:d1:3f:ed:00:ea:
f1:2e:16:06:b5:ee:6a:a2:c5:4b:6a:cc:4a:bd:1d:
70:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:99:7D:14:88:09:2F:86:4B:B2:A8:4E:8F:54:2D:39:1C:59:1B:F5
X509v3 Authority Key Identifier:
keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b7:93:ab:03:bd:40:15:c9:36:b3:11:60:f7:97:82:2a:5b:
88:b8:4a:b0:b8:23:24:00:d5:9a:d7:52:3b:7e:2c:29:cb:f3:
8a:3f:86:22:1b:0b:96:67:6b:11:86:6f:91:1f:c7:09:4e:b4:
83:ad:69:b9:03:09:82:6b:7f:7e:1b:97:0a:24:23:95:23:49:
65:35:c2:11:bf:24:51:73:e7:3a:26:e2:68:5a:ae:ac:49:73:
c0:e6:d7:70:10:61:7e:0a:11:8e:95:c9:92:7b:34:be:24:56:
c7:e2:04:e6:29:1c:52:e5:67:8a:6c:5f:48:99:92:12:7b:5f:
1c:72:70:6f:f7:8e:e1:a1:8e:95:69:94:a6:03:27:22:4e:01:
e5:99:86:16:16:5c:89:77:c5:bd:06:fd:61:17:d1:35:62:ca:
09:33:e7:e7:8d:81:8d:a2:5b:fe:54:c9:72:db:47:1a:58:4f:
f8:52:bb:fd:0f:c3:93:d7:7a:4d:e4:87:dd:5b:67:3d:77:51:
f5:58:63:c7:76:13:ee:36:ac:08:93:1f:62:65:06:b0:9c:6b:
bd:2b:ee:99:f7:4a:9a:45:5a:55:9b:4c:46:9a:f5:8d:af:b4:
bb:d0:ec:07:43:cb:8b:9c:0c:e7:17:83:a4:d4:e5:34:a4:22:
08:f3:df:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:05 2026 by rpki-client