Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
File: HvpZajEmrOApxtcNUpJX4Hs4ugY.mft (raw, json)
Hash identifier: f0mygCb9/hgR9MEI0RI+6LrNSB62CH51bLDE5kbZQVI=
Subject key identifier: 36:99:EF:FA:B9:B4:C2:2A:06:C3:1D:2D:78:D9:BB:48:7C:8E:1A:F4
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial: 019D9A075C0C126AB761516773727ADBFDA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 06:01:06 +0000
Manifest this update: Fri 17 Apr 2026 06:01:06 +0000
Manifest next update: Sat 18 Apr 2026 06:01:06 +0000
Files and hashes: 1: 5bPAfHY71g1tz33WhyemzOl8Afo.roa (hash: TP978Gguy7Dyr8s78cghRC57XCgceUKU/R4E1xx5GXM=)
2: FrDGqtAlSdh4w6GnxdkzTd7bHd8.roa (hash: cZLJ2r1Doel5lpVBvhmnLBua06MQetotpEsjgD1nP28=)
3: HvpZajEmrOApxtcNUpJX4Hs4ugY.crl (hash: nQNq8GJcLL3oOaU2Y6wcoALK8HoiWLnyIgYya+zBc1U=)
4: Jgw1Gx1dPclOABYcbQJfITbOPSs.roa (hash: BIdjPDAk2zyiIML1uGPD7J7cytE8YqCkn/DCRcCwXHg=)
5: WmQL_VXpmFEvvoiR5PkxFDta9mk.roa (hash: 17mQDCBUS/Kj6BwRHUdOrAKzENyd7WfmRdfkyMXwsNg=)
6: k0uiX_PSGOLpmHbIawhjH3EL4VU.roa (hash: bIgcQVO40YbjY2beu9BGZjDPrIJm2Cv7wEtLZBhcVvU=)
7: oWfoIebl0vdlosgiWt_PqvTMCvI.roa (hash: sSMkZCHcY8051GIBXnABdJ427F125fjlpin/p+USqXE=)
8: u4N4FwbZU3R4YrPAif2Bhql7uXo.roa (hash: j1Aeh/ewSlpsUAcZ6gs1u3mvHVZZFBD8JqF3ICrH+Og=)
9: ukePksioR9rZ806d8URQYeRLONE.roa (hash: EXhlSdLPcjyLmaBcE0rpgx1b7yqNH2I+X3p7p/NtRc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:5c:0c:12:6a:b7:61:51:67:73:72:7a:db:fd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
Validity
Not Before: Apr 17 06:01:06 2026 GMT
Not After : Apr 18 06:01:06 2026 GMT
Subject: CN=3699effab9b4c22a06c31d2d78d9bb487c8e1af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:8b:5c:12:59:2c:d3:cc:14:29:f4:ae:7a:
48:19:d5:ad:7a:67:c7:e0:3c:7b:00:76:36:b7:b9:
83:cf:c2:23:a9:9b:67:06:16:75:b2:e9:31:d2:5e:
b0:5d:02:b8:03:b2:50:96:89:32:9f:51:df:bd:e0:
83:5d:cd:3a:e4:5d:bc:ca:fa:8a:5d:86:be:3c:37:
ab:b9:32:00:c2:9c:15:1a:85:9b:9d:42:16:27:b3:
96:6a:49:61:71:b4:90:20:00:1d:b1:84:9b:68:8a:
99:d5:4e:85:0c:3c:06:77:2d:d3:4b:29:52:34:db:
1c:04:48:8e:b5:6b:91:07:b8:3a:3b:fe:eb:02:fa:
57:50:fd:36:b0:d3:22:89:ee:ea:f9:40:f5:99:4a:
92:b4:78:65:c0:a8:cc:f4:38:b3:82:4d:05:96:10:
c6:34:80:54:7d:08:14:5f:18:57:5a:33:41:34:97:
84:14:97:ad:18:b6:d2:70:2a:3b:ea:04:ab:4b:bf:
9e:9d:30:3a:f2:87:57:26:74:66:de:86:9f:52:cf:
fb:2d:32:40:89:19:f9:1b:99:1e:98:85:cd:93:ec:
2e:39:8a:5e:5b:d0:6f:4c:da:e3:26:ba:0c:6b:34:
6e:ad:3a:59:56:72:5b:68:93:81:e6:a0:00:ff:f4:
ce:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:99:EF:FA:B9:B4:C2:2A:06:C3:1D:2D:78:D9:BB:48:7C:8E:1A:F4
X509v3 Authority Key Identifier:
keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c4:93:65:dc:d2:0e:24:14:98:2b:40:13:f0:d8:e8:76:91:
09:0e:0c:bd:2d:07:2c:98:db:c1:11:35:78:81:2a:d6:16:61:
2b:2a:be:e0:82:1f:0b:e5:3e:c8:07:ed:8e:8d:a7:ec:71:e0:
a0:ff:c1:0b:e1:a0:95:ed:03:0a:97:51:ad:24:e6:30:77:2b:
66:f6:dc:f8:e7:ef:70:d8:2c:07:cf:0b:9f:eb:0d:23:b9:a2:
4f:fd:1a:c0:f5:54:08:85:e1:0a:9e:41:7e:29:94:f7:b2:78:
dd:e2:4d:c7:8a:80:ef:65:df:37:40:47:78:ca:87:7e:eb:73:
d1:20:1a:0e:22:c9:e4:15:84:fc:89:04:c0:3e:c9:91:c8:f7:
f3:b0:4a:ca:bc:db:23:75:1a:2f:d9:53:f6:8e:71:c7:03:a9:
7e:1c:58:d2:9e:dc:c0:44:65:3c:bf:26:03:5c:d0:6c:2e:f4:
3b:e9:90:dd:8f:54:ba:97:9b:74:b4:a4:de:10:50:a4:5c:c9:
a3:1b:bf:a6:fa:37:b9:af:10:08:c8:2f:3e:1a:b4:57:f2:1a:
ce:9b:52:5d:c7:0f:34:6e:a5:58:26:ad:c6:6d:30:f1:1b:eb:
60:d3:eb:7f:e8:ea:d3:dc:7f:f0:9c:a1:af:56:db:4c:04:03:
af:e7:b1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:37:54 2026 by rpki-client