Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
File: Hqemr7IbsUh0L2FV0aOa_I_H55w.mft (raw, json)
Hash identifier: X5GTa/XaPr3aSRzWmJfQ16t7gqHT+1xz1nxjO8owATM=
Subject key identifier: 90:2A:E5:14:CC:84:15:91:AB:BF:C8:4E:A9:19:9E:BD:FC:FD:6E:3E
Authority key identifier: 1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
Certificate issuer: /CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Certificate serial: 019D9AAC3D05C533C41DF7879D8F50818E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
Manifest number: 1206
Signing time: Fri 17 Apr 2026 09:01:12 +0000
Manifest this update: Fri 17 Apr 2026 09:01:12 +0000
Manifest next update: Sat 18 Apr 2026 09:01:12 +0000
Files and hashes: 1: Hqemr7IbsUh0L2FV0aOa_I_H55w.crl (hash: 6LD1rEN936bBEbVr/S7dSkSNsEnKbwGmDp5Ruw8ysk4=)
2: fSE8Q3BHF-37hTlX0eyFzGv4iBc.roa (hash: pVD8HGH2rJXCl52itQj8YwGZtz7maygncTTWGAdWmOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:3d:05:c5:33:c4:1d:f7:87:9d:8f:50:81:8e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Validity
Not Before: Apr 17 09:01:12 2026 GMT
Not After : Apr 18 09:01:12 2026 GMT
Subject: CN=902ae514cc841591abbfc84ea9199ebdfcfd6e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:cb:45:e8:4e:09:f5:08:51:c9:53:61:6d:ce:
24:c1:e0:fe:b9:aa:38:1a:f7:73:fd:53:8b:a5:d1:
90:a3:1f:59:53:a7:18:96:2b:84:3e:ac:ae:a8:15:
6e:aa:26:34:22:0e:e0:56:32:3b:79:8b:b9:26:b4:
24:8e:3d:69:72:56:f2:40:97:b4:74:b9:26:a9:6e:
ca:90:be:14:79:27:73:76:f6:52:17:0f:c7:d5:a5:
6c:33:a7:d7:09:14:c4:7d:23:5a:8c:ef:a7:be:da:
2f:a7:b7:ba:bc:09:73:1e:ef:87:c4:eb:c9:9c:9e:
a7:5c:8a:dd:db:08:4d:20:95:bb:e7:9e:48:01:3a:
0f:d1:7e:f9:ff:75:77:7b:bd:9b:cd:18:a3:d2:8c:
7e:11:61:2c:df:d6:f4:ee:60:25:ff:7e:ee:fc:e3:
39:fa:70:18:f0:6a:2e:a6:d0:78:00:3f:34:cc:3c:
e6:f6:92:57:b1:2c:71:bb:80:9e:de:1e:7a:6c:a3:
ef:3e:65:92:de:51:3a:3f:7c:61:77:73:4a:22:93:
fc:f7:2d:b2:0f:0c:79:b5:48:95:bd:84:d7:f5:60:
17:f1:b2:8d:3b:75:80:28:83:da:9c:79:b5:c4:97:
43:0d:0e:13:c0:1e:56:3c:24:5b:52:a5:54:71:2e:
88:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2A:E5:14:CC:84:15:91:AB:BF:C8:4E:A9:19:9E:BD:FC:FD:6E:3E
X509v3 Authority Key Identifier:
keyid:1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:75:a4:04:9f:0b:42:6c:bc:ab:33:be:7f:d1:a7:7a:5c:7a:
f0:96:12:95:96:d9:42:8d:69:ff:c8:34:69:c1:91:d9:eb:43:
12:b8:07:44:ac:22:58:58:00:fc:40:95:bc:69:a8:1d:e0:22:
1a:92:b9:aa:e8:05:5c:0a:a2:ed:0b:93:ba:2a:46:8f:6f:8f:
25:ef:39:81:a6:93:f8:e7:dc:a0:a6:1b:ab:4a:51:2d:e9:2a:
1c:59:6d:fd:db:94:21:b5:b6:85:6b:ed:46:d0:06:63:4e:cd:
83:9f:d2:4d:60:46:62:71:5d:0e:a2:34:e0:ed:05:30:d6:65:
68:d9:68:2f:69:fe:55:7f:52:3f:36:7f:66:de:8e:6d:9f:58:
94:a8:72:14:44:56:dd:6c:80:7b:c1:23:4f:1b:42:09:b7:b4:
f7:df:c5:59:66:0f:05:37:62:f0:bf:ad:93:b3:d3:08:8a:df:
de:31:3b:90:bf:bf:ae:8c:92:f7:42:7a:cb:b2:80:40:2f:63:
9e:74:d1:da:cb:5d:27:e9:58:73:5e:a8:9d:03:6e:b7:ee:c8:
3a:6f:19:16:81:e9:3b:a6:f2:fe:dd:a9:73:72:68:c8:45:b7:
63:00:c1:b4:a5:e8:7c:e1:a0:36:34:1a:ef:0a:19:14:38:66:
3e:1d:52:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:19 2026 by rpki-client