Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
File: hqnzrkX3AVCvF-uHiel4iQKe5dM.mft (raw, json)
Hash identifier: FV4uXnta5nN/hBlDEuqGRY57pbKDkg8M5OAYIsNf1C4=
Subject key identifier: F8:4D:57:15:30:00:8D:25:B4:DD:C6:31:58:C5:3D:09:BC:DC:9B:C3
Authority key identifier: 86:A9:F3:AE:45:F7:01:50:AF:17:EB:87:89:E9:78:89:02:9E:E5:D3
Certificate issuer: /CN=86a9f3ae45f70150af17eb8789e97889029ee5d3
Certificate serial: 019D9AE2E14ED632BBE661F6B3EE3927A796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 10:00:53 +0000
Manifest this update: Fri 17 Apr 2026 10:00:53 +0000
Manifest next update: Sat 18 Apr 2026 10:00:53 +0000
Files and hashes: 1: O3Ze20ZxAwVm_hG9bsYyUaAYePQ.roa (hash: TSl1RQes/j1AF84x+h+cAOoSi4izTWDFh+hMOg3IRm4=)
2: hqnzrkX3AVCvF-uHiel4iQKe5dM.crl (hash: pSVRVESDDN0/La3KSerNsGv4uCKdVoTLS/sI5WNudVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:e1:4e:d6:32:bb:e6:61:f6:b3:ee:39:27:a7:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a9f3ae45f70150af17eb8789e97889029ee5d3
Validity
Not Before: Apr 17 10:00:53 2026 GMT
Not After : Apr 18 10:00:53 2026 GMT
Subject: CN=f84d571530008d25b4ddc63158c53d09bcdc9bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:34:f1:d6:47:d3:01:95:b7:61:d6:5c:07:
ad:58:6a:1d:90:c9:ae:9a:30:8c:f2:64:aa:4d:ab:
55:85:b5:1b:9f:23:98:ec:d3:b5:e1:9c:44:96:f9:
f5:c4:34:9e:30:61:11:9f:b2:bc:0f:cb:1c:cc:c9:
ce:81:cc:83:6c:5d:cb:35:ab:a8:ab:df:49:a7:da:
ab:71:4a:3a:4c:3b:e6:83:8e:b6:5d:33:05:4d:d8:
5a:57:da:55:d3:9a:b8:64:43:6f:e4:e8:dc:17:3b:
98:6d:d5:26:88:2e:42:5e:d5:5f:79:25:cb:d2:ae:
f4:e8:b1:2a:04:27:39:49:f0:5f:98:de:5c:89:bb:
4d:89:d4:66:3c:99:d4:74:96:d8:37:7c:53:93:fe:
97:ec:09:15:d0:50:d1:29:bb:0b:66:6d:5c:b1:e8:
03:cc:d7:d6:c6:64:29:9c:83:70:90:4f:dd:63:8c:
1b:b8:07:14:81:56:f0:51:f9:44:f5:6c:4b:9b:e5:
b1:59:bb:b5:e8:b6:6f:b6:0a:63:9e:ef:c9:88:04:
3c:00:ed:58:5a:fd:81:f7:c6:05:39:cc:9d:0b:8c:
42:33:f3:9a:38:9e:37:02:13:02:36:51:b6:b3:4b:
9d:8e:61:32:65:73:0f:fa:1e:33:4f:9e:80:72:31:
b7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4D:57:15:30:00:8D:25:B4:DD:C6:31:58:C5:3D:09:BC:DC:9B:C3
X509v3 Authority Key Identifier:
keyid:86:A9:F3:AE:45:F7:01:50:AF:17:EB:87:89:E9:78:89:02:9E:E5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:77:3d:fe:98:10:b2:14:5c:69:d8:dd:f7:70:c0:7a:02:b1:
37:84:98:7f:bf:29:a0:7d:88:cc:55:f5:16:29:58:19:89:f4:
7a:f2:c5:31:6d:73:b4:8f:2a:f3:b4:7a:ff:18:1a:f7:64:b7:
61:75:e0:4d:ae:80:3a:52:d8:24:a8:11:d2:f7:c2:ed:5e:81:
31:f9:2a:cb:8f:b9:80:15:b1:8d:15:73:80:7b:6b:e1:34:60:
5c:fb:28:76:e3:26:32:a9:c3:cc:0f:f1:7f:cb:58:a5:ad:03:
5c:4a:6b:3b:a6:9e:e2:88:34:c4:07:e3:18:e3:60:fe:c2:60:
a3:b6:f0:ec:1b:b2:7d:66:44:8d:47:f3:31:e0:0c:88:21:19:
77:b3:c9:25:40:48:c3:85:94:21:3c:cf:f0:6b:98:cf:f3:81:
26:6d:a9:fc:43:12:86:f0:66:5c:28:26:75:fb:b5:cd:78:93:
4c:db:b3:3f:1a:bc:66:fc:7a:4f:72:1e:6d:dc:9d:4f:b8:87:
ed:66:a0:38:28:cf:48:a2:7e:78:54:c1:f8:80:38:6a:27:96:
20:da:7a:8e:78:69:b3:9c:c3:c5:4c:3b:51:7c:f9:d2:42:af:
81:ad:f4:58:c8:29:99:ea:07:0f:bb:04:b3:56:36:fe:21:51:
c9:07:d8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:23:05 2026 by rpki-client