Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
File: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft (raw, json)
Hash identifier: hodopfSICTicBa5LA+9U2vQaVERgsyA469IRDsc0TOg=
Subject key identifier: 40:9C:17:7B:69:D1:46:7F:A8:3A:AF:4D:72:C7:22:83:2B:DD:31:C9
Authority key identifier: 86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
Certificate issuer: /CN=86c4112efc9bed84761d3678b87c483948d2a72f
Certificate serial: 019D9818DE8223955428684C02E7DD81FAE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
Manifest number: 15F7
Signing time: Thu 16 Apr 2026 21:00:59 +0000
Manifest this update: Thu 16 Apr 2026 21:00:59 +0000
Manifest next update: Fri 17 Apr 2026 21:00:59 +0000
Files and hashes: 1: ZLAxEh4litD4nIq8JP6jHqrQBEI.roa (hash: wOnTcEEXKGcVn5w5YtBIgaG5tAO0klLqAJlQ/7xmzWI=)
2: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl (hash: Mam1ietdF7PJx1yu2SeD6j5yb5ZOHExBAewMpUvf2Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:de:82:23:95:54:28:68:4c:02:e7:dd:81:fa:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86c4112efc9bed84761d3678b87c483948d2a72f
Validity
Not Before: Apr 16 21:00:59 2026 GMT
Not After : Apr 17 21:00:59 2026 GMT
Subject: CN=409c177b69d1467fa83aaf4d72c722832bdd31c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:3f:04:46:d2:af:8f:ea:10:2a:62:91:4a:
7c:de:ba:b6:5b:c1:52:72:79:38:4e:95:fb:f6:c8:
69:b0:bf:c8:2e:e5:b4:2b:ff:78:b1:1b:62:e6:a0:
4b:8d:c7:4f:ae:cf:31:3e:61:78:6c:6a:92:3f:6f:
41:87:97:ea:a6:40:75:8a:9a:b2:9b:65:22:e8:da:
cb:08:d1:01:79:ef:0c:cd:f9:ad:e3:c5:44:5e:3d:
e6:1c:de:bd:57:cd:12:f1:40:b6:34:e0:c2:7d:9b:
4c:f1:92:b0:48:96:57:8c:ab:19:56:62:a2:64:c6:
0a:59:74:34:bf:7a:ed:f8:c5:14:07:0e:34:b1:7c:
0c:1f:de:c5:5d:be:6c:62:e2:f5:b1:bf:96:75:50:
e1:67:1d:8d:d3:b2:cf:e0:1a:f5:02:ff:8d:64:06:
66:3a:73:ae:72:86:87:a0:c3:ff:46:e7:5c:1c:5c:
fa:84:cb:3e:08:11:e8:b0:31:5c:56:85:0f:dd:29:
d4:51:8e:6a:68:d5:aa:65:63:f3:50:d4:7b:f7:b2:
22:8b:45:06:23:5f:0e:6c:9a:75:b8:36:c2:06:8d:
3e:fd:73:90:65:39:28:03:f7:4a:c9:82:ec:dd:6e:
a2:a5:68:48:34:07:6f:09:e8:0e:46:8a:1b:e2:4b:
81:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9C:17:7B:69:D1:46:7F:A8:3A:AF:4D:72:C7:22:83:2B:DD:31:C9
X509v3 Authority Key Identifier:
keyid:86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:80:90:62:91:81:1c:21:f5:82:a2:cd:12:e8:a5:5b:e6:c7:
14:06:0b:f5:94:0e:64:31:91:7c:c2:a5:a7:c2:42:bf:b8:83:
69:cd:db:c6:26:d3:18:e3:c6:e4:52:34:8f:97:93:83:4f:4c:
f3:85:5b:57:8d:cd:a2:00:82:7b:11:b7:9b:11:d9:fa:60:3c:
70:7a:8e:fa:96:7c:cd:3e:86:9d:98:0c:12:26:65:a5:a2:3b:
4e:a1:1e:c1:6b:b8:fe:35:1a:ed:7d:ad:ed:79:c2:87:6c:53:
5f:1f:58:60:75:22:27:48:cc:6b:b5:e0:45:e1:07:06:61:4e:
0b:69:0e:39:8a:3a:ec:43:f5:9a:c0:70:70:bb:cc:d2:b8:05:
55:0f:c2:5c:70:51:3a:3c:a2:63:f0:1e:8a:c6:20:ab:f3:a9:
fd:75:74:5c:db:a0:24:1a:60:69:53:76:e1:89:d5:cb:a6:90:
c5:e7:b4:38:31:d7:69:59:5a:97:df:16:b6:3d:e3:d8:37:fb:
d7:f6:30:24:f5:2c:3b:18:ea:64:3c:ab:c8:23:d0:75:80:86:
5e:00:ec:2e:f4:31:40:2b:10:6f:c4:41:d5:81:ea:f5:18:5b:
66:39:e7:a1:2c:78:a5:5c:65:f1:14:ca:62:18:82:91:0d:c7:
55:63:6f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:32:56 2026 by rpki-client