Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
File: HGnHYzivyQhbj71mm4t0vXqS1DE.mft (raw, json)
Hash identifier: f8FQrzIJak2WPZQvEV6ynI+ybXUHJrZeroWZno0dClA=
Subject key identifier: FD:64:97:B3:B8:68:96:3D:46:E8:8B:6F:03:83:93:2F:B3:AB:B7:4D
Authority key identifier: 1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
Certificate issuer: /CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Certificate serial: 019D9C62FC71698C991A40DF582E5779D2CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
Manifest number: 15B0
Signing time: Fri 17 Apr 2026 17:00:25 +0000
Manifest this update: Fri 17 Apr 2026 17:00:25 +0000
Manifest next update: Sat 18 Apr 2026 17:00:25 +0000
Files and hashes: 1: HGnHYzivyQhbj71mm4t0vXqS1DE.crl (hash: Yl5v6gnUYWIdUcOdI5bJlh3t6UasfF21yEokkpvIL+A=)
2: WAiJPERlMEAh5qrgyMMcndKbs6c.roa (hash: zfIldmOVBvuxzGlnGLqlwDlsMvOVa6R4F1tNInZRtk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:62:fc:71:69:8c:99:1a:40:df:58:2e:57:79:d2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Validity
Not Before: Apr 17 17:00:25 2026 GMT
Not After : Apr 18 17:00:25 2026 GMT
Subject: CN=fd6497b3b868963d46e88b6f0383932fb3abb74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:80:30:62:c0:11:7f:bb:8f:1b:18:4b:93:fa:
a1:b3:8b:df:26:8b:be:45:fe:b8:8f:6a:50:81:38:
f0:cb:2f:57:2d:58:b3:86:16:56:70:82:1f:60:dc:
67:62:bc:79:e6:d4:bd:d7:32:39:da:ed:56:95:f0:
e3:de:8d:8c:fb:34:f5:26:94:7a:5c:85:6e:3d:d6:
6f:7c:ed:38:70:12:a1:3b:bd:82:40:1d:5b:31:78:
4a:00:e4:cf:ac:c2:bd:91:07:38:20:70:52:88:a4:
38:30:bc:bb:e6:2e:8a:87:41:8d:f0:52:0f:0e:a7:
29:74:2c:76:a1:ec:80:d1:80:bb:32:58:fa:57:ab:
fb:cf:d6:28:33:11:b6:e2:8a:f1:a3:a4:bc:d3:14:
ed:a3:16:24:36:03:7f:9d:ec:67:46:3c:d0:d9:bc:
3e:ce:e2:36:e8:29:8a:f6:4c:86:90:a4:d4:f6:f0:
7c:50:52:c6:ae:58:ed:72:e8:ee:25:df:49:25:90:
ee:9d:50:84:01:35:1d:7e:78:67:39:fe:ec:f6:1e:
59:2c:53:91:d1:48:fc:48:b1:6f:b1:16:3a:9d:54:
4b:94:16:32:7d:e8:59:d6:0d:10:61:cf:94:64:c6:
17:dc:19:4e:64:56:88:79:d7:3f:a0:37:28:f0:36:
95:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:64:97:B3:B8:68:96:3D:46:E8:8B:6F:03:83:93:2F:B3:AB:B7:4D
X509v3 Authority Key Identifier:
keyid:1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e7:da:ab:1e:3a:e1:84:29:9a:2a:57:f4:37:c9:ee:0f:02:
5b:fd:bc:5d:c8:7f:33:10:4d:ee:30:c1:13:19:91:3d:38:f4:
50:15:d2:8a:04:e0:81:59:51:a9:60:64:c3:ab:33:74:ae:bb:
0d:ff:a4:95:bf:b7:69:9c:27:62:70:a5:e1:87:88:32:0f:b2:
dd:e1:a0:98:27:c6:a0:9e:66:79:71:1c:30:ed:ed:07:c5:25:
b7:a9:fc:22:f7:be:9d:53:ff:80:d2:ec:26:89:bd:d3:59:60:
44:40:b0:84:9a:28:82:ff:57:60:eb:f6:94:37:54:ef:b1:68:
5f:3f:85:16:6a:34:54:a3:06:34:0f:c5:47:d2:23:ed:0b:24:
a6:37:35:87:bf:47:30:8e:b0:b7:a9:c0:ca:64:ae:14:69:b3:
cb:70:4e:e8:70:b5:10:04:a5:c1:e4:70:3a:f2:39:b8:4a:1c:
15:ce:46:75:42:e1:72:bd:a7:b7:0b:e2:b6:c4:d0:24:c7:62:
24:c3:b4:ff:ce:d8:b1:02:74:bb:3c:89:00:12:1b:f7:d7:c9:
8c:70:40:c6:be:9b:47:13:01:e7:bf:b5:bf:7c:20:fb:da:3d:
23:b5:cd:5e:dc:2a:42:cb:94:8b:be:30:69:fa:8b:f9:85:95:
39:02:fd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:45:03 2026 by rpki-client