Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
File: Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft (raw, json)
Hash identifier: REcW6MApJkLmXFtvtMaAR3HAp9/YomD5WnpvX0zt5o0=
Subject key identifier: 5F:77:CA:5E:1D:F5:A6:FF:DC:7F:82:66:E1:81:7C:AA:86:35:03:53
Authority key identifier: 1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
Certificate issuer: /CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Certificate serial: 019D9CD17155EBA9DF1E06CC5CB89C679B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
Manifest number: 0812
Signing time: Fri 17 Apr 2026 19:01:04 +0000
Manifest this update: Fri 17 Apr 2026 19:01:04 +0000
Manifest next update: Sat 18 Apr 2026 19:01:04 +0000
Files and hashes: 1: Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl (hash: xxeSSdYwYC8SECFnKX/nFIHJ4ociqI6yWqaWj72pdCY=)
2: lx2J9WOsX2M54t8-J-Ipl4_XUM4.roa (hash: jlAohhibW/lQaiHQMqOapsCsgW9kpTO6lOTRSlTXr4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:71:55:eb:a9:df:1e:06:cc:5c:b8:9c:67:9b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Validity
Not Before: Apr 17 19:01:04 2026 GMT
Not After : Apr 18 19:01:04 2026 GMT
Subject: CN=5f77ca5e1df5a6ffdc7f8266e1817caa86350353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:47:a9:db:ba:9e:88:33:8d:2c:60:b7:f7:
63:8c:bf:f9:dc:2c:68:55:d5:3d:c4:ff:f9:20:e4:
79:4e:1c:a5:a6:b2:a6:41:44:d1:b9:26:b8:93:5f:
eb:6a:fd:73:0c:2f:70:e7:91:e6:33:97:bd:02:2d:
aa:97:0d:53:f1:e0:0e:62:0a:86:f4:38:c8:3c:0a:
e0:2f:5a:69:15:ab:dd:27:69:b8:9a:3a:9d:f5:e8:
e4:5a:54:e5:97:ee:ce:1e:6b:a4:c6:be:51:ad:65:
57:8c:60:80:bf:3a:a0:a7:55:8f:bb:2f:46:8f:97:
b9:47:aa:a5:68:14:f3:53:78:fe:d6:8a:1e:74:eb:
78:c9:7b:d3:3d:1f:83:57:18:6c:27:71:2e:66:22:
dd:1e:26:17:44:3d:75:be:2f:45:31:18:1a:e0:ca:
a2:49:61:da:56:23:1c:80:1e:a1:45:fe:5f:0e:32:
61:29:bc:c5:68:0b:06:30:71:22:7c:33:79:00:b7:
a2:b3:f9:66:73:2e:99:22:d5:e4:3c:93:7f:fe:38:
96:85:ce:3e:79:63:ec:ae:2d:c0:bc:aa:c9:6d:8d:
9d:af:0c:77:08:56:bd:7f:13:b6:8a:a3:0c:d5:33:
f2:a4:cd:c8:0d:a8:aa:c1:84:f6:8e:a4:ce:78:29:
5f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:77:CA:5E:1D:F5:A6:FF:DC:7F:82:66:E1:81:7C:AA:86:35:03:53
X509v3 Authority Key Identifier:
keyid:1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0e:f5:df:92:d8:92:a5:41:2f:6a:20:2d:24:9f:35:04:f6:
83:44:ea:a9:4f:c8:30:b2:b8:a2:f0:02:d0:3d:1b:37:07:85:
11:71:0c:d8:39:cd:1e:47:9d:1e:b6:23:21:a2:d4:ec:69:ae:
0b:70:4a:7a:cc:e9:7e:bd:ac:5b:0e:da:2b:e7:a0:98:99:2b:
38:f2:fb:1d:c5:c5:17:8e:2c:a0:8a:e1:9c:dd:1c:18:ed:b8:
27:85:9a:7b:38:9a:1f:61:27:29:64:70:e7:19:34:25:60:16:
f1:d8:83:8f:05:86:77:2c:98:dc:0c:e0:d0:6d:d2:e3:be:91:
a3:16:38:2f:b2:a3:54:e4:46:0f:31:dd:81:75:d0:ba:f5:94:
c3:e4:ef:74:b4:ce:7b:d8:86:5a:13:27:de:01:7d:9f:b2:12:
81:0b:47:8e:8d:ad:c6:ed:64:40:2a:0a:8f:cb:92:b0:24:79:
67:0a:65:5e:96:ac:b2:ab:67:7a:8c:70:98:80:cd:ce:69:9a:
bf:1d:6d:e2:3f:b4:af:b7:52:ee:70:e0:51:bd:6d:c7:f4:2b:
58:ea:fb:b3:60:51:aa:ee:f0:f1:e2:35:eb:b5:dd:4e:f9:98:
95:20:f9:b2:96:f4:a2:de:31:c1:c0:36:17:92:20:f8:b2:82:
54:f5:58:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:52:34 2026 by rpki-client