Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
File: HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft (raw, json)
Hash identifier: yRR9rpE+5o40qN5ewvexQ8i48fHhYDInbh6la5a82wM=
Subject key identifier: CD:0F:C9:AE:2E:8C:AF:33:8B:1A:09:7C:8C:AF:B6:59:C4:C7:4A:29
Authority key identifier: 1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93
Certificate issuer: /CN=1eaa87c6f8e320c93da9162250dac558c871dc93
Certificate serial: 019D9AABD0C9CA8326F6CBAE264BC15397F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 09:00:44 +0000
Manifest this update: Fri 17 Apr 2026 09:00:44 +0000
Manifest next update: Sat 18 Apr 2026 09:00:44 +0000
Files and hashes: 1: HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl (hash: A5+KhW/7Ahhi2JAh4PzGT94qM6wlIDVVHd8SXwVdlk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:d0:c9:ca:83:26:f6:cb:ae:26:4b:c1:53:97:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaa87c6f8e320c93da9162250dac558c871dc93
Validity
Not Before: Apr 17 09:00:44 2026 GMT
Not After : Apr 18 09:00:44 2026 GMT
Subject: CN=cd0fc9ae2e8caf338b1a097c8cafb659c4c74a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:d9:74:a9:b2:00:e8:dc:eb:92:da:ef:4a:
f5:5f:83:ef:6d:f4:ec:b3:b2:3c:40:23:9f:6a:65:
fb:7d:54:c0:8d:5a:e6:d4:d7:d4:5d:02:e2:c7:3e:
80:59:fc:95:13:fd:e6:7b:c7:12:38:06:02:cc:37:
d3:8a:79:a3:fa:b3:e6:6f:43:32:1b:12:29:5a:b8:
64:6c:58:b8:db:74:a6:d9:47:8f:71:a2:e4:53:f9:
1b:b4:91:1b:99:df:35:a4:a9:8a:7b:32:7c:74:f1:
f3:5c:b0:24:30:2e:c0:70:24:1b:93:60:31:3a:fc:
f9:a2:1f:ab:cb:96:bd:cb:4d:2f:4c:33:c2:d3:aa:
a4:04:15:5e:a0:2c:d5:7c:b2:5f:71:b0:4e:51:6d:
51:24:de:ea:81:b7:39:b9:aa:38:e9:2b:53:f1:c5:
d5:05:60:62:37:19:97:69:eb:e1:7e:d5:78:46:15:
8b:9c:ff:92:e4:31:36:be:a1:34:60:8f:41:63:c9:
d7:f4:1e:03:78:ce:18:5f:e2:f9:9e:18:80:6e:99:
e1:11:54:9d:ac:d3:1d:12:08:ea:0e:6a:61:ba:b6:
07:0f:eb:8e:47:cd:f1:d8:ef:39:d3:c2:7e:af:a5:
f6:cc:29:f4:b2:4d:86:47:99:34:ec:f2:6b:9f:92:
4f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0F:C9:AE:2E:8C:AF:33:8B:1A:09:7C:8C:AF:B6:59:C4:C7:4A:29
X509v3 Authority Key Identifier:
keyid:1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b7:5d:51:bc:6f:67:fa:41:da:a7:f0:80:30:bd:3c:04:e6:
dc:4b:96:75:92:f1:eb:39:ae:de:e8:f6:c5:dc:bc:76:e1:e1:
ab:ca:58:24:43:9c:04:37:5b:3a:d8:a2:9b:91:df:1c:5c:b2:
f0:f2:13:a3:b3:88:52:ee:d1:37:26:ad:e7:a7:f1:de:14:97:
eb:5a:fc:c8:7f:ba:0b:cb:68:2d:72:0f:75:02:2b:d5:5c:70:
b6:66:47:99:a6:07:65:e1:df:e9:17:fd:85:c8:a7:29:4b:5e:
0d:bc:c2:53:14:f0:b6:11:37:8f:9f:de:d9:34:7d:58:ae:be:
06:cf:2f:ee:28:30:fa:4d:3e:32:bd:71:33:56:93:be:7c:90:
69:50:cf:45:0a:ea:f1:a1:ef:bc:54:fb:04:15:6e:84:ea:7c:
b3:28:3b:17:a0:3e:e6:b9:0d:78:a7:fb:84:bd:02:77:ac:ef:
4f:44:47:37:17:9b:e7:04:56:db:d1:fc:39:72:57:79:4c:9b:
0d:95:8d:38:e2:ca:2f:42:2d:15:c1:01:cd:c6:2d:15:74:83:
ba:0c:76:22:76:70:5e:44:0b:72:71:6d:1e:28:ff:b0:9d:10:
40:c8:54:aa:03:f6:d0:36:0c:47:35:2b:dc:55:d3:ab:20:fe:
67:99:f3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:07:36 2026 by rpki-client