Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
File: HU6VkgCuqPuSkVi3PowOaaiNxek.mft (raw, json)
Hash identifier: eBCBPAoEl30+ZddR+nhV11bPy7A/W+AEiCQRP/FMo3M=
Subject key identifier: 58:9C:09:0A:51:03:69:63:32:47:63:7A:91:C3:90:1C:B8:A7:BE:A5
Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
Certificate issuer: /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Certificate serial: 019D98F4DC276D01CDC0937C888B5C8BDCE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
Manifest number: 1874
Signing time: Fri 17 Apr 2026 01:01:16 +0000
Manifest this update: Fri 17 Apr 2026 01:01:16 +0000
Manifest next update: Sat 18 Apr 2026 01:01:16 +0000
Files and hashes: 1: HU6VkgCuqPuSkVi3PowOaaiNxek.crl (hash: waVK8kk6ueE+0Iw2FAlv/ekt14AxaO0fjahBKLcIrs4=)
2: Y0yvGwL8N-nOEiU7zOM6SSHHJLQ.roa (hash: 8/QpRSCZ4OTmfd3cZORygSL1Lec3LinxRtnyUo2sHK8=)
3: j4FzHGNM-x8JCvJ06e6JApa0Mj4.roa (hash: F+UQE401zF1jsBTDqKt2hLCSf3ZWTZdmAcKzmrDSjF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:dc:27:6d:01:cd:c0:93:7c:88:8b:5c:8b:dc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Validity
Not Before: Apr 17 01:01:16 2026 GMT
Not After : Apr 18 01:01:16 2026 GMT
Subject: CN=589c090a510369633247637a91c3901cb8a7bea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:35:de:7e:32:26:a8:92:d0:9c:fc:ad:ce:c1:
43:e6:ff:a7:dc:b6:de:a4:a3:71:25:b5:de:cf:25:
b2:ee:2d:c3:67:97:97:37:72:ea:25:cb:e3:07:21:
24:b4:2c:00:05:72:70:43:9b:60:57:04:c2:88:63:
43:1f:af:ac:69:a9:e8:61:16:0b:c1:33:40:14:fc:
06:24:ad:b3:ae:2c:6c:77:78:f1:9f:2f:85:3f:e7:
9a:87:55:b4:f4:eb:0c:58:1f:87:1a:42:76:e4:a7:
78:3f:8b:c9:f8:d6:2f:81:b2:b8:80:cd:a5:e0:c2:
44:dc:a3:17:d9:f6:ac:7c:87:3b:de:d7:3e:01:4a:
23:13:ee:4c:8f:26:32:ee:f0:ed:93:e2:60:df:98:
61:6c:ca:03:3b:56:46:eb:32:36:f3:86:08:db:c4:
57:87:b3:91:a2:e8:7e:6b:27:da:cc:d2:7c:62:b4:
27:1e:55:f6:12:85:98:bb:1b:82:ff:7c:01:37:8f:
d4:22:de:a9:2b:05:7c:77:2f:c2:fb:bd:3a:85:c4:
23:ac:ab:1d:b7:91:53:7b:ce:28:ea:e4:1b:6f:c8:
ab:ee:25:c4:4b:11:61:3e:96:07:95:22:55:11:b0:
0f:ea:b7:7e:63:9b:f3:db:77:37:f0:2a:de:ea:67:
5c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9C:09:0A:51:03:69:63:32:47:63:7A:91:C3:90:1C:B8:A7:BE:A5
X509v3 Authority Key Identifier:
keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ff:4a:6d:dc:45:a6:ca:55:f3:36:48:5d:81:6e:9a:ca:f9:
0a:a3:22:2f:5d:b3:ef:47:cc:cd:e8:5d:9d:99:b0:de:fb:ea:
01:0a:69:c5:f7:59:4c:6e:cc:8c:2b:e0:d7:fc:65:46:91:37:
e0:54:da:7a:7c:84:aa:8c:be:d9:a9:9d:b1:77:54:c0:92:78:
27:36:75:69:c7:f4:c5:e2:ac:31:09:22:32:a3:0d:e6:70:98:
02:99:11:5d:13:af:5d:ad:d2:51:d7:2c:47:23:fc:86:02:39:
16:31:59:ea:30:8a:1a:1c:ba:99:fd:8e:8b:62:db:11:54:e2:
43:ea:ee:51:00:e0:c5:04:f6:26:19:82:c1:2f:83:ae:e0:a1:
01:2b:fe:f9:6f:2f:96:8e:e5:d3:8c:48:81:2d:3b:f2:a4:71:
81:2d:48:fb:df:48:af:70:ba:cc:41:03:92:4f:ac:6c:a9:85:
4d:d9:44:2d:2a:18:ae:ef:48:24:a4:f8:1b:78:51:0a:65:db:
e7:53:f1:05:af:89:b6:4d:5f:5e:cd:84:e4:a7:69:be:82:3b:
d9:c3:9a:f9:42:3d:e0:ab:71:13:36:2b:87:3c:a0:e6:c4:9a:
4b:b6:e3:71:0e:7e:e7:52:6e:5d:06:ed:f5:25:c8:12:24:8c:
cb:73:8f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:50:02 2026 by rpki-client