Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
File: hqSVrmh0HnnVjjiGviqoeMSME7Y.mft (raw, json)
Hash identifier: LK7D9vq/08Q0p0ymthWhqd15cIoYbksj6aU/VXFDXJ0=
Subject key identifier: 35:93:5E:63:DF:0E:8E:67:E8:81:F8:28:2A:98:42:D4:FF:15:8E:32
Authority key identifier: 86:A4:95:AE:68:74:1E:79:D5:8E:38:86:BE:2A:A8:78:C4:8C:13:B6
Certificate issuer: /CN=86a495ae68741e79d58e3886be2aa878c48c13b6
Certificate serial: 019D9BBE99114EB11387B29A3D5616027A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqSVrmh0HnnVjjiGviqoeMSME7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 14:00:52 +0000
Manifest this update: Fri 17 Apr 2026 14:00:52 +0000
Manifest next update: Sat 18 Apr 2026 14:00:52 +0000
Files and hashes: 1: hqSVrmh0HnnVjjiGviqoeMSME7Y.crl (hash: FAkyGBEs/V0vJEAr13OFgkt00gOCqCxEJcfPJXECPEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqSVrmh0HnnVjjiGviqoeMSME7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:99:11:4e:b1:13:87:b2:9a:3d:56:16:02:7a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a495ae68741e79d58e3886be2aa878c48c13b6
Validity
Not Before: Apr 17 14:00:52 2026 GMT
Not After : Apr 18 14:00:52 2026 GMT
Subject: CN=35935e63df0e8e67e881f8282a9842d4ff158e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:99:24:1d:92:43:90:47:58:b4:5e:ce:95:93:
71:76:7b:e5:8b:25:66:d8:e1:21:56:3a:57:98:73:
96:06:82:83:b3:c2:19:09:6e:3b:ed:55:9f:69:bb:
c7:e2:02:69:58:be:b5:81:61:a3:a7:69:8d:44:c6:
3d:65:61:44:4f:1a:60:0e:f7:21:c9:7c:c6:db:d9:
db:8c:49:b4:0d:27:1d:c0:a0:77:11:4d:83:c9:4e:
f2:f8:29:7e:0a:2e:8d:6d:f1:21:ad:38:a6:1b:bf:
6c:f0:74:9c:8f:5e:62:f7:21:83:46:4a:9e:a5:78:
32:0f:cd:29:be:0a:e2:91:bc:e6:21:0e:71:40:92:
7a:76:96:00:de:e7:90:bf:23:70:fc:c8:07:fd:c8:
0c:23:3b:e8:59:52:bc:3b:c5:28:53:f5:f2:af:76:
7e:ef:3c:50:7e:d6:cb:a0:be:18:86:83:47:66:72:
9b:be:ef:5d:02:1c:2b:c7:9c:72:51:66:6e:60:51:
38:fa:11:d7:49:2e:93:12:47:02:76:45:d8:38:0d:
d3:8f:8c:99:31:70:6e:e8:a5:80:71:93:6b:f1:99:
96:e8:57:41:01:19:15:b8:1d:28:25:31:48:f2:15:
04:d3:a9:f9:8d:33:7c:0d:d9:f0:66:b9:a3:6a:de:
9a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:93:5E:63:DF:0E:8E:67:E8:81:F8:28:2A:98:42:D4:FF:15:8E:32
X509v3 Authority Key Identifier:
keyid:86:A4:95:AE:68:74:1E:79:D5:8E:38:86:BE:2A:A8:78:C4:8C:13:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqSVrmh0HnnVjjiGviqoeMSME7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ed:43:6d:60:31:a9:14:94:8b:5f:ca:4b:5e:4c:a1:c4:86:
bd:2b:5b:84:51:60:0d:d8:8c:9e:7a:87:01:39:a2:20:8d:80:
6a:35:2c:27:cf:c7:d9:e9:5a:99:1f:62:17:94:15:f9:b9:0c:
1e:ea:d9:1e:4c:b1:d9:19:ad:8c:9e:4b:a5:e1:24:47:f5:bb:
bb:11:07:8c:40:ed:c7:1a:30:09:40:12:47:a6:17:43:ad:2f:
dc:22:f4:48:cd:8f:f7:07:ae:67:2f:26:e4:df:27:63:56:dd:
53:9a:13:e8:91:96:8c:11:cf:ab:ec:1a:9f:a4:35:7a:03:ae:
b0:0d:ae:c8:25:80:b1:22:cc:e5:f4:18:c3:a6:ce:87:d0:e7:
94:28:4b:2f:2f:15:12:3f:e3:e5:cf:41:ce:a1:0c:9f:5c:ed:
ad:bd:5f:9c:8e:9e:b6:5d:69:8b:3f:5b:27:28:6b:ed:a9:4a:
34:e8:e3:d8:b8:24:45:48:69:cd:79:14:e0:41:61:d6:c8:8c:
e7:04:00:f8:a7:8f:71:65:34:c7:21:a1:85:64:ee:27:90:f5:
09:3a:b6:8c:55:a1:de:5c:5a:93:43:78:a0:d7:53:e1:30:4f:
be:5d:38:35:97:00:94:ce:9d:6e:cb:1c:08:27:14:68:a8:97:
b0:1e:d3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:08:04 2026 by rpki-client