Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
File: HjmCheIngn2PLFHx6plzV1VL5hI.mft (raw, json)
Hash identifier: T4oCA/edVCvEZUHtNhmfL0KiOnlKuzln/iA9cEtzbcg=
Subject key identifier: 36:46:63:8C:69:6B:CB:A1:99:26:D4:A9:C3:86:BB:DF:3A:BC:0B:C0
Authority key identifier: 1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
Certificate issuer: /CN=1e398285e227827d8f2c51f1ea997357554be612
Certificate serial: 019D9818B3CB168E6D13F745CCE0ADEE8E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
Manifest number: 18C8
Signing time: Thu 16 Apr 2026 21:00:48 +0000
Manifest this update: Thu 16 Apr 2026 21:00:48 +0000
Manifest next update: Fri 17 Apr 2026 21:00:48 +0000
Files and hashes: 1: HjmCheIngn2PLFHx6plzV1VL5hI.crl (hash: T2I+Kf3afjzPs4PShj1pEKJdUOtQ69Sdl+MG3ownC50=)
2: u7HurLe1N6a5tmgpeAM_l46SL2A.roa (hash: FNqj3YMXJAvL9/wTL5cuE2GwV4N05I6EVIR6yQYxrQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:b3:cb:16:8e:6d:13:f7:45:cc:e0:ad:ee:8e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e398285e227827d8f2c51f1ea997357554be612
Validity
Not Before: Apr 16 21:00:48 2026 GMT
Not After : Apr 17 21:00:48 2026 GMT
Subject: CN=3646638c696bcba19926d4a9c386bbdf3abc0bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1e:80:57:88:b4:68:05:51:52:ee:55:6f:6d:
43:14:c6:65:39:7e:26:e9:ed:5c:17:eb:21:a7:21:
f6:48:1c:3e:4b:9f:e6:13:87:ef:70:07:06:64:47:
7e:e9:e3:67:c8:76:02:67:a1:01:19:37:f2:4f:e2:
c8:87:f1:5b:e3:29:a7:d1:d8:16:41:14:16:28:f7:
a0:7b:da:02:16:22:c1:20:62:55:13:bc:bd:fd:e9:
d2:ee:3f:d1:1e:ab:7d:93:5c:d6:2d:e7:f5:e0:1e:
76:67:8a:d2:75:e6:54:77:d1:9e:7e:f0:a8:c0:9b:
61:87:6a:f0:97:f9:89:80:50:cf:bd:f7:b9:6b:63:
b4:28:8c:d4:78:1b:2c:4c:97:1d:28:83:60:5a:e2:
37:f1:20:7c:69:17:02:ec:e0:7e:6e:2d:81:15:2b:
fb:6e:fd:24:fc:be:1c:e5:75:5b:50:b9:41:c2:d9:
08:52:33:15:4a:f8:bb:c3:97:8d:6b:05:4b:6f:ef:
90:20:35:b2:4d:04:a3:39:a8:29:70:f3:3e:e0:cf:
60:78:8e:98:cd:31:98:f0:0e:76:00:d9:50:86:2b:
22:c3:c5:2b:5a:4b:d9:fc:59:4b:ea:d6:ec:5d:26:
44:21:75:f6:30:ea:6f:bb:88:0d:87:fe:89:3f:5d:
46:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:46:63:8C:69:6B:CB:A1:99:26:D4:A9:C3:86:BB:DF:3A:BC:0B:C0
X509v3 Authority Key Identifier:
keyid:1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ae:a2:2f:e4:d2:20:26:04:f0:60:cd:c6:38:7f:e8:5e:0a:
e0:c9:a0:eb:6d:da:54:3f:91:9c:e6:5a:50:f0:e8:8b:b0:c8:
5b:d5:22:e0:ea:43:47:f7:1f:c5:9c:d0:78:00:a3:c9:02:55:
c4:5c:4d:3a:90:5e:0c:dc:e0:97:0d:7e:05:22:67:76:e0:96:
19:6b:c6:9c:50:ae:98:ed:fd:9d:32:5a:54:03:a1:9e:94:ec:
8c:f7:61:27:6e:f6:49:dd:e1:8a:8d:46:bb:43:53:93:1c:21:
38:85:df:68:46:f5:e0:76:bf:e6:2a:19:a5:88:d9:35:5f:df:
25:52:34:f1:5a:d5:a6:48:24:8d:44:4b:98:61:18:cb:71:d1:
61:35:e5:35:1d:55:47:41:e1:93:bd:9f:cb:91:07:a0:e9:dd:
eb:85:09:3f:06:c1:f0:df:49:3d:95:50:ed:4b:82:68:36:5f:
e8:5a:44:a2:f7:a5:f1:83:35:36:d3:32:25:9f:89:b5:d9:4a:
5d:32:c4:91:12:dd:40:b7:19:25:4d:cf:e5:6f:81:62:16:2f:
5f:71:15:d2:d6:4d:c7:7e:e8:81:7d:71:26:1c:3c:85:5a:fb:
6f:c2:43:ed:78:f6:79:5f:99:17:70:8b:3f:98:24:b8:f6:04:
41:f7:fa:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:41 2026 by rpki-client