Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.mft
File: hkmqSzKHNVNtJ8Fozb9OoXdwHc4.mft (raw, json)
Hash identifier: l3KCWI5gN7vN7Utpj1P8qjE3BWWmVMx/by9Rjm9v+OM=
Subject key identifier: CF:7B:56:1E:E0:B3:5E:8B:B3:70:DA:EE:D8:2F:78:8B:6F:2E:E3:EB
Authority key identifier: 86:49:AA:4B:32:87:35:53:6D:27:C1:68:CD:BF:4E:A1:77:70:1D:CE
Certificate issuer: /CN=8649aa4b328735536d27c168cdbf4ea177701dce
Certificate serial: 019D984FD9BEB8344C7A0F7DB3DB6C982F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.mft
Manifest number: 18BE
Signing time: Thu 16 Apr 2026 22:01:02 +0000
Manifest this update: Thu 16 Apr 2026 22:01:02 +0000
Manifest next update: Fri 17 Apr 2026 22:01:02 +0000
Files and hashes: 1: hkmqSzKHNVNtJ8Fozb9OoXdwHc4.crl (hash: c0fkZMg13le+U6drp8EG8sp7vPK17WY1imbTLY7pyG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:d9:be:b8:34:4c:7a:0f:7d:b3:db:6c:98:2f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8649aa4b328735536d27c168cdbf4ea177701dce
Validity
Not Before: Apr 16 22:01:02 2026 GMT
Not After : Apr 17 22:01:02 2026 GMT
Subject: CN=cf7b561ee0b35e8bb370daeed82f788b6f2ee3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:11:c6:0f:d3:a8:33:58:f3:80:20:51:dd:51:
b7:8e:f4:d9:9e:ef:aa:12:33:e0:7d:ec:fe:2d:7a:
27:e5:90:ec:95:55:f6:39:d6:ed:32:fc:2d:48:6c:
02:90:ea:c5:a5:4e:42:0b:5a:70:a0:1d:5e:00:5e:
b0:f6:40:fe:5e:47:39:2c:aa:5e:63:33:23:92:a8:
8d:4f:4e:a8:39:12:04:88:19:14:c0:15:30:b5:14:
26:f3:01:bf:02:a1:bd:02:82:cc:1d:c0:d7:4e:2c:
29:24:64:91:1c:d2:ab:e4:9c:a1:d8:72:0f:e8:85:
9a:2f:5c:d5:54:36:b3:fd:a2:ab:26:42:94:66:9f:
36:ea:8b:08:3c:eb:92:7e:d8:28:8a:5f:3c:15:14:
aa:75:69:ed:37:39:a4:85:f7:09:a4:6f:a9:50:86:
b8:ee:1d:a3:2c:bb:ab:93:2e:17:61:81:e3:99:f9:
09:12:a5:a9:14:74:39:60:3b:fd:00:d1:e6:56:cb:
10:ae:8c:ba:0c:48:b5:58:43:4a:89:5b:f0:7e:92:
14:45:ef:1b:75:9c:8e:a4:86:9a:98:9c:ea:50:21:
08:45:41:fa:86:36:cc:e3:89:3b:0e:71:3b:92:b7:
ee:43:0f:c8:8a:36:86:08:3d:12:71:65:e7:ca:ca:
83:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7B:56:1E:E0:B3:5E:8B:B3:70:DA:EE:D8:2F:78:8B:6F:2E:E3:EB
X509v3 Authority Key Identifier:
keyid:86:49:AA:4B:32:87:35:53:6D:27:C1:68:CD:BF:4E:A1:77:70:1D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:28:82:9c:e6:ae:e6:d7:ac:5a:fe:ec:94:17:e1:b5:b1:5f:
50:79:cb:72:31:d8:e6:fa:24:50:85:0d:e9:fa:49:34:b8:45:
80:20:c4:a8:a0:d4:6c:c4:6e:36:d1:5d:55:91:15:8d:60:b0:
a1:8d:60:5e:19:73:e7:10:32:77:7a:41:7b:34:85:8d:37:48:
aa:0f:14:c3:16:4c:e9:a3:9a:3d:dc:73:eb:1b:c5:03:99:af:
f3:99:d0:2e:ee:86:93:8a:33:17:3d:1b:f9:15:64:38:92:ff:
05:5d:cd:28:38:ee:c3:3f:51:cc:d3:6d:8e:b9:8c:cd:68:52:
a3:de:ca:0f:68:8b:ec:33:6b:7e:21:b6:fb:31:55:d2:e8:61:
bc:ec:47:4b:6e:7e:71:4c:02:81:e4:2b:55:d6:33:cc:d6:35:
85:68:db:01:33:3d:76:91:50:e7:85:57:8f:53:2f:45:aa:de:
72:0e:f3:12:34:6b:ec:36:da:fb:46:9a:1d:8c:59:b9:b6:ca:
09:ed:09:27:20:da:b9:82:e2:e3:82:d1:d2:55:d6:a3:f6:fa:
f4:51:d0:7b:2e:9e:43:61:91:54:e8:dd:80:47:e7:07:3c:d4:
b5:60:90:24:7f:10:c5:de:cd:5a:24:c3:73:c2:28:d3:44:f6:
9e:b0:b7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:50:11 2026 by rpki-client