Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
File: HnsuJD-KqVRZeTK83NmvZWDc5RY.mft (raw, json)
Hash identifier: aUJ9FMq19PBSHZO+CGLDqKGaXZe9mpDl/rpmht4PSQo=
Subject key identifier: 63:CB:30:33:FC:C9:8A:6B:D7:0C:39:D3:D4:51:E3:9B:96:EA:4F:D6
Authority key identifier: 1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
Certificate issuer: /CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Certificate serial: 019D9A74FC3E10717091E1898D75360BA81A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
Manifest number: 0D86
Signing time: Fri 17 Apr 2026 08:00:51 +0000
Manifest this update: Fri 17 Apr 2026 08:00:51 +0000
Manifest next update: Sat 18 Apr 2026 08:00:51 +0000
Files and hashes: 1: 1-z-hX5qlCf8aH8nr2X0zpJdE1hg.roa (hash: 9rLZMVrt7BCmTVumDwvgzgKKJKdaVIZCBXEilPyFZ4c=)
2: HnsuJD-KqVRZeTK83NmvZWDc5RY.crl (hash: Yp0WvpPXjNsamWHBfWslfak/sUq3e8Usm8bM7VB2ES8=)
3: XI8CVY8sYwhzkz3YLD7pkxjD3Zk.roa (hash: 25+wg4lixvrKpaIcYJueXb9oNmVKiR9L4SbDtXfdAjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:fc:3e:10:71:70:91:e1:89:8d:75:36:0b:a8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Validity
Not Before: Apr 17 08:00:51 2026 GMT
Not After : Apr 18 08:00:51 2026 GMT
Subject: CN=63cb3033fcc98a6bd70c39d3d451e39b96ea4fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:f3:9c:11:62:cd:5c:2e:4f:82:b0:95:50:
dd:5c:07:9e:43:99:08:7d:04:a4:bc:99:b1:57:7d:
66:62:6a:8e:f0:4d:d4:eb:42:d8:ca:a5:5e:2c:55:
12:c8:ea:e0:f2:11:e0:cb:d1:37:16:5c:c2:b9:ea:
86:df:36:f7:bf:5d:0a:c3:e3:99:b5:c2:9c:16:63:
2a:db:18:a6:15:07:ee:2c:fe:06:21:25:4a:11:42:
c0:aa:48:0b:4e:9a:c1:4e:7a:38:32:49:1c:8f:be:
19:a5:92:69:46:39:70:d6:1b:38:e2:94:97:f9:f8:
25:49:e3:d3:5d:eb:26:87:c8:8f:19:50:c9:dd:2c:
b7:b0:5e:e5:3a:02:7c:0c:d2:f7:fc:c9:87:b3:f7:
d6:85:3b:ba:8e:84:70:6c:d6:9f:44:fa:91:b8:fb:
80:6d:b7:d1:1d:89:2f:45:2c:4b:b9:f7:21:28:d8:
c4:49:87:48:62:a2:7f:b8:c4:98:96:3a:57:9b:39:
5b:02:cd:35:7a:ab:5b:02:15:4d:0d:f4:37:19:15:
fc:ee:09:50:26:64:35:73:1d:b0:29:e8:37:a1:77:
e0:66:e0:b4:02:4b:b6:c0:93:77:a1:48:2c:8b:87:
12:14:5c:92:08:ef:54:97:f1:87:e6:03:3d:45:89:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CB:30:33:FC:C9:8A:6B:D7:0C:39:D3:D4:51:E3:9B:96:EA:4F:D6
X509v3 Authority Key Identifier:
keyid:1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:3d:c6:b1:3a:35:31:c6:fd:c6:01:7b:a7:6e:26:a6:a2:84:
7c:cb:5b:c3:35:44:4d:96:11:2f:8d:24:59:5c:1d:81:e7:e4:
ac:78:f2:7d:32:f9:d8:53:74:a7:11:76:dd:96:65:df:e6:45:
51:77:7e:c3:6e:69:1a:60:2e:3b:3a:6e:81:d9:75:0f:91:87:
12:c7:27:21:43:a9:39:28:c0:ee:7e:f9:93:25:bf:27:fd:3f:
f4:e6:c2:e8:70:16:c4:32:d4:2c:5c:77:34:b0:ab:4a:9a:db:
2e:a0:af:08:94:b8:eb:ef:9a:ad:f0:05:44:a3:8d:c0:79:15:
a4:d5:85:74:d7:62:0c:b6:f9:7e:ca:47:8d:e1:ff:af:44:60:
0a:b9:3b:d6:60:33:84:06:20:a3:c5:cd:6e:fc:2b:36:cb:e3:
79:5c:72:4e:2a:ad:29:73:b8:79:37:8b:ea:d5:eb:da:d2:91:
19:81:cc:0b:e9:4b:12:0b:fa:06:b4:65:3d:61:01:f3:1c:e1:
fa:2e:4f:2b:bd:e4:4f:e8:97:bf:0d:66:a5:17:43:c1:11:d1:
4b:0e:59:78:e8:68:64:f6:18:07:ce:75:93:d3:f3:2e:b4:9a:
74:93:a2:d8:ea:f7:b2:ba:e7:30:f2:55:52:55:55:09:63:65:
5e:a6:9a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:37:58 2026 by rpki-client