
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
File: _HlIirThrA9L1GfStNNiHGsY7qA.mft (raw, json)
Hash identifier: QWwomNonVxID6VpHWUw7EfHiLrqdDqfIwyU7kjsUumc=
Subject key identifier: 06:33:E2:45:2F:A4:E8:F5:F0:84:55:31:D7:DE:B2:17:F9:59:0E:89
Authority key identifier: FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0
Certificate issuer: /CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0
Certificate serial: 019D98186C4FA36730C2AF3511343B6A049B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
Manifest number: 18BF
Signing time: Thu 16 Apr 2026 21:00:30 +0000
Manifest this update: Thu 16 Apr 2026 21:00:30 +0000
Manifest next update: Fri 17 Apr 2026 21:00:30 +0000
Files and hashes: 1: _HlIirThrA9L1GfStNNiHGsY7qA.crl (hash: ryKL8fCuTtXR1SRXjcJcDxzYp0lBGgevHdqatxdgcZw=)
2: zXpI_ZkMZjomMfSewt7eA9Kg9dk.roa (hash: AKFEqvG1w5Wb8V0Q0PMXn0i+G8aiBs1A75NxMO1M+zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:6c:4f:a3:67:30:c2:af:35:11:34:3b:6a:04:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0
Validity
Not Before: Apr 16 21:00:30 2026 GMT
Not After : Apr 17 21:00:30 2026 GMT
Subject: CN=0633e2452fa4e8f5f0845531d7deb217f9590e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:37:e2:27:15:bb:9b:7f:1f:6a:8a:1f:51:72:
e6:57:42:0f:ad:f8:77:e7:3d:c0:97:41:29:20:54:
14:56:92:30:4d:66:78:11:f6:4b:18:02:f6:8f:84:
4d:4b:44:05:06:7e:55:32:91:f0:96:99:19:a6:f3:
70:1b:d7:85:4b:44:e3:26:20:e4:f3:a8:64:55:3c:
52:ed:6a:d7:40:44:0c:8d:a5:b8:32:b1:1c:35:6b:
cb:6a:80:24:1e:d3:38:ff:98:5b:fb:e0:70:71:f6:
79:cc:16:c8:0e:aa:02:37:cc:85:95:22:dd:36:63:
e2:30:ff:6a:15:66:58:e5:8c:53:3b:a1:d3:36:dc:
3a:ae:8a:f1:fb:dc:7c:14:71:ab:6c:f8:44:8d:50:
69:77:70:fb:82:74:f8:ce:0a:71:ac:b4:37:8b:fe:
46:3d:14:06:c7:d9:d8:82:5f:7f:22:fb:85:1b:54:
82:65:10:d1:99:f5:79:b3:19:7f:c9:df:1e:ff:7e:
47:6c:7b:f5:36:75:95:a7:05:c1:0c:90:06:49:d4:
6d:68:ff:47:91:c4:e2:4b:c9:09:92:05:3d:16:f0:
af:ea:24:9d:c4:e6:35:83:f6:f1:80:f3:e2:ac:f6:
0a:0b:ee:30:38:6b:2f:a9:a5:c5:fa:9d:cc:ab:a5:
cd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:33:E2:45:2F:A4:E8:F5:F0:84:55:31:D7:DE:B2:17:F9:59:0E:89
X509v3 Authority Key Identifier:
keyid:FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:6e:ba:fc:41:01:0f:8b:fd:53:09:6d:20:d4:6b:d0:d0:e0:
53:11:db:1f:ad:95:2c:9f:4a:53:e2:4c:0c:fa:f6:11:56:d0:
8f:3b:8d:4a:1e:c9:6c:f5:97:78:d2:0d:06:2f:96:bc:2d:ab:
4b:4d:31:a5:13:c9:17:9c:10:7e:bb:03:b8:30:26:31:39:62:
24:63:ef:35:98:49:b4:5d:b8:75:c1:0e:b7:a9:46:62:33:6a:
9f:da:b8:cb:68:c3:81:14:f0:04:20:13:cc:7b:54:0d:9b:d5:
ac:60:f3:17:9d:0d:97:de:be:76:80:38:ad:19:4a:4d:71:5b:
f7:9f:e8:13:bd:d3:bd:2f:db:88:65:61:0c:20:ec:80:04:41:
f9:a0:7c:b8:c6:70:2e:16:d0:36:69:ef:85:1d:62:ed:1f:a5:
f6:53:83:79:66:b9:7c:8a:75:65:0e:6a:46:cf:b1:8f:c2:c4:
ef:80:cc:d8:9f:7d:ac:a8:d0:02:0c:95:41:6c:8d:ab:3e:3e:
02:02:7a:51:08:8d:2e:ce:e6:b3:e9:aa:45:0b:5f:c3:d6:0e:
b3:c7:48:d7:8e:22:29:b0:5e:06:7e:47:46:3f:50:08:03:03:
8f:c6:8f:1e:9d:0d:a5:61:b9:94:b5:5d:d9:94:3f:a9:f9:57:
6d:83:86:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:20:30 2026 by rpki-client