
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json)
Hash identifier: EovllpYJGCzaUiL0+leGNqFxja3fd6r6jpxzF9AZjOo=
Subject key identifier: E1:78:23:AE:9C:63:7C:6B:11:A2:4C:80:38:82:EC:BD:C7:81:EC:19
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 019D98BD4A79EC9E6F871135BD3F8FF44C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
Manifest number: 18DF
Signing time: Fri 17 Apr 2026 00:00:35 +0000
Manifest this update: Fri 17 Apr 2026 00:00:35 +0000
Manifest next update: Sat 18 Apr 2026 00:00:35 +0000
Files and hashes: 1: 2SgtXArHa91zHSP62V3VxCstPjQ.roa (hash: V4cGQtg2SBaCI8DVoJaqr+ulcrK5fl4LGupKdqP0XPQ=)
2: 2pWoRlgTXbKVX-Pjg4QmOZkMdQc.roa (hash: JZbkKUO0JB2SSX19jfhYYhBc4c8q+WYE6k6SKK4z740=)
3: Ae57O12AoGSXg6OjRfpvqk40IWY.roa (hash: jqB4zbEQVsVqha6FZMRqBv2gE+Oo/oekXl882sDWeVU=)
4: B-5LpHxABUdZLyscoHErjkqyIKk.roa (hash: O/ISaaNiYJWY/Osy259CyKWIm66WcENOZJ8/yUUM18U=)
5: E0HXCx5zsxlU4Ou_J-4bgx-8A3s.roa (hash: AM4W95wMVxmufbKvADXIfhnh/oxXBRJzCA12EQepcN0=)
6: G6LlelllmoaLjy6pGMovpp7eiKE.roa (hash: i0/dkXUXtTkS5bDtqW3KTO/a6C0FHwJWrOLBcdXePK8=)
7: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: 7sb2u/DaMBPP+7bID6T8JyLQLrwMUkOsmuTGtOWfv4w=)
8: Ooo27uikwPKyN38Vc6E5PiPp16o.roa (hash: ysIkELBvjUmxilhHd/e1/CduTTEPJwJqPubCz95v0Yk=)
9: Qe1ETKwQBAYElN8qCmX-ZaM8UHw.roa (hash: PTOGD+XV9y0QkR0kx84XCCF1nWNGNBQ/AqHfSIRK6JI=)
10: R3DBHKjE8ohxKxzIJk7-VPvPd-w.roa (hash: 926NNVMN0dOUlotEee8GGLB2yhZRvKk278w8BXpKBWc=)
11: SKmtQkELvPXhrLNDFKGCzGQ-a9A.roa (hash: R2Ulh0OWrTfBVFa/oSxJhAwaFvEKQ4zUakZOAQnMxc8=)
12: SmdyvtG_Yr4JXEJCTVqNOsLKCxI.roa (hash: IKCVvcTAPNdNWxaMhV5j9dp59UVvAETJogxmpd5B1IE=)
13: UgQXPpoAPzzEY23clmnNXDMzKII.roa (hash: wVgI0/jKoNmP2W8lcpq9i62znX0LDf4x7s4+L/CLD44=)
14: VYgE8-UEudg3YNUfBmaafWIWqbY.roa (hash: JxhGY6dK9SUdetgzpCLPv5EvQwiRqHi3C+Rjc1w+Nx4=)
15: VulRC4nGRSWh634vxQHiExAKf1w.roa (hash: pU+A0lUoH6DQvksFwyWjaM1SkQ2OEMmZ30T/nm+6dqA=)
16: WyhDt_oaTKQN4eZu64NsYbZl4yg.roa (hash: 6ciQpQA0xk5YF/RtEahhFIWkqj1pqFVjXnDAnpgxo9s=)
17: YNMGJ_GCiK2Fi13G2Jq0qQdFgi8.roa (hash: yFLoxqOVICN4QBajonvWQfdIkbyqD9W6GTNUrK2yjZo=)
18: ap_KBBwMetCUgf_yqig9NPG5GpY.roa (hash: 9v8lmt7h/soP3D+lntkITlcRnDn6phDZu9Zze6nhdUM=)
19: ayw9hP-juqBVUYhL4659BWRbagM.roa (hash: GLutlgyBzkV4tGAVG5CwDMmdYLkbefgbgEpP3APu1Jo=)
20: crm5NGlj9UBvhtdc7rwx7uYgEK4.roa (hash: /WaelaooGSkLECOrVgVomhzyK4ipvEXkWosApEiQHPA=)
21: fCPsVmQYESXsIrFzghBdJCH1miI.roa (hash: w0YUnPbD+SIAOv8xIs4vR52GvWAb785T1PJzGOLTe/A=)
22: ge_qG75CaLMKt1s8rP1tYixjlSM.roa (hash: KgSOhN8VDoDw2ctu7y0Z8Aqh13VkWXvib2gbxMkFp90=)
23: if7HhXNRoDw1TnbTu8jR1pBkTZc.roa (hash: 8a3JrsC30tF9jpJNG+DBi1BkDJl3zSelO4aQKYLFjnI=)
24: kB1VAe7IiWttP305SpTIQdMVrgs.roa (hash: 317W73vQ+ktqI7vunTSNBr39CAMFJ4AGWozNVMt/2j4=)
25: lT10uf8B-zB2W7pPHONV8j5w1EU.roa (hash: YP+nZP9+eePypNGYgLu6JQ6qv1UZQzTSxNte2fmvVXA=)
26: m1mZNmGn3cQt2RJZqOQ6x8zlSxQ.roa (hash: QoWaAUlMFh1lhiMZuHSFJG4B7Vf6yI8ZyqsNOBMC67Q=)
27: n8NL6vGQtAkm4gMaIcDuJBP2IEE.roa (hash: jjvwqzXmoxW8cyo92Sd5PIndz67V2dJl+O50LnTVHRU=)
28: nzTl8UF3p7e9FvS0wb6zPjc4FHQ.roa (hash: gedwjVpwIHP4TjyyTazQknsPogKpR2m/8Qa6aAsv0F4=)
29: oMXKRKWkDw3BU5VHnmmfZczo3WU.roa (hash: 0w07L0habLvL3NwvX3KWEEL46dhGeHcv8F5gRgN4UD8=)
30: pqPIqfuErD5mbtSplqtkA0QY6aE.roa (hash: 6vvDbqxKmpWsHd5Wn/2ZoKbmAa7IUMY34ZPHLrIESc8=)
31: r__WaOcKmtAx8gXbwxmkYZg93vo.roa (hash: dQVWPRytzEKBIkeOfxLsINoVWiI0jdX6igSClXXnN6o=)
32: sfOxzLZiwEG7r5SeUCMuTrf1tvI.roa (hash: ZUuD5UEFtBeOCS9rptJ0iK7dObQgDw9xm9i0pDpXHUA=)
33: uixetmUNITGIE12MemXK43h0QKQ.roa (hash: LX2K4eqH4TnMxGBuhGigtPQYwuhHnTXNUjj69t8yapQ=)
34: v-ikOphb6e29hpwrNQIcQpcHAak.roa (hash: Pq9zDPP4BdGhk0vZiCEnuLu/9tRKgBub5R+cAWgzevE=)
35: w_A8FIo2-eV1ikzinAoy11bKCzM.roa (hash: LSQro8lyduG8gw0AhNa9mNG1JTNi93nM2iVzU2UVVdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:4a:79:ec:9e:6f:87:11:35:bd:3f:8f:f4:4c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Apr 17 00:00:35 2026 GMT
Not After : Apr 18 00:00:35 2026 GMT
Subject: CN=e17823ae9c637c6b11a24c803882ecbdc781ec19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:29:f1:af:e6:d9:4f:b1:c7:c2:d3:d2:4d:
7d:7d:eb:5d:2a:cd:2c:0d:6c:ab:cb:9a:14:6a:fd:
e4:ae:87:9a:8a:73:71:71:7e:c8:51:35:88:66:fa:
85:db:2e:49:e9:70:e3:16:ee:4e:ad:38:8c:46:09:
0f:c6:0b:9f:33:b8:fc:b4:91:fc:1a:68:b6:dd:3d:
10:23:c9:a2:43:f2:05:af:eb:42:c8:70:bf:32:2b:
3d:67:00:8e:2b:4c:18:2c:d2:e7:64:44:a8:d1:84:
c0:e7:39:eb:a7:42:41:cd:e6:5e:37:51:78:0c:3b:
f6:fc:6a:2d:c4:8a:90:48:ec:f9:98:af:f6:e1:7d:
0f:61:1a:24:78:5a:a9:ab:f5:c5:2b:12:3c:df:a9:
fc:f5:a8:db:8f:34:ed:b6:b8:fb:a6:68:10:1d:bf:
4b:a1:9f:14:6c:65:a2:cc:c4:93:27:9c:54:a3:11:
3e:4e:4d:03:2b:a7:4e:db:82:d5:bb:40:de:c4:8c:
39:8a:ac:9b:42:20:c2:b8:00:57:0a:60:fd:43:0a:
e6:73:d7:56:57:e6:4e:82:de:46:93:e2:b6:3a:3b:
ff:e2:5e:db:c8:7e:58:76:5c:af:d0:85:83:f5:39:
1d:cd:97:b6:e9:06:07:54:5a:9e:90:12:10:c9:ae:
f0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:78:23:AE:9C:63:7C:6B:11:A2:4C:80:38:82:EC:BD:C7:81:EC:19
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a1:0d:19:b2:17:1c:7d:de:56:41:59:4b:a8:d4:b7:25:93:
ac:5f:a0:e4:27:d9:bc:c7:48:f5:34:92:04:1f:66:f3:22:95:
36:23:71:8a:1a:3a:3d:34:16:32:b4:f7:ee:97:70:7d:63:69:
aa:48:5b:b2:28:5a:a2:b9:5c:e5:4e:f7:c5:00:20:35:aa:69:
2b:d5:f1:20:b3:b2:e4:13:f5:38:2e:7c:e7:80:88:97:27:e7:
bf:01:20:51:72:0b:f3:53:44:f4:c6:2a:8d:c4:50:96:98:1f:
c5:84:c5:35:2e:76:8f:58:27:38:97:d1:bd:72:2f:32:b7:4d:
62:fa:42:59:ea:f7:e0:81:57:de:cb:73:25:38:89:d5:30:85:
65:12:6e:f3:dc:0b:b6:26:58:8b:a4:31:de:10:23:94:99:4f:
17:ac:1a:4d:26:0a:e6:e1:73:53:ee:cf:71:48:af:6e:3a:09:
e1:f3:ef:11:d7:15:fa:97:50:8c:96:bf:5a:fb:07:04:70:44:
01:44:f4:12:01:31:bc:7a:3e:b0:e0:94:72:44:c1:2e:33:6a:
1c:6a:cb:9a:01:d8:c7:1f:97:46:87:c2:30:6d:04:00:02:28:
36:a1:c6:b1:bf:53:ac:01:ef:a5:43:52:b5:d6:8f:d7:b4:9c:
30:50:18:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:12:59 2026 by rpki-client