Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
File: HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft (raw, json)
Hash identifier: ZwOKnzkTb/7ccyvSDmyRI/Dcm/AzYEwTImrU7vt3n6c=
Subject key identifier: 79:48:EC:94:00:3E:95:CE:E3:D8:4E:7E:B6:D6:14:10:4A:FE:DA:37
Authority key identifier: 1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
Certificate issuer: /CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Certificate serial: 019D9AAC4F565B0FCC3165E9FEC337444764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 09:01:16 +0000
Manifest this update: Fri 17 Apr 2026 09:01:16 +0000
Manifest next update: Sat 18 Apr 2026 09:01:16 +0000
Files and hashes: 1: HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl (hash: kGqtoVk2KTeQmYZakGp8283BDorvZZu65ATiLWa3/Gw=)
2: oIEkw3PCXr1UYdRnKr9q4Q6XWcs.roa (hash: v1OkVWqraYOFjsEZ3LFnKjFEiGungWJLb2B2UAHBg6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:4f:56:5b:0f:cc:31:65:e9:fe:c3:37:44:47:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Validity
Not Before: Apr 17 09:01:16 2026 GMT
Not After : Apr 18 09:01:16 2026 GMT
Subject: CN=7948ec94003e95cee3d84e7eb6d614104afeda37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e5:36:90:74:c7:91:04:7f:43:43:89:2b:f0:
b5:0c:e4:1a:ea:71:09:b2:58:c8:9f:49:c7:43:9e:
74:c7:c9:c2:00:a7:4a:01:3e:4b:12:e4:39:9f:00:
69:01:ad:73:75:fc:14:85:89:11:7e:d4:58:bf:cf:
b6:ca:19:79:23:8c:3e:d0:71:cf:6f:bc:75:a7:11:
8e:bc:18:99:22:e5:ca:52:63:22:2a:da:6b:77:f6:
b3:39:9e:24:d6:9e:44:43:f3:06:23:f1:ff:4b:df:
06:b1:4a:f7:3a:49:b5:7a:00:5b:49:76:ad:6a:8c:
0c:01:60:fd:4d:2e:a0:64:13:d0:87:b4:83:f2:27:
ed:d0:24:2c:95:7b:a0:ec:bc:02:2e:d3:fd:f9:a3:
16:ac:b5:b7:b1:df:b6:01:0d:91:8e:4a:74:c5:80:
4a:b6:36:50:74:d4:a0:df:33:a0:f9:7e:46:03:70:
9d:53:22:01:49:35:14:8b:9b:f3:fd:9c:29:49:2e:
42:fd:3b:1d:de:f1:4d:b5:89:ff:c4:af:f0:c4:6e:
ff:8c:da:8a:38:7c:20:34:55:2a:4c:6e:d9:51:14:
2e:d5:9d:ee:39:d3:18:e1:dd:0d:7e:21:b3:35:3c:
42:c8:f9:e9:1f:14:ff:e4:89:61:5b:c5:07:83:87:
a6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:48:EC:94:00:3E:95:CE:E3:D8:4E:7E:B6:D6:14:10:4A:FE:DA:37
X509v3 Authority Key Identifier:
keyid:1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c6:ad:d1:62:07:da:bf:9b:70:10:f3:82:b5:ed:b8:85:b6:
a6:47:d5:83:af:aa:c0:f0:09:f5:07:9b:a4:bf:a2:6a:86:29:
13:d7:7e:5b:ec:e5:2d:ca:51:ed:5e:58:89:26:ee:81:df:63:
5e:e0:63:e3:81:cd:33:cd:b7:b5:a1:ad:e4:53:86:e2:74:72:
74:24:d0:d7:f7:30:16:28:97:32:82:3e:f7:e6:67:46:fa:f8:
3b:e1:70:31:49:27:ff:18:3e:70:eb:bd:73:fc:f5:94:52:be:
d4:0a:a8:26:ba:a8:a6:81:c4:0c:75:4a:21:ab:b7:35:5e:84:
2f:52:5a:87:dd:c5:83:32:90:88:35:9b:5b:dc:8a:e7:39:e6:
97:4e:56:e4:3d:e2:4c:b2:3a:45:6d:be:3b:63:af:7a:cb:55:
f0:53:e0:e0:93:83:70:22:2b:27:78:3f:90:58:c1:98:20:a8:
37:51:d0:c7:2d:71:b1:0d:fb:f6:4b:38:0f:8d:f3:47:ac:31:
4f:39:ae:6a:e1:1a:3c:e9:89:47:93:b3:e8:0d:81:f3:6c:00:
ab:c4:90:df:d2:8e:09:dd:29:25:ce:b2:c1:de:cd:02:8e:ec:
7d:36:87:87:3e:e0:38:bf:b4:6c:7a:59:57:d8:b8:63:69:68:
b0:2a:03:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:55:23 2026 by rpki-client