
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
File: HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft (raw, json)
Hash identifier: 6BCTfl4eh/1XZp4LJwlpRz9l4QfgY++dxb98+XHTvbk=
Subject key identifier: 17:C3:78:37:E5:59:B6:DD:88:2F:B8:4E:48:04:1A:D0:53:14:13:BA
Authority key identifier: 1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE
Certificate issuer: /CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
Certificate serial: 019D9BF57D814BE899D56E1E56DC77436013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
Manifest number: 0196
Signing time: Fri 17 Apr 2026 15:00:50 +0000
Manifest this update: Fri 17 Apr 2026 15:00:50 +0000
Manifest next update: Sat 18 Apr 2026 15:00:50 +0000
Files and hashes: 1: HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl (hash: ASu6ZZrR/I2GIHBV3dTsmFt/2RMhbCZ7MGsmFt/0oBY=)
2: alFC4352ujfylmeJv44dIFDrX8I.roa (hash: EyvWXf/Mudgwkv08n9JwLU88K529FLdo5Jy2xLKZhDY=)
3: qYc1GDRHdMKB8iddli8zkMN3RVY.roa (hash: Raz+vndSPY3IPBLJicVFRGraRf1O/aOAmmwEA/V9D9U=)
4: vWwiGSVRiuY5G_sGCiMiyC9oZaw.asa (hash: TYWXQ81PwJFaPM/v0IBTjfWfvW7fjHxqu9IT+A6xBqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:7d:81:4b:e8:99:d5:6e:1e:56:dc:77:43:60:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
Validity
Not Before: Apr 17 15:00:50 2026 GMT
Not After : Apr 18 15:00:50 2026 GMT
Subject: CN=17c37837e559b6dd882fb84e48041ad0531413ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:d5:5d:91:cc:2e:2d:a0:22:15:93:90:ad:
1a:d8:8e:a0:99:b4:c0:3c:77:5a:24:a4:cc:5e:f5:
f8:11:c8:7c:b6:5b:bd:ea:83:a3:78:47:60:fb:ad:
99:0c:60:95:07:18:93:f5:c9:5a:e2:61:7e:55:09:
33:49:74:8f:8d:5d:14:42:e3:e6:74:f9:8a:c0:c8:
12:5e:dc:c3:2d:ac:0a:5b:f5:c9:96:30:3e:7e:85:
2f:ed:b0:af:75:3d:4e:0a:26:bf:cd:72:20:a4:23:
eb:98:75:32:23:88:a0:99:3e:88:5a:1e:03:3c:ae:
e0:86:18:9c:de:34:fe:a0:82:9f:c6:c5:44:b3:ef:
f7:f8:f2:98:b9:c8:9e:8a:ff:bb:5f:71:f6:55:75:
ec:16:e6:df:9f:ae:5b:f7:a1:56:a1:b2:a1:5d:b2:
1b:88:3f:23:42:6a:6d:37:6c:98:cd:b7:92:23:d6:
43:71:41:c1:e9:ca:f5:6f:04:f9:3f:a4:98:6d:1f:
af:d6:f5:8f:37:21:40:23:dd:ef:6f:08:db:1a:6c:
5c:12:ae:08:1f:a1:f6:18:00:74:e2:db:de:64:c1:
e7:08:77:ef:34:df:f6:98:bd:9c:8e:d8:77:c1:46:
61:29:79:05:cf:b2:8b:f2:c4:54:20:2c:a7:d2:9b:
90:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C3:78:37:E5:59:B6:DD:88:2F:B8:4E:48:04:1A:D0:53:14:13:BA
X509v3 Authority Key Identifier:
keyid:1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2d:7d:4f:62:cb:ce:9d:6f:03:8a:71:7a:a6:74:ff:74:27:
71:6e:19:2a:7d:33:69:4e:b0:06:3d:eb:56:ef:f0:0c:4e:5f:
dc:88:07:fd:8a:a0:b7:c1:0e:59:0e:46:95:c0:7c:10:fa:f4:
ce:58:0e:ce:27:81:6b:c6:aa:e8:ee:9f:1a:b3:40:71:f7:fd:
4f:cd:a1:4b:49:25:58:58:fb:ef:ff:bd:c2:f0:42:79:ed:53:
42:28:b3:c2:45:c9:b9:79:85:0a:29:b7:e4:24:8d:65:27:bd:
97:e6:53:ce:d9:bf:ba:57:92:ab:93:55:ee:89:05:7e:cc:68:
a5:20:8b:7d:4a:ca:9c:29:9f:6e:b4:42:75:89:da:9b:19:f6:
df:1e:ff:0e:01:5c:e2:2e:cf:4d:d4:b8:19:0b:49:c1:ce:f6:
41:79:c0:f2:cd:25:b4:41:78:4c:44:c0:bd:07:1b:4d:d7:de:
3d:f1:4d:54:bc:e0:d1:64:7c:d6:28:90:db:00:53:10:19:65:
9f:34:83:6c:25:24:08:20:05:9f:f9:d3:89:41:5e:2d:8f:2c:
6d:af:0b:d2:c3:e7:8a:f6:62:7c:ce:68:ce:1f:1f:6b:23:5d:
b0:3d:8f:aa:7e:5e:2c:6a:b6:c7:7e:6e:ca:17:ae:76:30:a0:
1d:a7:b8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:22:53 2026 by rpki-client