Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft (raw, json)
Hash identifier: lSi/H0ovXR17uiLkEcLZcuf5gNYb9b80jrSBVg9UoNg=
Subject key identifier: 38:D5:44:C4:8F:4F:58:CA:87:C6:39:FD:BC:26:65:DE:BC:B8:0A:41
Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Certificate serial: 019D992B09374E5D251053F81A364DC8F64B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 02:00:27 +0000
Manifest this update: Fri 17 Apr 2026 02:00:27 +0000
Manifest next update: Sat 18 Apr 2026 02:00:27 +0000
Files and hashes: 1: hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl (hash: F7aO4oKXg0lVG5HAHiuLeZaI71lUz7hyIo2N+VkBi7c=)
2: vFI_szTdwGut2KUofHDh3zwoi1k.roa (hash: MxrZSZTPx1kjzcHF3plautdDk7QOfOy+oz7wimPfgjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:09:37:4e:5d:25:10:53:f8:1a:36:4d:c8:f6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Validity
Not Before: Apr 17 02:00:27 2026 GMT
Not After : Apr 18 02:00:27 2026 GMT
Subject: CN=38d544c48f4f58ca87c639fdbc2665debcb80a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3e:2d:56:c6:94:f8:4d:bd:d6:43:4a:f6:22:
68:45:7b:3c:3d:57:69:09:4d:d3:9b:bc:c6:e7:28:
88:be:cd:f6:dc:74:47:25:a4:77:ea:3e:5b:a4:1a:
c8:0b:b1:81:6b:e8:7a:88:9c:de:74:55:b4:7a:d0:
9b:63:f6:54:77:ad:b3:e5:e6:9c:76:07:ce:c2:92:
fc:11:a6:1c:6b:bf:8d:e8:3f:f5:27:8d:db:31:29:
7c:2f:e6:2d:8d:a5:c6:e5:1b:db:1c:51:a9:d9:9b:
c9:69:76:23:e0:28:d6:bd:86:ce:ed:f6:b4:7b:31:
9a:1c:9a:aa:c7:2e:df:de:56:66:f7:0e:0d:0b:fe:
1f:71:64:ae:7b:fe:2e:6a:3a:92:74:ad:9d:d1:57:
fc:a2:fc:19:1b:9e:51:eb:60:d8:ac:56:6f:54:10:
07:2d:0c:58:18:27:a7:40:71:a1:db:ee:a6:9a:13:
a5:27:45:69:b6:60:b9:17:66:9b:0d:92:b3:fd:a0:
6d:03:92:be:49:7a:c6:d1:65:df:b6:73:64:d7:a8:
1b:41:51:5c:53:82:2c:2b:1c:59:69:f6:28:36:ed:
1c:ab:02:cf:5b:a1:a5:c8:41:75:27:e0:94:53:61:
d8:0b:16:59:6f:44:ef:54:6c:25:2c:45:05:b4:d1:
17:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D5:44:C4:8F:4F:58:CA:87:C6:39:FD:BC:26:65:DE:BC:B8:0A:41
X509v3 Authority Key Identifier:
keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ed:6f:09:56:b2:f7:71:ba:d7:f6:99:9f:4a:b3:be:d7:b5:
20:82:25:6f:fc:1d:70:63:bb:d5:e3:15:6b:60:a0:ea:40:05:
e9:99:57:e8:c6:cd:49:3d:ce:b4:0e:f4:8c:5c:3d:4c:ce:16:
e8:fa:3a:de:77:20:60:a3:4f:95:9c:90:3a:bf:8f:98:88:f3:
b8:98:ba:98:b4:c8:08:65:2d:56:c1:f0:da:8d:82:fd:b8:c4:
a4:c6:2a:fe:23:60:dd:2c:3d:6b:94:68:75:15:2c:8f:c6:69:
1c:c4:df:67:c4:4d:6d:a2:c8:91:f5:d9:16:59:3f:aa:21:d6:
f5:1e:37:7b:e0:c0:fd:94:a5:32:74:3f:6e:8f:c1:6d:bb:25:
43:89:0e:49:6c:bf:6b:a7:42:e3:9e:83:dc:e2:2b:df:12:b1:
41:41:5e:d3:2e:86:51:dd:4f:53:b7:36:6a:4b:c7:96:93:5d:
1b:ac:46:b7:25:1b:72:61:4a:a4:a9:35:02:09:13:58:5d:69:
8f:99:5d:fc:46:1b:b2:fe:2d:c9:14:ef:7c:52:5e:b6:da:46:
2e:a6:14:44:49:88:56:fb:7f:4e:58:41:e5:e2:4a:c4:4b:99:
5b:82:ef:e4:cf:a6:6d:6d:3a:50:8b:33:17:83:1b:c6:d5:9c:
04:b7:82:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKwk3Tl0lEFP4GjZNyPZLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MDRlYmY5ZGIxNzEwYTQ3YmFlNDUwOGNkYWY4MTMxZTE2
NzRhNTQwHhcNMjYwNDE3MDIwMDI3WhcNMjYwNDE4MDIwMDI3WjAzMTEwLwYDVQQD
EygzOGQ1NDRjNDhmNGY1OGNhODdjNjM5ZmRiYzI2NjVkZWJjYjgwYTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT4tVsaU+E291kNK9iJoRXs8PVdp
CU3Tm7zG5yiIvs323HRHJaR36j5bpBrIC7GBa+h6iJzedFW0etCbY/ZUd62z5eac
dgfOwpL8EaYca7+N6D/1J43bMSl8L+YtjaXG5RvbHFGp2ZvJaXYj4CjWvYbO7fa0
ezGaHJqqxy7f3lZm9w4NC/4fcWSue/4uajqSdK2d0Vf8ovwZG55R62DYrFZvVBAH
LQxYGCenQHGh2+6mmhOlJ0VptmC5F2abDZKz/aBtA5K+SXrG0WXftnNk16gbQVFc
U4IsKxxZafYoNu0cqwLPW6GlyEF1J+CUU2HYCxZZb0TvVGwlLEUFtNEXxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjVRMSPT1jKh8Y5/bwmZd68uApBMB8GA1UdIwQY
MBaAFIUE6/nbFxCke65FCM2vgTHhZ0pUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83ZWZlMDEtZWM3NC00MGFjLWEyMzgt
YTliMWRmNDRjZTJmLzEvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi83ZWZlMDEtZWM3NC00MGFjLWEyMzgtYTliMWRmNDRjZTJm
LzEvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASu1vCVay
93G61/aZn0qzvte1IIIlb/wdcGO71eMVa2Cg6kAF6ZlX6MbNST3OtA70jFw9TM4W
6Po63ncgYKNPlZyQOr+PmIjzuJi6mLTICGUtVsHw2o2C/bjEpMYq/iNg3Sw9a5Ro
dRUsj8ZpHMTfZ8RNbaLIkfXZFlk/qiHW9R43e+DA/ZSlMnQ/bo/BbbslQ4kOSWy/
a6dC456D3OIr3xKxQUFe0y6GUd1PU7c2akvHlpNdG6xGtyUbcmFKpKk1AgkTWF1p
j5ld/EYbsv4tyRTvfFJettpGLqYUREmIVvt/TlhB5eJKxEuZW4Lv5M+mbW06UIsz
F4MbxtWcBLeCSg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:23:08 2026 by rpki-client