Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
File: HjCmImLcyyGgEEs07bgrlRXKzfs.mft (raw, json)
Hash identifier: LJCfGzKOU+mYJ6ZiofoPDm9hRTlrQZbHS4N0YsBnt6A=
Subject key identifier: 6C:18:74:8F:30:9D:AF:E3:B0:28:72:F0:B2:31:45:59:7F:EC:E2:2E
Authority key identifier: 1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB
Certificate issuer: /CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
Certificate serial: 019D984FD140A013B8C19F01E07C9899D971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
Manifest number: 18BE
Signing time: Thu 16 Apr 2026 22:01:00 +0000
Manifest this update: Thu 16 Apr 2026 22:01:00 +0000
Manifest next update: Fri 17 Apr 2026 22:01:00 +0000
Files and hashes: 1: HjCmImLcyyGgEEs07bgrlRXKzfs.crl (hash: Frmf873XoQbj0UUNaOBUsZNMTkSw6VCK8AQJXN4TuEs=)
2: ywg7v4iBU0yIbUtglY4SRtwYiqQ.roa (hash: TUFNnELLTk5SmjwLZeWsU1OrlDE0M2b/yRf/bTeimQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:d1:40:a0:13:b8:c1:9f:01:e0:7c:98:99:d9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
Validity
Not Before: Apr 16 22:01:00 2026 GMT
Not After : Apr 17 22:01:00 2026 GMT
Subject: CN=6c18748f309dafe3b02872f0b23145597fece22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:d1:f9:a2:9b:a5:2a:1e:be:df:24:09:19:
89:cc:81:20:a3:bc:87:a1:52:39:7b:c3:2e:7a:d9:
9e:ad:ba:74:4d:ae:14:07:1f:26:6d:33:24:f2:aa:
b4:7d:8f:c0:9a:89:72:c1:71:b0:ac:85:26:ad:1a:
03:f0:4c:7a:4b:28:eb:aa:11:9a:3c:55:31:a1:89:
ad:d9:c7:17:16:d8:ac:a0:69:1b:e7:6a:84:14:13:
da:50:64:88:50:c6:dc:53:d7:e0:3a:52:25:21:ac:
6c:de:ad:ed:67:d0:f4:41:0c:35:96:1e:f0:dd:47:
14:2c:fd:55:8a:73:ce:10:68:c3:8b:10:a9:c4:e3:
17:6f:b4:16:65:22:e8:dd:e0:be:3d:f3:08:64:3c:
d2:d1:85:f0:97:43:7d:c8:77:f7:a2:87:0b:45:08:
00:00:91:ca:fa:b1:69:95:0b:59:27:9a:74:67:e1:
55:2c:f4:ed:09:77:3a:bd:3a:c0:5f:d3:ba:41:0c:
b1:3f:8b:49:90:66:76:4a:0d:36:86:02:ef:bf:bf:
e8:09:b1:e1:b8:98:76:ad:19:1f:ea:e6:1b:4f:bb:
69:cb:f9:d6:d2:25:5e:07:69:5b:08:11:e1:f8:f8:
97:11:ba:36:e7:f6:e5:32:e6:d6:2f:f5:06:1b:f6:
42:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:18:74:8F:30:9D:AF:E3:B0:28:72:F0:B2:31:45:59:7F:EC:E2:2E
X509v3 Authority Key Identifier:
keyid:1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:63:fd:45:09:ec:ac:eb:39:41:a2:5e:b7:c4:fc:4c:97:eb:
ee:e4:fb:48:5f:a0:ac:52:de:08:b5:72:06:84:7d:4d:08:05:
78:0a:dd:5a:8d:7f:32:2e:5a:5e:31:3f:16:e3:98:76:7d:26:
92:37:7a:6e:cb:5b:f9:58:85:14:07:fb:4d:ee:bc:b9:91:37:
79:22:1b:34:52:7f:12:68:5d:72:59:cc:1b:98:ab:60:06:3b:
f6:86:cd:2b:cc:78:7e:5b:1c:d0:c5:e3:df:3b:ac:53:c8:2c:
c7:fe:46:ee:15:bf:72:a9:a6:82:74:6d:79:de:d0:a6:7e:1b:
98:af:29:de:4f:fb:39:35:bd:89:f3:66:97:84:b3:e0:ea:39:
3f:5b:5a:6e:5a:93:19:15:8e:69:ba:0e:dd:19:e6:6b:dc:80:
49:5c:0b:13:40:0f:25:4c:8d:ce:00:41:63:45:74:4d:b8:53:
ca:dc:fc:66:07:8b:04:7e:aa:7c:11:96:c0:20:47:ed:bd:63:
40:dc:d7:7a:af:63:5d:0b:16:bf:de:17:a6:75:6e:9b:99:bc:
cf:88:f9:c7:e8:99:7f:9f:6f:ec:7d:95:09:42:ac:3e:0e:b6:
f8:82:ff:92:e0:1c:08:d8:fe:5b:92:81:cf:a5:ff:8c:c4:b4:
5a:90:17:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:58 2026 by rpki-client