Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
File: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json)
Hash identifier: Xu+chjKtBtisIAP6r8m/IgWnTTUb2mJ9JxGsnWdCmbg=
Subject key identifier: 49:56:17:01:64:D3:C4:2D:3E:5B:B9:75:5E:12:C6:17:10:43:08:34
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial: 019D984FD0982F601545ACD23A3CD1A37E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
Manifest number: 11CE
Signing time: Thu 16 Apr 2026 22:01:00 +0000
Manifest this update: Thu 16 Apr 2026 22:01:00 +0000
Manifest next update: Fri 17 Apr 2026 22:01:00 +0000
Files and hashes: 1: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: 4Qle7ZxqVvxELuLQsla3sxXtqVii4NeVnQzQqQy8yZU=)
2: w8zdjiM74u9Xh40wPO9DxI7URjQ.roa (hash: 4uuYGCMFbM+HLfTWP9pgKKq5F64rrg4484o4ZoBFc1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:d0:98:2f:60:15:45:ac:d2:3a:3c:d1:a3:7e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Validity
Not Before: Apr 16 22:01:00 2026 GMT
Not After : Apr 17 22:01:00 2026 GMT
Subject: CN=4956170164d3c42d3e5bb9755e12c61710430834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:a0:67:c8:11:46:4f:21:46:7d:76:5d:33:
18:fe:42:f6:4d:2d:8f:4b:a1:12:a0:95:87:36:a6:
0b:3b:a9:f0:ea:41:44:67:16:ab:12:a0:ab:5b:fa:
5a:45:cc:9f:1f:33:7c:22:48:17:44:46:2e:cf:31:
bf:99:24:28:19:c9:57:8d:ea:c8:d3:89:a1:da:bc:
3f:8e:03:f6:7d:d4:76:fd:21:89:d8:1c:6b:84:ea:
68:a3:1f:80:79:52:ec:5c:c7:41:d1:ef:9a:ee:38:
66:3d:57:40:57:1d:af:bb:bb:ab:28:0e:a9:8d:1b:
ce:cb:dc:bb:8f:88:fc:ac:0f:07:10:18:15:6a:1c:
26:71:3e:6f:09:40:b9:a3:c0:23:b2:69:73:9b:0d:
21:a9:ce:a7:ab:41:a1:87:53:0e:56:94:0b:8c:1a:
7f:37:04:87:62:fb:18:76:a6:11:e0:8d:4b:28:5b:
bb:1a:d9:46:7b:40:df:0b:fa:15:ae:99:44:20:08:
78:a5:7f:e7:ec:a2:56:c6:f3:7c:40:57:40:62:7f:
58:fa:42:5a:ff:b3:57:73:44:9f:bd:e5:54:70:dd:
82:3f:e1:30:47:74:5d:aa:a2:92:40:4e:2a:7f:98:
df:10:e5:72:c9:20:76:56:2f:fc:fc:ad:d0:c1:72:
5c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:56:17:01:64:D3:C4:2D:3E:5B:B9:75:5E:12:C6:17:10:43:08:34
X509v3 Authority Key Identifier:
keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7a:00:46:70:fa:ed:c6:f7:3b:30:03:ce:8d:83:ad:2e:b1:
7e:9a:c8:72:f4:88:fe:01:1b:fb:92:42:8b:f0:d2:37:64:be:
40:73:e3:24:3b:ea:90:3f:0f:c2:e1:1d:24:7b:c1:dc:a2:80:
15:6f:a7:36:32:3c:55:fb:de:45:dc:32:05:ca:89:00:45:c9:
d3:6d:0c:4f:ea:96:08:04:38:01:ec:36:30:56:2a:cf:c8:be:
bf:c8:4f:d0:07:c0:f5:96:2b:24:ee:79:ca:2a:d3:8b:43:8c:
55:c5:ba:24:34:7c:a0:ad:bc:b5:12:47:1b:78:54:96:df:0c:
6e:36:c8:43:e1:13:61:44:35:c4:90:b1:0b:11:0b:b4:21:f1:
0b:25:a6:a0:5d:eb:81:01:19:8a:04:a8:8b:bd:b6:77:50:a2:
87:a3:93:0a:0b:43:6c:75:bd:22:17:20:e3:c0:44:59:de:77:
ff:c0:f2:40:8d:cb:cf:69:b3:4b:c9:00:f3:8f:f3:99:86:9f:
5b:15:34:3c:94:27:88:96:22:26:81:c4:fb:5c:0b:2a:f7:55:
de:cc:cc:d8:8f:2f:df:65:81:9b:62:28:55:87:fa:c7:89:2a:
75:6e:17:a0:ab:b3:dd:f0:82:50:16:ee:6b:4c:20:39:65:98:
f8:19:49:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:27:15 2026 by rpki-client