Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
File: HQHtI2TsgiZcaIaf5yvnVzGaMes.mft (raw, json)
Hash identifier: wmR+0mEc/H4gTS25edCX2B7TNMgO76JHvp0Y22t1B4k=
Subject key identifier: C6:24:35:DA:41:C2:FE:A1:A4:49:EE:ED:39:16:DA:73:37:4F:58:79
Authority key identifier: 1D:01:ED:23:64:EC:82:26:5C:68:86:9F:E7:2B:E7:57:31:9A:31:EB
Certificate issuer: /CN=1d01ed2364ec82265c68869fe72be757319a31eb
Certificate serial: 019D9A754D2006F725E2F7F7745086B9C89E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
Manifest number: 16E4
Signing time: Fri 17 Apr 2026 08:01:11 +0000
Manifest this update: Fri 17 Apr 2026 08:01:11 +0000
Manifest next update: Sat 18 Apr 2026 08:01:11 +0000
Files and hashes: 1: HQHtI2TsgiZcaIaf5yvnVzGaMes.crl (hash: pF/bL0oURenacd+3LA4LhoUFVB/hTXZtN1dZQ1rsC5k=)
2: vBEDZky1DrDyLEUWSCcKSfFchsA.roa (hash: K1r/2AFcY8elhH0ckxTVORnjb/4FnfMG0iSbfTKXjq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:4d:20:06:f7:25:e2:f7:f7:74:50:86:b9:c8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01ed2364ec82265c68869fe72be757319a31eb
Validity
Not Before: Apr 17 08:01:11 2026 GMT
Not After : Apr 18 08:01:11 2026 GMT
Subject: CN=c62435da41c2fea1a449eeed3916da73374f5879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:0f:d1:0b:a3:7c:e5:f6:52:6b:24:38:55:
85:94:35:b3:0e:2e:db:d5:25:e7:e2:7f:12:d3:18:
ed:d5:ec:ac:0b:6f:8b:45:51:c5:4d:f1:96:cd:82:
25:83:c5:62:5e:db:01:99:25:21:8a:83:d4:47:30:
e9:fe:de:9a:87:01:55:04:d0:14:97:f0:3b:08:9e:
43:35:4c:ad:e3:fc:ad:98:3a:4d:89:ca:5d:0f:f9:
11:4d:9c:a6:df:ca:1f:fd:b8:a6:d4:ba:38:e4:96:
2a:71:3e:d1:bf:18:82:29:76:10:64:5f:59:4a:da:
8b:19:b7:30:c6:93:66:f8:e3:c0:5d:b0:57:08:ff:
5a:9a:87:ae:33:de:c2:7a:4c:4b:7e:95:cd:3f:59:
58:97:ae:63:b0:dd:ea:0a:d7:8a:02:72:8d:97:89:
05:fe:ea:a8:b4:35:c1:02:6e:1d:ea:f3:cf:1d:08:
f7:7b:da:6f:3c:60:45:14:7b:9d:77:0b:5a:6f:b5:
46:3b:08:d7:53:db:97:bd:2f:5d:70:4b:22:c9:68:
f7:58:3d:b7:be:8c:05:35:42:fc:d2:08:c5:3d:4f:
f8:f9:76:69:85:81:49:b7:82:01:46:73:a9:4e:f6:
ba:a0:e9:2f:56:29:52:b5:14:5e:46:05:90:de:89:
00:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:24:35:DA:41:C2:FE:A1:A4:49:EE:ED:39:16:DA:73:37:4F:58:79
X509v3 Authority Key Identifier:
keyid:1D:01:ED:23:64:EC:82:26:5C:68:86:9F:E7:2B:E7:57:31:9A:31:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7f:90:4b:a9:85:c1:59:0c:53:51:30:79:30:57:f9:73:4f:
7e:42:18:a4:83:a9:2f:59:e1:e7:0b:f8:ef:a0:aa:75:b5:0f:
97:e3:f7:7c:e6:b2:fc:6f:fb:04:0f:b2:93:ee:ab:66:f1:28:
0a:1f:45:7d:5e:56:3c:c0:d2:6a:68:8c:95:bb:72:91:2c:1d:
a9:18:ed:7d:66:eb:2a:ec:53:3c:f9:43:c1:a0:4e:a3:d3:ab:
ed:91:33:a4:f7:99:17:28:28:d1:07:c7:1f:33:03:30:e0:51:
63:46:13:77:d3:43:6f:92:db:15:53:63:1b:e5:6e:8e:02:b6:
3c:1c:07:63:2e:f3:de:68:32:bd:0c:93:72:af:13:46:27:0d:
5e:22:e8:cf:ec:17:67:41:87:9a:e4:69:14:b7:9c:77:1c:59:
05:52:6b:15:22:5b:a7:83:aa:ef:ce:85:57:84:f5:d9:ce:16:
9c:1a:fe:9b:a6:54:44:2f:de:fc:41:af:2c:55:e2:98:4f:31:
96:62:de:2e:93:0c:61:a9:73:8c:ee:84:30:2e:39:07:15:3c:
dd:c0:0a:af:02:16:cf:2a:9a:6a:05:b1:37:9c:b5:63:fc:5f:
a0:bb:c8:6b:06:46:9e:2b:ca:ee:77:70:bb:10:ef:bd:f9:67:
23:d6:10:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:34 2026 by rpki-client