Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
File: HkwyCG4emEUFaRsB9Zhd96NrJK4.mft (raw, json)
Hash identifier: K6MfF4ZCFnvYQFhgE96W7PQuewwXroyREPQZ3TTOJVs=
Subject key identifier: 30:59:A7:A8:F8:4E:B4:89:EA:6B:3E:4D:C2:93:46:2D:95:6E:CB:8C
Authority key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
Certificate issuer: /CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Certificate serial: 019D9A74EF77E9B410059CC29D5542C9F3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
Manifest number: 1548
Signing time: Fri 17 Apr 2026 08:00:47 +0000
Manifest this update: Fri 17 Apr 2026 08:00:47 +0000
Manifest next update: Sat 18 Apr 2026 08:00:47 +0000
Files and hashes: 1: 4BSkcYmhr5NVj087jPH0UVEqIOM.roa (hash: K3WcOTsUriKcpWXE1oQcG3kJpx5GuCFTz9zkPDyBd4I=)
2: CpYXrnLvjR2OacRHrAwyXhQn-54.roa (hash: QEMefUV+U9Y/lW0Jd6Vawm/+aN0QKHnAj1lMOhtlgXc=)
3: HkwyCG4emEUFaRsB9Zhd96NrJK4.crl (hash: ta+O8yiK9DsTZ4GRY7pPTPEpzmr8nSrpGi66e4F2MJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:ef:77:e9:b4:10:05:9c:c2:9d:55:42:c9:f3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Validity
Not Before: Apr 17 08:00:47 2026 GMT
Not After : Apr 18 08:00:47 2026 GMT
Subject: CN=3059a7a8f84eb489ea6b3e4dc293462d956ecb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1c:f4:62:fa:d7:9a:46:e9:ff:22:1a:5e:06:
ef:27:ed:a2:6e:36:04:18:fe:d9:ad:da:6f:2f:08:
43:07:ed:38:4b:7e:9d:e5:bb:e2:00:cc:4a:f7:b1:
2d:17:4d:68:76:f0:a1:6b:f8:10:5e:d3:7c:e3:bc:
8b:cd:f9:d7:be:02:7a:83:03:aa:bb:a8:19:d8:43:
c9:97:79:01:7b:24:2b:b5:eb:b1:be:b8:63:13:7c:
ba:40:d7:4a:7a:de:e3:f9:b0:01:b3:92:45:37:05:
0b:ca:43:9b:37:a3:2b:82:92:bf:e2:33:2b:d7:f4:
bf:6e:28:ec:13:f7:c0:99:42:5d:dc:5a:cb:ae:02:
bf:8b:8d:51:da:a5:0a:1c:6c:b8:a6:61:aa:00:ca:
ce:9d:8a:c6:ff:14:e2:bc:e0:08:00:27:54:71:72:
91:ec:ce:00:9c:53:49:58:09:b5:7e:08:4f:ea:5d:
5c:10:22:5b:8f:8c:3d:f8:77:b7:ce:44:2e:59:b0:
70:65:79:73:a6:cf:8f:5a:c2:6b:b0:9e:ec:48:90:
da:ee:71:29:12:1e:35:dd:62:c8:cc:60:81:c9:6d:
91:0d:c8:72:de:e5:fa:5e:ce:12:9d:e2:86:64:d1:
7d:52:d5:cd:9b:7d:d0:b8:0b:60:79:46:0e:be:bd:
da:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:59:A7:A8:F8:4E:B4:89:EA:6B:3E:4D:C2:93:46:2D:95:6E:CB:8C
X509v3 Authority Key Identifier:
keyid:1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c1:65:4a:e9:83:c9:e9:75:28:b8:52:35:90:f3:8a:c1:71:
d9:33:0b:69:2d:29:23:58:c8:80:1b:f3:bb:58:5b:00:9b:b5:
da:7c:cf:08:3c:e4:c6:56:40:0f:53:4f:eb:fc:a8:0b:33:a4:
4c:39:81:b4:06:65:68:86:4e:b6:bc:78:89:56:f7:b7:7d:cb:
36:a5:92:11:26:81:69:1a:00:57:c7:d8:b9:f1:ea:4e:f3:9a:
0a:95:a1:c4:a9:b5:22:87:e1:1b:f2:74:75:13:64:f2:f3:45:
c6:2b:10:54:0c:96:6d:09:a9:c2:43:8c:b4:81:c8:00:85:0a:
37:a2:1f:d8:ae:82:5b:ce:d7:15:d9:dc:97:70:4b:d6:96:e7:
79:54:17:f5:45:54:10:c4:f1:ac:e7:b3:ee:f4:0f:74:f1:2b:
dc:7a:b8:ba:d1:e1:10:13:b4:40:c2:03:0f:a5:30:14:41:5b:
c6:29:9f:7d:f8:2b:87:4e:c6:50:6a:ad:b9:54:9d:67:7a:ca:
4d:1b:47:a1:9e:3f:20:31:36:d5:da:e6:dd:37:1e:70:17:df:
6e:d2:df:82:ab:a2:6e:39:72:a6:9d:0a:71:1f:c2:a0:37:e9:
f9:3a:74:bc:d1:fa:da:a2:50:0e:3d:bf:3d:c7:38:0a:b2:71:
6b:0c:a4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:25:17 2026 by rpki-client