Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json)
Hash identifier: 6DeG1a+xF8R4sVLAsKPN/63ECMnVe5JsKjzQZ7xUzv0=
Subject key identifier: 63:32:87:79:23:5A:26:89:A2:5B:E2:C6:68:DA:2F:A7:4D:EE:92:5C
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 019D97E265FAC41B8A2C129A761D7EB693A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
Manifest number: 18C4
Signing time: Thu 16 Apr 2026 20:01:29 +0000
Manifest this update: Thu 16 Apr 2026 20:01:29 +0000
Manifest next update: Fri 17 Apr 2026 20:01:29 +0000
Files and hashes: 1: 1-HlvbCJNPQqbQTj7sOLytVScyXs.roa (hash: noL3a9J9uAIXExIUBziMmyDD1hsmozeUCUlJG1fTlj4=)
2: FGzaGikutggc0GozzhRYAPMCWAA.roa (hash: 6i7YJ4mPxoEfox+KpQaovOXMy6INsexpIsotwg+vSHI=)
3: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: ZEIN+fK76ZXp5R2FSVuQRddcqfBkwC0xTJdoXnSfJi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:65:fa:c4:1b:8a:2c:12:9a:76:1d:7e:b6:93:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Apr 16 20:01:29 2026 GMT
Not After : Apr 17 20:01:29 2026 GMT
Subject: CN=63328779235a2689a25be2c668da2fa74dee925c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:e6:0a:ca:f7:d3:01:be:f6:f5:ee:fb:13:
92:70:6d:36:8b:5b:71:77:ed:28:28:0b:e4:4e:e8:
6a:e3:b8:7f:df:3c:3c:02:8b:71:b5:de:5d:8a:44:
37:52:7e:f1:d2:32:ca:2a:ea:35:67:ab:5d:fb:00:
04:5a:f1:9f:3e:d3:de:d6:6d:df:12:d9:bb:bc:3b:
c7:65:3d:63:31:8c:4f:9b:6b:76:fb:09:47:76:53:
65:84:e5:2c:0a:a5:98:e4:0b:8c:6d:a4:79:6e:94:
39:aa:50:0d:4d:83:df:d4:ad:90:41:dd:08:a5:58:
9a:f7:21:b0:63:86:91:84:df:ff:20:bd:73:dc:2e:
b6:10:ef:5a:4a:19:1f:ae:28:f6:30:38:95:fe:10:
19:e9:e7:4e:60:92:ad:69:f0:02:15:d6:34:c6:8a:
51:e6:68:a8:a3:bd:2b:57:eb:fb:b8:a0:13:3b:63:
6b:f3:6a:95:c6:2c:fe:34:9b:b0:68:65:3e:9a:f8:
bc:bd:e0:b5:66:07:52:6f:e6:c6:d2:e5:31:f4:99:
ca:9c:6e:b2:62:ae:f3:fb:d1:3b:4b:31:59:e1:9e:
73:96:e9:98:a2:dd:64:95:d3:98:2f:c3:17:ad:8a:
f1:3f:cd:8c:0c:f8:5f:40:98:10:0a:43:44:63:ef:
73:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:32:87:79:23:5A:26:89:A2:5B:E2:C6:68:DA:2F:A7:4D:EE:92:5C
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3f:e2:c5:b9:c2:80:b5:3b:c6:70:91:31:5e:a2:8e:10:f2:
25:2b:0d:e2:24:31:49:1a:bc:68:61:4c:2e:85:2a:5b:38:a3:
ef:15:07:0d:6c:9e:29:2b:0e:56:b2:be:e8:73:aa:be:94:1d:
56:79:23:d8:5e:e3:1e:b4:63:31:a4:b3:3b:bf:fe:50:f3:47:
c8:cb:dc:d7:67:a5:de:d3:90:1b:74:c9:3c:0d:07:d3:da:df:
50:df:d2:c1:25:fc:ee:81:f7:92:54:88:d9:04:9b:f5:70:29:
f7:81:52:15:bb:00:82:dd:d5:24:32:a8:89:67:b1:96:81:72:
e4:59:ec:b9:06:34:70:93:46:9b:b2:90:9b:d3:02:0b:05:d5:
b3:ec:1a:2e:3f:e6:70:14:67:ac:59:bb:78:bb:3c:75:e8:92:
31:58:89:55:5f:a3:9d:b8:52:b4:5c:69:71:f9:42:67:be:b2:
f1:6f:46:d6:7a:46:b4:56:da:68:77:ac:b6:13:e2:9d:89:38:
7d:30:c7:c1:f1:b2:11:bc:ab:4e:3d:93:65:dc:1c:2a:02:4c:
24:14:98:a5:4d:e7:d7:9b:64:08:92:df:05:12:3e:8a:ff:7e:
c3:50:da:96:e2:ad:29:ec:89:51:29:bb:09:f9:29:78:a9:c4:
ee:a7:e8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:49:25 2026 by rpki-client