Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
File: HQhx_C6ZiS6hEVowITjh0ypiGCw.mft (raw, json)
Hash identifier: 8kE68YGTvNQsh3zMJJHRF1vFyxd+NY8h1tk2IKcWlYw=
Subject key identifier: 9E:3F:A3:9D:2E:A7:3F:42:62:8C:81:54:EF:38:2C:03:52:67:7E:E5
Authority key identifier: 1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
Certificate issuer: /CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Certificate serial: 019DA378B04B1FF8430723163B973C1C8773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
Manifest number: 18CB
Signing time: Sun 19 Apr 2026 02:01:28 +0000
Manifest this update: Sun 19 Apr 2026 02:01:28 +0000
Manifest next update: Mon 20 Apr 2026 02:01:28 +0000
Files and hashes: 1: CWhgnMt-ss9B8-btHZoqc3CLkvE.roa (hash: E3kIV5fo174JAQ+/2CA5CLbdIf038voHzxoXiPQe6Z8=)
2: HQhx_C6ZiS6hEVowITjh0ypiGCw.crl (hash: KlmQmM1VHjDH6MgYZTCEH/Pt3Ss1KnzCT8TrDP3GmtQ=)
3: RS-DcQuebpqY8Culr_rM9_XKltU.roa (hash: D72/49kWrpo5EEjDXndBWXIkpecf2+TgHDpJLb07DlU=)
4: mgGVP9w-ya_7zv7yO1xWTM7sa_0.roa (hash: CNgDgTCH1ZO1+h/LC5uHK3Xji2RJx/Y7qygtDyi4V4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:b0:4b:1f:f8:43:07:23:16:3b:97:3c:1c:87:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Validity
Not Before: Apr 19 02:01:28 2026 GMT
Not After : Apr 20 02:01:28 2026 GMT
Subject: CN=9e3fa39d2ea73f42628c8154ef382c0352677ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e4:54:c6:a8:f3:37:91:bb:fc:3c:fa:9c:bf:
b4:b0:a2:83:00:6a:c9:d2:09:82:fe:6c:f2:cf:38:
05:cb:b0:e6:c0:02:f7:42:9c:96:ee:14:7c:98:da:
91:44:98:5e:57:b9:8b:91:9b:61:8c:ed:97:a3:a2:
bc:f5:c8:82:14:2a:c5:53:c0:ab:14:1c:63:1b:7e:
85:53:fd:8e:ab:12:83:77:81:27:ca:ad:8f:d0:96:
af:d1:38:83:b9:f5:34:6f:ed:9d:15:54:aa:3a:5d:
be:c9:67:5c:0a:e5:98:8b:e1:a0:da:f5:9a:e6:94:
fe:9c:ee:ed:16:e8:e3:20:b8:e0:e4:ee:fd:99:4e:
7a:61:e7:ae:03:aa:7c:5b:26:7a:99:3e:3f:54:6b:
0b:38:ca:9d:6f:e7:ba:98:63:32:b2:f7:e6:72:d4:
4d:2a:1f:bc:d1:ec:b2:d5:dd:d9:99:0b:99:c0:6b:
2f:7a:44:69:ba:9e:93:00:7b:c2:e1:55:90:54:fd:
1d:98:a9:d6:56:95:6b:71:5f:d4:e7:8d:ca:b3:ce:
cf:bc:c1:b6:af:b3:b6:dd:df:54:07:05:fe:47:b0:
6e:74:2a:33:37:c1:eb:f5:5e:b0:73:47:f7:96:bf:
7f:52:56:eb:62:2f:06:25:47:cd:7a:4c:37:b0:a5:
12:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3F:A3:9D:2E:A7:3F:42:62:8C:81:54:EF:38:2C:03:52:67:7E:E5
X509v3 Authority Key Identifier:
keyid:1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:68:88:96:e1:35:95:fd:93:8e:d8:40:72:62:52:11:45:f7:
4c:84:5f:b6:a9:85:e3:8d:f3:51:91:24:9d:e6:14:4e:ab:f9:
a5:45:45:ab:0e:7d:fd:c9:15:0c:1d:f3:ba:3c:e8:93:ef:e9:
bd:52:38:f6:c3:6e:21:e8:6c:56:16:36:7b:c1:36:b9:f9:97:
03:57:56:83:86:f7:db:b5:46:eb:e1:2b:e9:22:a5:b6:43:9a:
7a:ce:f9:77:65:34:6b:57:e1:c6:ef:1c:4b:42:60:a6:99:df:
82:49:60:6f:0b:3a:45:ce:85:67:09:df:19:5d:56:02:0a:61:
d5:07:58:c1:e0:88:2c:91:c1:1d:dc:78:63:e0:c4:79:41:c9:
30:cf:3e:52:91:15:a0:bf:d0:5d:f1:e6:6f:8d:fb:7c:af:96:
8d:63:bc:53:a0:83:1b:5a:5e:78:2d:08:ed:73:6d:51:4f:ab:
d8:c9:28:37:06:c7:a1:42:c7:06:a4:2a:bf:d7:4d:db:2d:24:
9f:71:19:cf:3f:80:4c:0d:85:5a:62:59:a6:95:b0:7a:5e:af:
ee:98:36:35:02:8e:ba:01:89:8f:88:cc:bd:fc:3d:83:f3:28:
5d:3b:58:c0:97:f5:a3:c7:6f:2e:cd:87:b1:58:41:2c:c3:7d:
70:63:b9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:08 2026 by rpki-client