Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
File: HQhx_C6ZiS6hEVowITjh0ypiGCw.mft (raw, json)
Hash identifier: rUN42/iMr1uAWmaix+0VK2M7m4W79gL88lyVGOg1D5o=
Subject key identifier: A0:E0:C3:F4:45:19:41:19:3C:FE:5C:10:F8:FC:39:FB:B9:9E:8B:65
Authority key identifier: 1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
Certificate issuer: /CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Certificate serial: 019D99D0A4BA7294CDB4EE256B9C4686874A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 05:01:20 +0000
Manifest this update: Fri 17 Apr 2026 05:01:20 +0000
Manifest next update: Sat 18 Apr 2026 05:01:20 +0000
Files and hashes: 1: CWhgnMt-ss9B8-btHZoqc3CLkvE.roa (hash: E3kIV5fo174JAQ+/2CA5CLbdIf038voHzxoXiPQe6Z8=)
2: HQhx_C6ZiS6hEVowITjh0ypiGCw.crl (hash: mrNUsmNaxmOo6aqCuo7VqtsVjNfD5JCZFbEZDCs6X6c=)
3: RS-DcQuebpqY8Culr_rM9_XKltU.roa (hash: D72/49kWrpo5EEjDXndBWXIkpecf2+TgHDpJLb07DlU=)
4: mgGVP9w-ya_7zv7yO1xWTM7sa_0.roa (hash: CNgDgTCH1ZO1+h/LC5uHK3Xji2RJx/Y7qygtDyi4V4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:a4:ba:72:94:cd:b4:ee:25:6b:9c:46:86:87:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Validity
Not Before: Apr 17 05:01:20 2026 GMT
Not After : Apr 18 05:01:20 2026 GMT
Subject: CN=a0e0c3f4451941193cfe5c10f8fc39fbb99e8b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:74:4b:3e:b1:b2:9d:db:b7:e8:a8:6b:d3:
13:9f:6c:6e:08:6c:15:ec:c0:74:3b:eb:87:2e:9b:
c0:1c:d1:43:d4:55:37:ca:d3:c0:fe:3b:01:42:e4:
ca:c9:5a:9c:c1:ec:9f:c8:68:bb:4d:c0:86:d2:47:
3b:b7:b9:6d:83:6b:55:95:13:c5:58:d5:36:41:a9:
7e:97:fa:9e:22:89:01:51:d3:67:96:a9:b0:54:ac:
5e:1a:ca:00:bc:29:47:ca:5f:19:9e:5b:43:c9:83:
46:f2:73:b9:b4:96:c7:44:52:9e:6a:3e:eb:b8:d3:
04:9a:9c:3f:b0:ce:20:00:e7:89:09:9f:66:83:c5:
e5:ed:66:a7:cb:d0:81:58:83:83:2a:ad:33:b4:e7:
fc:5b:4f:b6:b5:2a:2d:85:08:e4:f5:cd:8a:c2:f2:
49:7d:d5:93:45:8d:be:21:c7:3c:2e:28:bd:04:2b:
39:5a:93:2d:2e:fa:5c:0b:9a:65:f5:58:a2:93:74:
6d:19:14:36:34:5b:12:8f:fc:6c:dd:41:1e:46:50:
c5:b1:35:f5:83:27:bf:4d:5a:59:4e:a5:81:b4:3e:
9e:86:98:9e:f5:63:2a:3b:25:6a:8a:bf:35:2d:60:
86:17:df:b6:12:b8:f0:0c:c6:b3:60:9b:95:65:a6:
ee:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E0:C3:F4:45:19:41:19:3C:FE:5C:10:F8:FC:39:FB:B9:9E:8B:65
X509v3 Authority Key Identifier:
keyid:1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d3:fb:ea:b1:d0:27:f9:c7:5b:2d:0a:a3:a1:fc:9d:49:7c:
5a:0b:82:44:39:b9:b3:b5:f2:87:4c:d1:43:51:e5:1e:fb:4f:
c9:4b:22:7f:ac:a4:5b:1f:84:dc:03:c5:34:a8:44:8b:b5:8d:
fb:5f:83:02:5c:af:b5:4e:a8:a9:86:54:3b:26:bc:13:cb:bb:
76:10:ce:7d:a8:68:48:ae:9b:51:15:be:d3:fe:3b:f9:50:3e:
ea:bb:a7:33:f2:9f:23:ff:db:77:03:2f:b0:43:80:77:83:e8:
f4:04:cb:8e:a0:30:96:97:73:f2:47:0c:bd:a2:84:24:16:f6:
48:ff:ac:75:9c:6b:2e:49:95:c8:87:9e:1e:0d:d0:7f:32:b9:
c5:7f:81:1e:1e:04:c6:7e:8e:43:d3:fb:e5:7c:65:e2:7d:6d:
d1:61:a3:15:b3:81:ad:54:95:0e:c1:82:1a:c5:a5:e9:19:75:
fc:40:7e:3e:da:d8:9b:2e:34:85:d6:3b:f2:7f:b7:82:e0:f3:
62:ba:a7:43:0c:5e:45:2d:fa:cc:29:ff:f0:ff:db:6e:cc:2a:
c5:54:c8:e2:cb:b5:eb:4c:65:b7:a1:fd:5f:46:7f:69:7b:ce:
15:b0:02:5c:54:86:da:06:6c:df:87:70:7a:e5:d8:fc:bb:9b:
f4:9f:90:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:52:09 2026 by rpki-client