Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
File: uwKqn6RfyXvbLm3I_Ap_A3HITek.mft (raw, json)
Hash identifier: JjqljZbC6t/YJ91vOU68VKAjvDowXyAYMIWDcyN2HHI=
Subject key identifier: 70:4F:66:57:EE:5F:DF:02:B1:DA:4C:49:5B:31:0B:04:4F:B7:34:8B
Authority key identifier: BB:02:AA:9F:A4:5F:C9:7B:DB:2E:6D:C8:FC:0A:7F:03:71:C8:4D:E9
Certificate issuer: /CN=bb02aa9fa45fc97bdb2e6dc8fc0a7f0371c84de9
Certificate serial: 019DA4F85854799487FB8E96CF435A019EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
Manifest number: 0473
Signing time: Sun 19 Apr 2026 09:00:31 +0000
Manifest this update: Sun 19 Apr 2026 09:00:31 +0000
Manifest next update: Mon 20 Apr 2026 09:00:31 +0000
Files and hashes: 1: FStRWITrx7mXYLP1GLGN2-na9w0.roa (hash: 9Kguvpi0MkdObkp26nsq/5tht75+Q0yDWXnyUXnDBmI=)
2: uwKqn6RfyXvbLm3I_Ap_A3HITek.crl (hash: 798N8Q35ClBaZQhMBx7HDraLhqY3Hs8VxoSxLa6/z0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:58:54:79:94:87:fb:8e:96:cf:43:5a:01:9e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb02aa9fa45fc97bdb2e6dc8fc0a7f0371c84de9
Validity
Not Before: Apr 19 09:00:31 2026 GMT
Not After : Apr 20 09:00:31 2026 GMT
Subject: CN=704f6657ee5fdf02b1da4c495b310b044fb7348b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:02:28:e5:fd:d1:5d:93:b9:af:9c:3b:11:ac:
fa:5a:58:48:5a:d8:0d:3e:79:10:c6:d5:61:1e:f8:
d3:8b:fb:84:fd:d0:73:37:15:57:5c:9b:b5:db:62:
09:f4:b7:9a:7e:62:4a:54:09:2b:f9:52:7f:37:e0:
8b:ea:80:e0:3e:09:ad:d6:8b:f8:e2:78:2c:68:39:
b3:e3:bd:be:ed:cc:ce:f7:b8:22:ae:69:54:6d:ed:
21:7b:93:95:8e:7c:dc:9b:80:dc:cf:7e:5e:75:c4:
9a:9b:44:7d:c3:ba:5a:3b:3f:19:fc:61:7a:44:e7:
70:ad:78:6d:45:b5:d8:ec:c4:ad:57:55:1e:e9:9d:
c4:82:81:21:56:ab:dd:7b:e9:dc:e4:52:0e:ec:d9:
64:af:58:0e:9f:69:5f:98:56:b4:07:81:33:d7:f8:
1a:63:db:9d:f3:f0:9e:33:17:3c:d1:d5:fd:d9:60:
e4:77:93:c4:f2:95:87:94:28:c4:d9:ff:1d:72:8a:
6a:d0:d7:08:2f:ae:85:bd:36:a3:6f:36:95:b7:6a:
c4:26:28:9b:03:49:68:c3:da:36:df:81:d5:ab:53:
57:1b:92:0a:b2:5c:c8:4c:04:42:42:96:89:f0:b2:
e8:19:85:e7:72:b4:ba:e6:e4:4d:8e:d0:69:e6:23:
f3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4F:66:57:EE:5F:DF:02:B1:DA:4C:49:5B:31:0B:04:4F:B7:34:8B
X509v3 Authority Key Identifier:
keyid:BB:02:AA:9F:A4:5F:C9:7B:DB:2E:6D:C8:FC:0A:7F:03:71:C8:4D:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:dd:64:84:fb:46:c8:8b:97:d3:7d:85:bb:b9:9b:aa:4b:08:
a0:cb:c3:c6:b5:1d:15:a1:e8:83:2d:13:4f:2f:2a:88:97:ad:
ef:85:a8:ec:e7:a6:3e:aa:ba:ab:2b:e4:20:08:a6:03:dc:34:
74:63:5a:1c:3a:23:61:a1:a3:bc:25:f8:bb:cf:d8:26:46:33:
11:b3:d7:96:67:22:41:2d:86:a9:89:b7:73:a9:69:0b:0e:19:
9c:44:27:37:d5:0a:86:cc:d1:4f:65:01:98:4d:6b:cb:42:a8:
f7:37:74:2b:09:91:8c:93:78:30:8a:6f:13:85:b6:6d:5e:f3:
b4:91:79:07:43:57:4a:32:44:7e:4d:35:b1:2c:e8:b8:85:89:
3d:28:b6:27:72:72:17:96:40:df:99:5d:69:fd:24:ec:03:38:
73:c6:81:9f:89:73:1f:32:33:84:67:c8:e0:84:7d:8d:33:06:
67:7b:6e:8a:de:cd:b7:d4:d9:0f:07:59:bc:7c:94:ce:87:53:
e6:28:ff:32:18:22:78:e5:4f:e3:9c:14:2e:9f:12:20:c4:8c:
34:36:42:c4:68:93:35:c7:65:41:9d:34:34:f8:bb:f8:ff:b4:
3b:b9:78:42:ab:05:b8:ae:e7:16:dd:ee:9e:b5:e7:5f:ef:2a:
3d:96:aa:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2k+FhUeZSH+46Wz0NaAZ7uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMDJhYTlmYTQ1ZmM5N2JkYjJlNmRjOGZjMGE3ZjAzNzFj
ODRkZTkwHhcNMjYwNDE5MDkwMDMxWhcNMjYwNDIwMDkwMDMxWjAzMTEwLwYDVQQD
Eyg3MDRmNjY1N2VlNWZkZjAyYjFkYTRjNDk1YjMxMGIwNDRmYjczNDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAIo5f3RXZO5r5w7Eaz6WlhIWtgN
PnkQxtVhHvjTi/uE/dBzNxVXXJu122IJ9LeafmJKVAkr+VJ/N+CL6oDgPgmt1ov4
4ngsaDmz472+7czO97girmlUbe0he5OVjnzcm4Dcz35edcSam0R9w7paOz8Z/GF6
ROdwrXhtRbXY7MStV1Ue6Z3EgoEhVqvde+nc5FIO7Nlkr1gOn2lfmFa0B4Ez1/ga
Y9ud8/CeMxc80dX92WDkd5PE8pWHlCjE2f8dcopq0NcIL66FvTajbzaVt2rEJiib
A0low9o234HVq1NXG5IKslzITARCQpaJ8LLoGYXncrS65uRNjtBp5iPzRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBPZlfuX98CsdpMSVsxCwRPtzSLMB8GA1UdIwQY
MBaAFLsCqp+kX8l72y5tyPwKfwNxyE3pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXdLcW42UmZ5WHZiTG0zSV9BcF9BM0hJVGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jYzIwMzktMjQ1MS00MDVlLWIwNmQt
YWMxODNhOWFkZWIxLzEvdXdLcW42UmZ5WHZiTG0zSV9BcF9BM0hJVGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9jYzIwMzktMjQ1MS00MDVlLWIwNmQtYWMxODNhOWFkZWIx
LzEvdXdLcW42UmZ5WHZiTG0zSV9BcF9BM0hJVGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtd1khPtG
yIuX032Fu7mbqksIoMvDxrUdFaHogy0TTy8qiJet74Wo7OemPqq6qyvkIAimA9w0
dGNaHDojYaGjvCX4u8/YJkYzEbPXlmciQS2GqYm3c6lpCw4ZnEQnN9UKhszRT2UB
mE1ry0Ko9zd0KwmRjJN4MIpvE4W2bV7ztJF5B0NXSjJEfk01sSzouIWJPSi2J3Jy
F5ZA35ldaf0k7AM4c8aBn4lzHzIzhGfI4IR9jTMGZ3tuit7Nt9TZDwdZvHyUzodT
5ij/MhgieOVP45wULp8SIMSMNDZCxGiTNcdlQZ00NPi7+P+0O7l4QqsFuK7nFt3u
nrXnX+8qPZaqlQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 15:47:43 2026 by rpki-client