Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
File: uwKqn6RfyXvbLm3I_Ap_A3HITek.mft (raw, json)
Hash identifier: cfnMylsi1t8Cu8LlQFVHZnDksZow/jMufXAxncBpRv8=
Subject key identifier: 04:99:AD:80:49:C5:4F:5F:39:BC:1F:4D:10:BB:47:37:7A:F1:62:71
Authority key identifier: BB:02:AA:9F:A4:5F:C9:7B:DB:2E:6D:C8:FC:0A:7F:03:71:C8:4D:E9
Certificate issuer: /CN=bb02aa9fa45fc97bdb2e6dc8fc0a7f0371c84de9
Certificate serial: 019CAFB5B8E75AA21E0222225675339F7ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
Manifest number: 03F4
Signing time: Mon 02 Mar 2026 18:00:47 +0000
Manifest this update: Mon 02 Mar 2026 18:00:47 +0000
Manifest next update: Tue 03 Mar 2026 18:00:47 +0000
Files and hashes: 1: FStRWITrx7mXYLP1GLGN2-na9w0.roa (hash: 9Kguvpi0MkdObkp26nsq/5tht75+Q0yDWXnyUXnDBmI=)
2: uwKqn6RfyXvbLm3I_Ap_A3HITek.crl (hash: utwDE9HCb+leUWGOk0IZSio/niAXBTndiPHu4vvFTcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b5:b8:e7:5a:a2:1e:02:22:22:56:75:33:9f:7e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb02aa9fa45fc97bdb2e6dc8fc0a7f0371c84de9
Validity
Not Before: Mar 2 18:00:47 2026 GMT
Not After : Mar 3 18:00:47 2026 GMT
Subject: CN=0499ad8049c54f5f39bc1f4d10bb47377af16271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:04:2a:b2:64:0a:45:5e:bb:ba:44:ec:84:93:
32:ef:14:74:f2:9a:4b:26:c8:c7:6d:c2:30:a5:0b:
7c:27:b3:03:62:b3:25:95:86:04:d6:e4:00:ea:db:
86:4f:5d:31:0b:30:55:02:0c:de:6c:c6:de:03:71:
f8:46:cd:15:03:a2:0b:75:fd:76:09:a9:c8:93:b7:
14:cf:d5:c5:21:b9:2f:d3:bd:5e:d8:4c:ea:b9:de:
e1:d3:6c:3e:e2:3c:fb:e0:75:18:a4:3c:bb:5a:30:
51:01:b3:f5:68:8a:86:7d:e3:4b:19:a0:09:36:27:
3e:1c:70:14:f0:96:38:62:ee:2d:3c:a7:7d:fa:2d:
2b:9d:c2:87:5a:87:a5:66:04:61:2f:6a:82:94:27:
02:26:fb:22:74:b6:54:ac:c3:1a:42:ec:70:7e:ec:
8e:2f:ad:08:3a:8e:46:df:3b:5e:84:1b:49:dc:f7:
47:8b:4b:55:a2:10:74:fb:67:77:10:4b:4d:d7:ea:
3d:34:ac:3d:1b:89:cd:5c:19:5c:c6:a4:de:5d:a0:
4d:48:01:9f:06:91:d2:c4:e5:a5:7e:68:04:25:01:
6e:a6:de:20:e2:ea:da:de:7c:d0:fc:11:88:54:b9:
e9:79:80:df:5a:71:c1:24:ca:d2:51:e6:4b:7d:fa:
c0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:99:AD:80:49:C5:4F:5F:39:BC:1F:4D:10:BB:47:37:7A:F1:62:71
X509v3 Authority Key Identifier:
keyid:BB:02:AA:9F:A4:5F:C9:7B:DB:2E:6D:C8:FC:0A:7F:03:71:C8:4D:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ae:54:7f:b7:0f:da:04:5d:66:19:14:f7:08:21:d3:37:77:
16:f3:e2:90:d1:7a:8b:3f:cf:e7:54:04:11:c2:3c:c2:e8:ac:
a7:e6:0a:09:7c:f8:ea:cb:51:2e:5f:b0:df:19:6b:a2:c0:c9:
20:91:d2:21:b7:5d:f6:87:7f:72:6f:d8:a2:87:db:db:f9:7f:
f4:a2:ed:a8:4e:c4:59:e1:ce:69:bf:5f:ef:37:f4:0c:1f:46:
00:d5:3a:0b:4d:e0:61:f4:ee:55:ae:1f:92:77:6e:a2:aa:90:
4f:60:e9:08:7e:dc:e8:78:31:eb:a6:2f:cf:76:42:ce:07:d9:
10:b2:19:25:39:59:1d:e1:fb:1c:7f:40:e2:3a:ff:6b:f1:12:
b1:e4:3d:87:d1:27:e1:41:62:df:97:b1:ee:fc:55:f6:54:74:
d8:58:85:e5:1e:be:f2:40:38:1a:c3:e4:12:19:47:08:a8:cb:
07:b2:a5:07:35:b6:80:83:78:8e:22:1e:90:f6:4e:44:e2:44:
0b:f8:6d:38:81:b0:1f:41:56:87:a7:24:11:64:97:15:98:0e:
66:df:c9:67:66:c3:1b:b2:83:54:57:1e:1f:e9:83:25:ce:71:
46:f8:c7:36:3c:70:2b:80:fb:93:25:b1:dc:39:ae:a1:f3:a6:
99:82:59:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:25:35 2026 by rpki-client