Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
File: uwKqn6RfyXvbLm3I_Ap_A3HITek.mft (raw, json)
Hash identifier: DPDDCS8J5VT1Swll3BoYQixMTzV2CjGJ+FRZLIGWCVI=
Subject key identifier: 24:7D:79:92:30:0B:A8:4F:26:AD:66:25:14:56:75:7C:3A:16:44:DD
Authority key identifier: BB:02:AA:9F:A4:5F:C9:7B:DB:2E:6D:C8:FC:0A:7F:03:71:C8:4D:E9
Certificate issuer: /CN=bb02aa9fa45fc97bdb2e6dc8fc0a7f0371c84de9
Certificate serial: 019ED42B5AB959653722446D022CB49E82DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
Manifest number: 0510
Signing time: Wed 17 Jun 2026 06:01:11 +0000
Manifest this update: Wed 17 Jun 2026 06:01:11 +0000
Manifest next update: Thu 18 Jun 2026 06:01:11 +0000
Files and hashes: 1: FStRWITrx7mXYLP1GLGN2-na9w0.roa (hash: 9Kguvpi0MkdObkp26nsq/5tht75+Q0yDWXnyUXnDBmI=)
2: uwKqn6RfyXvbLm3I_Ap_A3HITek.crl (hash: OVg9vLFekSVKczkxfBcgQWOjfjEI9EBe05p8Zo5ZHTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:2b:5a:b9:59:65:37:22:44:6d:02:2c:b4:9e:82:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb02aa9fa45fc97bdb2e6dc8fc0a7f0371c84de9
Validity
Not Before: Jun 17 06:01:11 2026 GMT
Not After : Jun 18 06:01:11 2026 GMT
Subject: CN=247d7992300ba84f26ad66251456757c3a1644dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:d5:e3:fe:a3:2c:e5:f2:8b:8a:1a:4b:d9:
91:e2:71:3c:37:4d:8a:97:6b:d2:d5:79:c3:7b:5f:
3a:f0:b3:1b:db:75:43:49:bb:a8:bf:68:f2:79:e6:
c4:39:cc:ed:4c:63:a9:4a:5d:ff:40:6a:ef:3c:1b:
72:6e:c2:ed:5c:b3:33:e6:f5:0a:99:f7:a7:ed:b5:
7f:e2:fa:ac:a5:32:47:48:e8:9c:74:c0:82:74:b5:
91:ec:ea:5c:50:29:e4:38:d4:07:b8:95:ee:63:6c:
83:a1:b5:f2:4f:e6:55:fc:fb:31:9c:f3:8d:e5:66:
b0:f5:49:30:fc:3f:c0:27:e1:64:e3:64:ed:cd:31:
b4:46:1d:fc:91:9d:a6:8f:95:f2:85:fc:4d:f2:45:
44:05:42:99:5e:5b:7f:d6:1b:a6:09:d9:7d:91:67:
9e:6a:1d:cb:42:65:11:40:35:72:2b:1c:ed:5b:32:
da:87:f8:ce:49:3c:98:63:ba:6c:65:f0:49:85:b7:
2d:bb:31:34:b6:5c:60:60:e1:e9:8d:f2:26:91:4c:
64:d5:55:01:73:2e:03:7b:03:66:cb:5b:72:37:9e:
04:d4:ae:5d:10:9d:8c:e3:96:17:3c:0d:65:d1:b4:
5d:a4:3d:d4:fd:2c:fa:e8:45:79:6b:0c:67:4e:7f:
98:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7D:79:92:30:0B:A8:4F:26:AD:66:25:14:56:75:7C:3A:16:44:DD
X509v3 Authority Key Identifier:
keyid:BB:02:AA:9F:A4:5F:C9:7B:DB:2E:6D:C8:FC:0A:7F:03:71:C8:4D:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:4a:19:c8:45:43:0f:1d:35:8d:54:18:73:45:76:8f:a0:61:
00:bd:eb:f6:68:a1:a3:f9:3a:aa:b7:c8:82:0a:53:6d:ef:04:
bf:a2:e9:3f:bc:5d:14:d2:6c:e2:22:2d:b7:3f:b9:a4:7d:ce:
38:e5:b7:70:3b:51:74:8a:93:de:bc:7f:09:c3:d6:0d:26:55:
6a:63:f8:1a:88:66:26:9a:db:a0:bd:3c:cf:74:ce:17:b7:16:
91:ee:a5:93:91:bf:cb:67:b9:69:eb:80:fd:b5:2a:26:ef:7f:
17:d6:ad:2f:be:1f:a5:74:10:73:3d:a1:0b:ed:44:d4:ec:82:
02:37:25:21:bf:0d:c9:7c:05:27:13:6d:27:11:08:cc:6f:4f:
a3:9d:f2:43:9d:72:7d:ba:5b:d4:2e:08:c7:06:e1:3a:be:c5:
7e:91:14:d3:3b:40:65:bc:d0:59:2d:b1:fe:c7:f5:12:6f:06:
8c:54:4f:07:e2:af:73:22:0a:cd:83:85:48:28:ad:08:ef:bc:
58:30:0b:1a:04:ad:57:7b:f5:1a:16:f2:8d:f5:bb:9b:23:da:
2f:d4:43:49:c0:08:af:81:d1:75:98:ad:f8:44:87:c5:9a:52:
7a:62:f8:a1:58:85:3a:fa:54:fd:2c:de:d0:34:62:36:59:48:
dc:ef:38:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 15:56:51 2026 by rpki-client