Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
File: HQhx_C6ZiS6hEVowITjh0ypiGCw.mft (raw, json)
Hash identifier: 2Zf+1zo4Tq95jLkwONEU7ZPnilPYD+vQrdD+J63G418=
Subject key identifier: 41:AF:30:EA:54:D6:F4:5D:36:BA:C5:69:6D:56:9B:DD:4B:13:5F:C3
Authority key identifier: 1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
Certificate issuer: /CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Certificate serial: 019DA94365B7DD4B604D3F5C2D5EFCD49CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
Manifest number: 18CE
Signing time: Mon 20 Apr 2026 05:00:59 +0000
Manifest this update: Mon 20 Apr 2026 05:00:59 +0000
Manifest next update: Tue 21 Apr 2026 05:00:59 +0000
Files and hashes: 1: CWhgnMt-ss9B8-btHZoqc3CLkvE.roa (hash: E3kIV5fo174JAQ+/2CA5CLbdIf038voHzxoXiPQe6Z8=)
2: HQhx_C6ZiS6hEVowITjh0ypiGCw.crl (hash: O2K/z2g90fXWX3dfooZ2HqifomP78PDw4YRdfusPt0w=)
3: RS-DcQuebpqY8Culr_rM9_XKltU.roa (hash: D72/49kWrpo5EEjDXndBWXIkpecf2+TgHDpJLb07DlU=)
4: mgGVP9w-ya_7zv7yO1xWTM7sa_0.roa (hash: CNgDgTCH1ZO1+h/LC5uHK3Xji2RJx/Y7qygtDyi4V4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:43:65:b7:dd:4b:60:4d:3f:5c:2d:5e:fc:d4:9c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Validity
Not Before: Apr 20 05:00:59 2026 GMT
Not After : Apr 21 05:00:59 2026 GMT
Subject: CN=41af30ea54d6f45d36bac5696d569bdd4b135fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bd:81:52:37:e9:aa:6a:88:fb:65:2a:40:ce:
42:2d:c3:2e:b6:6a:7f:46:60:33:21:1c:da:e8:45:
06:27:83:69:0e:ec:ce:4b:2e:19:2f:ea:d7:d2:b2:
8a:d1:98:c8:17:59:b0:9c:08:04:e3:38:f6:0d:5a:
54:ed:54:d7:da:03:a0:ee:04:28:50:2c:95:db:de:
93:c4:28:d3:dd:bf:30:7f:aa:87:45:70:0d:10:40:
9f:2b:cc:31:3e:b5:70:d9:ee:3b:45:bb:d5:71:2b:
52:ef:c6:a6:88:6c:b7:45:5f:36:5e:23:39:18:1a:
93:62:e0:9e:5a:3d:20:47:3d:96:0d:75:c8:0f:ae:
f2:82:4c:2d:7b:3d:53:1b:b9:fc:4b:99:a6:fd:a6:
2a:44:de:43:b8:93:94:e5:b5:3b:83:29:10:f1:19:
dd:7e:a9:ca:4f:20:99:37:5b:33:8b:8a:7c:35:86:
81:0e:91:b5:e3:51:61:f4:41:31:4b:7a:64:4f:9c:
dd:bd:82:d5:c3:02:84:ce:cb:f4:5c:41:5c:57:a2:
55:09:9c:39:a6:dd:70:0a:ba:1e:6d:e7:e8:33:f9:
be:3e:55:a2:16:5d:92:cc:ad:fc:eb:c1:61:b6:f2:
90:3f:5e:0e:be:5c:27:e8:2b:50:cd:d0:78:58:9d:
77:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AF:30:EA:54:D6:F4:5D:36:BA:C5:69:6D:56:9B:DD:4B:13:5F:C3
X509v3 Authority Key Identifier:
keyid:1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:80:d0:e3:9f:84:32:8f:3e:e3:45:06:44:0b:d6:f5:b7:70:
d5:fe:10:e8:f0:4c:b3:40:d7:cf:e5:0f:d6:61:f2:e4:47:bf:
6c:a1:d2:f7:6f:21:0c:da:a2:76:7b:5c:68:56:eb:06:fd:e5:
f3:46:ac:20:c0:31:30:f0:9b:4d:56:f9:fd:da:0d:c0:d8:85:
8c:34:77:b2:44:fc:2b:cb:37:55:9b:f1:39:b2:0e:c9:b1:05:
8a:bf:40:22:10:a9:38:31:53:30:9a:bb:a2:5a:57:84:79:39:
2e:fb:d8:52:04:09:d6:b4:28:65:80:0b:dd:c8:6e:a6:15:1c:
6c:50:01:86:f4:60:b6:82:17:5d:ff:ec:63:12:bc:70:27:d1:
7e:84:17:5c:6e:f5:eb:98:63:58:34:a1:2f:e9:fc:71:02:ea:
ad:6a:f2:96:0e:b1:2e:bd:f7:3f:58:62:39:2b:89:61:d4:ff:
a1:22:4a:96:a2:2f:06:c0:55:35:40:cc:43:a2:58:a1:4f:a1:
7c:6c:f5:3a:6c:35:5c:9c:a3:7f:15:54:9f:e8:63:60:de:fd:
5c:3f:fd:da:e5:cb:85:8c:97:1b:46:c6:42:05:1a:0b:2d:de:
07:12:a3:56:25:d3:eb:06:ec:3d:04:78:a1:12:34:fa:4c:e6:
f8:73:52:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:27:16 2026 by rpki-client