Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
File: uwKqn6RfyXvbLm3I_Ap_A3HITek.mft (raw, json)
Hash identifier: +5XVPul57ipWfDUj+aRJMYaosGzs7Bd8BA3N/WGS+Yk=
Subject key identifier: FB:BC:20:F1:BA:C9:B0:36:76:BC:FE:71:DE:B7:67:A8:02:84:A5:69
Authority key identifier: BB:02:AA:9F:A4:5F:C9:7B:DB:2E:6D:C8:FC:0A:7F:03:71:C8:4D:E9
Certificate issuer: /CN=bb02aa9fa45fc97bdb2e6dc8fc0a7f0371c84de9
Certificate serial: 019E1EA3D7E3894F9A16DF3627DA8F49C857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
Manifest number: 04B2
Signing time: Wed 13 May 2026 00:01:54 +0000
Manifest this update: Wed 13 May 2026 00:01:54 +0000
Manifest next update: Thu 14 May 2026 00:01:54 +0000
Files and hashes: 1: FStRWITrx7mXYLP1GLGN2-na9w0.roa (hash: 9Kguvpi0MkdObkp26nsq/5tht75+Q0yDWXnyUXnDBmI=)
2: uwKqn6RfyXvbLm3I_Ap_A3HITek.crl (hash: wRKEdnXCChCDOLbAjAzntDXHb4z5v1q1PyMUAOL0dNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:d7:e3:89:4f:9a:16:df:36:27:da:8f:49:c8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb02aa9fa45fc97bdb2e6dc8fc0a7f0371c84de9
Validity
Not Before: May 13 00:01:54 2026 GMT
Not After : May 14 00:01:54 2026 GMT
Subject: CN=fbbc20f1bac9b03676bcfe71deb767a80284a569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:ac:f2:3b:54:27:b5:49:1b:6f:79:c5:5c:
a4:2b:9a:59:fe:72:5e:dd:35:11:de:0a:d1:3d:3c:
1a:84:22:9b:28:51:56:c2:fa:c8:86:bd:cd:f7:8b:
df:8c:d2:fa:72:5f:a2:66:c9:c7:3e:48:d7:04:10:
99:17:76:f3:49:eb:a1:33:72:20:f8:a0:d7:f2:1e:
96:c6:6d:52:36:b0:3e:9d:aa:f9:b9:97:1b:53:da:
32:49:27:3c:99:5f:4d:9b:40:42:8a:03:de:6a:b8:
3b:89:da:41:fc:7b:0f:ed:9f:41:3b:87:54:10:1f:
f5:61:58:9b:c0:57:64:9f:a6:1f:ae:ba:4e:fa:a7:
97:3e:9a:b0:77:c7:fd:b8:6a:6a:65:6f:3f:e9:a2:
b8:78:b4:57:a4:68:c4:31:93:6f:95:bf:b5:c3:f0:
2b:36:50:87:b3:00:7e:1b:00:94:59:2f:2c:2d:ac:
e2:5f:c8:aa:a7:88:92:55:3f:21:42:0b:51:cd:61:
36:e7:51:5c:ed:ed:32:76:40:83:ac:f1:bf:67:ee:
79:f6:15:3f:8b:90:18:9e:e1:41:8d:4a:8e:6a:0b:
88:ff:0f:de:eb:75:75:2b:86:c7:da:6d:ff:b1:6b:
61:82:8b:f4:e0:f5:24:65:dc:0b:63:f5:f0:89:38:
91:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BC:20:F1:BA:C9:B0:36:76:BC:FE:71:DE:B7:67:A8:02:84:A5:69
X509v3 Authority Key Identifier:
keyid:BB:02:AA:9F:A4:5F:C9:7B:DB:2E:6D:C8:FC:0A:7F:03:71:C8:4D:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:39:fe:06:4d:d2:bb:3e:c0:5b:2f:c0:07:3f:1f:b0:a3:59:
a8:c2:19:a7:ac:d7:1b:a6:9f:0f:94:00:11:c4:ed:58:05:c3:
8e:64:98:cf:21:38:91:03:95:3a:7f:e9:c1:60:c3:05:a8:9d:
4a:8e:60:6f:6a:22:41:43:d2:c1:51:93:37:b0:94:43:ce:7b:
bc:2d:f1:88:ac:02:56:a7:d9:d7:63:23:18:71:6b:55:fa:a2:
05:0a:5c:33:60:20:8e:ed:26:e1:e8:c2:b3:de:68:ce:e3:de:
6a:c1:4e:98:90:50:9f:d3:8b:db:59:dd:cd:98:ee:19:6b:da:
af:d9:e6:3e:47:9d:c2:4b:de:cf:1a:a1:da:bf:5c:ab:ac:62:
3b:ca:b4:65:6d:89:7b:e8:ee:c4:7d:70:00:e1:83:f7:89:ad:
d4:90:b7:8b:75:79:d2:a4:f0:e3:84:01:53:b1:e3:21:35:da:
a2:fe:d6:ea:39:1b:38:66:7a:0a:28:dd:57:83:97:48:ce:a8:
5d:11:11:3f:f8:8a:7b:84:3d:8c:2e:b3:c6:1b:41:4d:6f:0f:
30:5b:5f:dd:63:fc:1e:90:b7:16:c6:0e:bb:75:56:22:05:7c:
68:ec:87:4d:4f:1a:7e:f9:d5:44:a9:27:85:57:62:5c:12:46:
a8:0f:da:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:40 2026 by rpki-client