Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
File: uwKqn6RfyXvbLm3I_Ap_A3HITek.mft (raw, json)
Hash identifier: VfXEshXIgKlTHINALZ+0tBGFbNaNbnMMuq9cqtQS6H0=
Subject key identifier: 58:95:23:1B:A3:F5:DA:6A:9A:5A:ED:C0:FF:AF:89:DD:33:F2:45:8F
Authority key identifier: BB:02:AA:9F:A4:5F:C9:7B:DB:2E:6D:C8:FC:0A:7F:03:71:C8:4D:E9
Certificate issuer: /CN=bb02aa9fa45fc97bdb2e6dc8fc0a7f0371c84de9
Certificate serial: 019D2772844E4F2ABC34BECB6AB31282C733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
Manifest number: 0432
Signing time: Thu 26 Mar 2026 00:01:49 +0000
Manifest this update: Thu 26 Mar 2026 00:01:49 +0000
Manifest next update: Fri 27 Mar 2026 00:01:49 +0000
Files and hashes: 1: FStRWITrx7mXYLP1GLGN2-na9w0.roa (hash: 9Kguvpi0MkdObkp26nsq/5tht75+Q0yDWXnyUXnDBmI=)
2: uwKqn6RfyXvbLm3I_Ap_A3HITek.crl (hash: jOIM6NOtCwl1hQiEqMWcQQ6k1DSnfgxHs5Q2Zzm2DcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:84:4e:4f:2a:bc:34:be:cb:6a:b3:12:82:c7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb02aa9fa45fc97bdb2e6dc8fc0a7f0371c84de9
Validity
Not Before: Mar 26 00:01:49 2026 GMT
Not After : Mar 27 00:01:49 2026 GMT
Subject: CN=5895231ba3f5da6a9a5aedc0ffaf89dd33f2458f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ef:b3:15:45:86:5c:44:27:d1:d8:b1:8d:53:
82:6c:78:72:b9:e5:b8:9f:20:21:76:fe:73:45:30:
dd:f0:11:57:d5:61:6f:a5:6d:ed:51:0d:ca:9e:9b:
b2:f4:80:d8:15:f2:48:e4:e0:db:6a:0d:b6:26:54:
b0:f2:a1:93:9b:77:75:da:57:13:21:45:3b:7e:89:
a6:20:0b:2e:ce:bc:29:f4:34:39:08:a7:01:fb:ea:
97:01:8f:06:fa:bd:0a:26:38:1d:64:86:13:30:6f:
b0:13:da:6a:8f:7a:58:5b:a0:1c:8b:63:b8:4e:4e:
0e:b0:b4:bf:c1:3d:cf:09:ff:d3:53:90:4b:fb:fc:
49:81:7a:9a:75:67:a5:8d:db:7c:f1:24:49:ea:5d:
6e:53:fc:ad:3e:09:af:22:b8:c2:b6:1a:a4:6e:e8:
12:6a:72:45:ea:58:3f:af:fb:1c:4a:aa:f1:a9:43:
1c:c4:54:1e:ee:99:b8:83:0d:35:68:34:f6:30:c9:
c3:a5:13:1c:06:2e:8c:33:e6:4a:8e:b9:4c:92:f6:
e6:5c:ed:b3:f0:36:7c:92:47:f6:28:5c:87:7a:a3:
c3:90:98:ea:ee:42:8d:dd:73:8d:7e:a4:e8:8a:ce:
ef:43:89:64:2c:a9:c0:c3:74:fc:30:9d:40:a9:58:
bc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:95:23:1B:A3:F5:DA:6A:9A:5A:ED:C0:FF:AF:89:DD:33:F2:45:8F
X509v3 Authority Key Identifier:
keyid:BB:02:AA:9F:A4:5F:C9:7B:DB:2E:6D:C8:FC:0A:7F:03:71:C8:4D:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:cb:46:be:b4:d6:ab:ed:03:c0:4f:1f:0e:59:3d:3c:97:5d:
66:01:5c:f3:01:e5:ec:23:1b:11:9b:58:f8:55:e9:53:78:ff:
7d:df:60:65:99:1d:3c:d5:5d:84:37:be:41:e7:9c:6b:6f:a3:
08:4b:21:e3:ce:3c:61:f1:e8:ae:d3:57:8f:d7:39:f4:03:82:
a4:ad:8d:1b:23:d1:44:87:a0:fb:85:20:82:b1:dc:04:d3:f1:
c6:a9:7a:e4:ca:81:20:5b:85:b4:33:f1:90:90:d2:33:fb:62:
b3:a8:89:58:2a:49:1a:ae:1d:67:f7:86:41:f1:97:95:1e:e3:
82:78:dd:23:07:5b:3e:58:fe:54:1b:0c:e0:87:4f:ee:3d:8c:
e1:32:fa:e6:a8:02:d5:ab:8d:72:9f:45:16:fe:87:0e:da:9d:
c3:c3:bb:52:66:f6:cc:f7:68:48:87:f5:17:e5:3d:93:c6:a8:
77:2b:ef:cb:4e:3a:c8:bd:62:1e:c4:a5:96:5f:c4:31:1d:50:
d2:97:67:d8:df:c5:05:45:82:94:b2:68:e8:7d:44:c3:e3:7f:
f2:1b:b6:e2:73:48:26:50:a2:b9:bf:f1:dd:3b:64:b8:cc:a0:
dc:bc:96:ce:4d:ca:e6:70:bb:bc:ee:be:94:59:4a:0c:9c:6e:
b1:bf:7a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:01 2026 by rpki-client