Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft
File: H0qus-K3pD3wHzHVGiDvIlXOr-M.mft (raw, json)
Hash identifier: SurpehZk2KVE8l9Aabn8PWGoLY+vFWsR5+GO2rAiJu4=
Subject key identifier: 74:68:3A:A8:8D:29:E4:CA:F4:DB:F2:56:86:36:69:EA:90:4D:0E:D4
Authority key identifier: 1F:4A:AE:B3:E2:B7:A4:3D:F0:1F:31:D5:1A:20:EF:22:55:CE:AF:E3
Certificate issuer: /CN=1f4aaeb3e2b7a43df01f31d51a20ef2255ceafe3
Certificate serial: 019D3A5466131CA6192A51EA4AAAFEC259DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0qus-K3pD3wHzHVGiDvIlXOr-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft
Manifest number: 0731
Signing time: Sun 29 Mar 2026 16:01:42 +0000
Manifest this update: Sun 29 Mar 2026 16:01:42 +0000
Manifest next update: Mon 30 Mar 2026 16:01:42 +0000
Files and hashes: 1: H0qus-K3pD3wHzHVGiDvIlXOr-M.crl (hash: hp0SCLBKldOHzhYAs6B00pKkNQrL5HqM1150ZMCdJkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0qus-K3pD3wHzHVGiDvIlXOr-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:66:13:1c:a6:19:2a:51:ea:4a:aa:fe:c2:59:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4aaeb3e2b7a43df01f31d51a20ef2255ceafe3
Validity
Not Before: Mar 29 16:01:42 2026 GMT
Not After : Mar 30 16:01:42 2026 GMT
Subject: CN=74683aa88d29e4caf4dbf256863669ea904d0ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:ca:b3:bb:5b:6e:b7:a5:30:e0:9d:1f:58:
fc:cd:f3:91:00:36:ce:56:d5:2e:d6:db:47:ff:72:
4f:55:c2:02:16:64:8e:69:f7:b0:0b:3f:36:33:21:
dc:c7:2a:11:1f:ae:71:52:a9:79:b8:f2:df:42:4d:
e3:c0:b3:62:c4:d6:21:2a:d9:fb:44:44:24:81:b0:
0e:5e:83:ea:02:db:9e:71:af:c7:1d:6f:e7:cc:23:
d4:d5:20:90:2b:29:8b:13:c3:37:d4:0f:b3:59:5a:
68:97:55:f6:ed:c2:1e:a1:a5:eb:99:95:61:fb:2e:
e3:c1:02:d4:78:79:df:df:63:29:f5:3d:af:1d:43:
4c:58:52:e5:87:1e:0e:1e:89:90:03:96:fc:d6:5e:
ea:b6:d6:15:db:a6:ad:41:4e:dd:99:80:5d:c5:28:
7e:f7:c4:af:5c:22:5d:2e:7a:50:09:81:2d:0e:91:
9e:a2:09:a9:9f:65:6a:d4:83:d3:0d:92:c5:8e:c6:
a1:e6:7e:55:b9:44:9a:3e:01:26:de:4d:62:d0:c7:
76:db:49:95:dc:19:f0:b9:f4:95:e8:3b:30:15:9f:
ff:18:55:d7:92:32:8c:57:bb:2b:e8:d3:46:64:04:
2a:d0:5b:40:cd:2e:44:85:95:e5:a6:ad:60:47:89:
24:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:68:3A:A8:8D:29:E4:CA:F4:DB:F2:56:86:36:69:EA:90:4D:0E:D4
X509v3 Authority Key Identifier:
keyid:1F:4A:AE:B3:E2:B7:A4:3D:F0:1F:31:D5:1A:20:EF:22:55:CE:AF:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0qus-K3pD3wHzHVGiDvIlXOr-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:67:9e:14:6b:e4:28:97:6e:9a:69:24:4b:3d:80:fc:b7:3f:
05:ef:3f:2f:58:84:a8:ff:ef:17:80:b5:37:5a:38:0c:88:d2:
70:47:4b:7e:b8:d7:ee:fd:4d:f0:fd:24:df:16:6b:1b:a1:cf:
4d:61:80:1c:07:70:16:0e:ee:77:35:a7:2e:1c:82:21:20:01:
2a:c8:8b:cf:90:06:8d:0e:ca:15:74:28:8e:d6:24:a8:26:e6:
2f:c7:1b:ba:c0:43:c8:1b:36:8e:08:4c:2e:3a:95:e7:b7:94:
b5:32:d5:9a:31:76:9f:80:ab:11:ae:cd:b6:80:53:56:de:6d:
fd:dd:79:28:bd:69:55:9d:d5:bd:26:3e:39:b4:b4:92:8b:ce:
7c:dc:b8:3f:cc:dc:e1:eb:4b:bb:4e:c5:4a:8f:58:b2:3d:37:
73:3c:6c:a4:3f:c4:83:c9:af:8d:de:e8:8f:f7:57:49:68:93:
c5:a2:20:b0:18:49:58:88:3b:35:2f:78:c1:ea:1f:a2:d4:ab:
fe:fa:c8:a5:a6:86:39:1b:be:5b:62:78:9b:e9:09:6e:21:7f:
be:cf:52:22:a5:f3:e1:93:f9:2a:c5:03:52:6b:8f:e3:4e:fb:
8e:ed:3d:9d:78:ca:4d:fc:2a:ea:38:b1:cf:1f:e1:82:7a:16:
2d:bd:0a:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06VGYTHKYZKlHqSqr+wlnfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNGFhZWIzZTJiN2E0M2RmMDFmMzFkNTFhMjBlZjIyNTVj
ZWFmZTMwHhcNMjYwMzI5MTYwMTQyWhcNMjYwMzMwMTYwMTQyWjAzMTEwLwYDVQQD
Eyg3NDY4M2FhODhkMjllNGNhZjRkYmYyNTY4NjM2NjllYTkwNGQwZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHXKs7tbbrelMOCdH1j8zfORADbO
VtUu1ttH/3JPVcICFmSOafewCz82MyHcxyoRH65xUql5uPLfQk3jwLNixNYhKtn7
REQkgbAOXoPqAtueca/HHW/nzCPU1SCQKymLE8M31A+zWVpol1X27cIeoaXrmZVh
+y7jwQLUeHnf32Mp9T2vHUNMWFLlhx4OHomQA5b81l7qttYV26atQU7dmYBdxSh+
98SvXCJdLnpQCYEtDpGeogmpn2Vq1IPTDZLFjsah5n5VuUSaPgEm3k1i0Md220mV
3BnwufSV6DswFZ//GFXXkjKMV7sr6NNGZAQq0FtAzS5EhZXlpq1gR4kkkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRoOqiNKeTK9NvyVoY2aeqQTQ7UMB8GA1UdIwQY
MBaAFB9KrrPit6Q98B8x1Rog7yJVzq/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBxdXMtSzNwRDN3SHpIVkdpRHZJbFhPci1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8zZjNmNTAtMmYzNS00MDdlLWI5OWMt
ZTE4NDJiZTQxMmQxLzEvSDBxdXMtSzNwRDN3SHpIVkdpRHZJbFhPci1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8zZjNmNTAtMmYzNS00MDdlLWI5OWMtZTE4NDJiZTQxMmQx
LzEvSDBxdXMtSzNwRDN3SHpIVkdpRHZJbFhPci1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2eeFGvk
KJdummkkSz2A/Lc/Be8/L1iEqP/vF4C1N1o4DIjScEdLfrjX7v1N8P0k3xZrG6HP
TWGAHAdwFg7udzWnLhyCISABKsiLz5AGjQ7KFXQojtYkqCbmL8cbusBDyBs2jghM
LjqV57eUtTLVmjF2n4CrEa7NtoBTVt5t/d15KL1pVZ3VvSY+ObS0kovOfNy4P8zc
4etLu07FSo9Ysj03czxspD/Eg8mvjd7oj/dXSWiTxaIgsBhJWIg7NS94weofotSr
/vrIpaaGORu+W2J4m+kJbiF/vs9SIqXz4ZP5KsUDUmuP4077ju09nXjKTfwq6jix
zx/hgnoWLb0K0g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:37:51 2026 by rpki-client