Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
File: HQrO6hf1PecI-ac6vAyHFk0gfQg.mft (raw, json)
Hash identifier: tJWsPXb7hBBno6zio0PuyIIZj9NE5wjNncQksyqmTZs=
Subject key identifier: AB:AB:1F:9E:CF:B6:61:27:09:62:74:32:50:A0:42:33:3B:D5:88:BA
Authority key identifier: 1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
Certificate issuer: /CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Certificate serial: 019D3865BBB7C0FD82F7C74D250B3D7C405E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
Manifest number: 15B3
Signing time: Sun 29 Mar 2026 07:01:24 +0000
Manifest this update: Sun 29 Mar 2026 07:01:24 +0000
Manifest next update: Mon 30 Mar 2026 07:01:24 +0000
Files and hashes: 1: HQrO6hf1PecI-ac6vAyHFk0gfQg.crl (hash: W9SfN8WzlUiLlZV+dF7qJD+hKpkGKwOIdzMj9u4RjmQ=)
2: jYlsueQe6bTuxJo3Pao6U7_lbjM.roa (hash: xljjWi7Hj8DkN9QHcryj+ylFV/KQmtfdUgA8aZcK8mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:bb:b7:c0:fd:82:f7:c7:4d:25:0b:3d:7c:40:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Validity
Not Before: Mar 29 07:01:24 2026 GMT
Not After : Mar 30 07:01:24 2026 GMT
Subject: CN=abab1f9ecfb661270962743250a042333bd588ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:38:d5:13:6e:ef:35:4e:6f:57:28:a8:a4:
77:fd:36:8b:c0:51:56:58:c4:3a:46:e0:db:31:9c:
eb:27:c4:8d:ce:2e:63:a4:5a:86:13:f4:82:fb:24:
61:ee:83:05:c3:78:f0:65:39:24:3d:87:a7:5f:98:
41:17:83:46:05:16:b3:09:ef:b8:be:9b:6e:48:f3:
20:43:bc:30:bf:17:9b:90:36:b6:6b:e4:4e:dc:0e:
4e:d0:c8:bd:d1:26:ed:13:24:c1:af:2d:15:70:83:
43:60:fd:51:d8:7e:de:44:01:ba:12:20:ed:a6:b2:
e1:39:20:83:8f:e3:6c:08:3a:a5:a0:f1:5a:6d:fc:
2a:11:64:09:8f:90:21:06:2a:b8:a7:a0:55:f9:5c:
3c:27:0c:75:a3:79:d2:55:0f:4d:99:76:69:ff:1c:
ca:0b:5f:7d:0d:15:00:55:c5:5f:53:12:ad:70:1a:
f7:9b:5d:78:3a:45:c5:2e:4a:9a:ad:48:df:7a:48:
2f:bc:33:68:98:74:22:5f:8e:89:94:f3:3f:26:af:
9e:5c:f1:74:41:9d:a6:58:2f:75:c7:b9:17:c0:3e:
e7:6a:f5:19:95:ee:b1:5f:16:ec:8c:03:06:cf:0d:
8a:1a:65:01:ef:34:6f:b2:17:de:a8:47:17:41:76:
8e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AB:1F:9E:CF:B6:61:27:09:62:74:32:50:A0:42:33:3B:D5:88:BA
X509v3 Authority Key Identifier:
keyid:1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:d9:27:51:51:b4:29:bb:33:20:ab:89:81:72:51:f3:ab:0a:
77:9e:02:9c:6a:ee:7f:f5:8d:70:07:b8:02:8c:a4:b0:2a:58:
f6:a3:8f:1e:1f:97:c9:5f:d0:e8:35:ec:5c:77:14:42:6a:ef:
12:b1:39:11:84:56:36:37:a0:c5:05:8d:a7:da:bc:7e:82:70:
7b:48:2e:8d:6d:c1:8c:7c:16:ef:93:ec:15:68:3b:ff:c5:fb:
1e:56:39:74:3b:60:9a:99:d3:ff:5a:b7:13:9a:dd:02:7c:e5:
6e:6f:ac:f8:b0:e4:17:06:17:01:c9:ea:9c:28:fe:3e:f4:3d:
9d:1c:ff:2d:14:a8:fe:e2:f3:3e:e3:eb:26:14:0a:6d:b7:c7:
11:8f:1f:2d:19:a6:3a:31:df:eb:35:d5:15:7e:e9:99:06:bf:
8d:c3:d3:07:dd:fb:07:4b:a3:6f:3e:e3:13:a5:5f:e3:e0:87:
53:2c:06:72:2d:26:d0:ae:88:7e:e9:88:32:e8:47:cf:0b:87:
ba:14:b7:6c:18:0b:d7:c1:af:9c:92:7e:4d:81:b5:36:42:ba:
1e:dc:3e:aa:eb:d2:9a:d0:c1:8f:c0:b9:81:75:b5:17:d2:e8:
ab:9a:cc:33:c2:04:27:cc:ba:9c:fa:90:c7:c8:b5:21:44:e0:
e4:d1:17:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:02 2026 by rpki-client