Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
File: HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft (raw, json)
Hash identifier: YlHNv1RMcFD+OdCYm/9rCpP+6rpDfP0jbqKuIa+KuZc=
Subject key identifier: 83:8C:F3:44:51:80:95:E5:53:FC:A5:15:63:46:8A:13:C9:AC:10:BB
Authority key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
Certificate issuer: /CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Certificate serial: 019D3866A1E9D11AD61053290854D794BBC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
Manifest number: 0723
Signing time: Sun 29 Mar 2026 07:02:23 +0000
Manifest this update: Sun 29 Mar 2026 07:02:23 +0000
Manifest next update: Mon 30 Mar 2026 07:02:23 +0000
Files and hashes: 1: HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl (hash: D6uBru/ZRLwKpHHeixNRyR+/vsRCm/8cw7O2lhXcw+Y=)
2: m8GmWxaGzhbyfzeA3jXtYZtS49c.roa (hash: ufyYBYKdtvNPQKTZ7RHmH34YskTQ9OHfZWJp++dRaZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:a1:e9:d1:1a:d6:10:53:29:08:54:d7:94:bb:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Validity
Not Before: Mar 29 07:02:23 2026 GMT
Not After : Mar 30 07:02:23 2026 GMT
Subject: CN=838cf344518095e553fca51563468a13c9ac10bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:09:b3:19:cf:ca:a0:b4:bd:6f:80:fe:da:b8:
19:d1:0a:e6:5f:f2:5c:d4:13:96:da:74:f1:3f:30:
72:04:6e:60:6e:d6:97:90:2f:36:90:de:52:bd:9b:
12:2b:ca:1b:c9:93:8c:37:62:94:f4:d9:a0:9e:8c:
fa:57:3b:92:a5:0d:1b:bf:eb:b8:fe:4b:05:b1:dc:
33:4c:1a:87:e8:f7:d1:ed:09:5d:01:b8:ae:21:0c:
d0:57:a8:12:39:ce:66:a7:ec:71:6a:78:ac:f4:6d:
de:c9:a8:5b:1e:f7:27:84:17:dc:4d:73:c0:fe:43:
b4:5d:45:e4:e7:cf:23:67:07:c6:0b:0a:3b:6d:2c:
c3:e7:a5:c8:44:51:e8:ab:83:d1:63:a7:76:35:c4:
0d:29:5c:cb:4d:76:51:05:4d:92:19:e6:21:92:50:
50:f3:d5:e0:9f:8f:4f:bf:96:39:54:5e:f8:ab:46:
6d:de:bc:16:3f:f9:2b:fd:f7:53:27:76:0a:d0:c6:
4d:73:3a:69:c7:a6:8e:d9:12:7d:bd:38:de:1b:3d:
0c:0a:25:3d:46:de:6f:b1:54:36:ee:7f:e9:d1:66:
27:8f:c4:2f:b6:8a:c4:17:0d:6f:56:97:29:b3:dc:
54:77:3c:14:f4:f6:d2:a5:07:45:8a:04:44:56:a4:
93:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8C:F3:44:51:80:95:E5:53:FC:A5:15:63:46:8A:13:C9:AC:10:BB
X509v3 Authority Key Identifier:
keyid:1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:44:a4:83:68:5f:6d:3a:df:4c:5c:6e:39:8b:8b:9d:58:c7:
8a:bc:89:d4:41:d0:89:7b:70:da:a5:42:6f:fd:df:f6:49:b1:
1a:f0:1a:e5:0e:8b:72:90:00:a1:6a:bf:58:74:5d:9a:bc:f0:
1d:48:43:62:ff:60:da:2a:4a:cc:a4:c2:58:0e:a5:85:fa:26:
3a:90:24:cd:4c:04:b9:1e:20:96:f3:92:4b:1a:2b:da:dc:cf:
4a:66:55:af:ba:0e:75:b8:6d:ea:19:46:63:88:87:e9:73:ec:
88:ea:11:4d:ef:b6:f3:59:ec:ed:51:76:f4:ba:01:7b:eb:38:
f0:ff:37:04:85:82:b4:ea:5f:36:8d:5b:e2:e6:b9:d0:8c:66:
05:55:97:ba:af:ba:65:fc:f3:e0:f0:1d:8a:e1:9d:d1:0e:9e:
f6:58:1a:ea:ee:d5:80:62:88:c4:34:1a:18:35:8b:75:f6:79:
ea:21:8a:5b:0e:2e:a2:2f:ac:2f:03:5f:6b:08:e9:36:e5:52:
fe:74:96:f4:73:4b:a8:c5:bd:f1:da:76:c6:27:6e:a3:8b:87:
9b:a8:47:67:41:d4:8e:e6:ce:04:c2:e8:bf:28:b7:82:c4:c3:
e8:d5:54:90:89:60:01:f1:df:fe:fb:58:dd:ba:31:0b:be:31:
a9:01:49:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:12 2026 by rpki-client