Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
File: HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft (raw, json)
Hash identifier: PpGmQ9IcUMimzH2qwfLc62SPX9kjk52tZqWABCuP6aM=
Subject key identifier: 95:17:D7:69:0B:08:0E:F7:BB:CA:57:88:0C:2B:53:A2:6A:3C:CE:0B
Authority key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
Certificate issuer: /CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Certificate serial: 019FA0721B980070D664A08A4AEA99974E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
Manifest number: 0862
Signing time: Sun 26 Jul 2026 22:01:00 +0000
Manifest this update: Sun 26 Jul 2026 22:01:00 +0000
Manifest next update: Mon 27 Jul 2026 22:01:00 +0000
Files and hashes: 1: HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl (hash: P0lJWFBId2JrqIGrfqvs2NZio0ZR+opTeBgdhBdH8xc=)
2: m8GmWxaGzhbyfzeA3jXtYZtS49c.roa (hash: ufyYBYKdtvNPQKTZ7RHmH34YskTQ9OHfZWJp++dRaZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:72:1b:98:00:70:d6:64:a0:8a:4a:ea:99:97:4e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Validity
Not Before: Jul 26 22:01:00 2026 GMT
Not After : Jul 27 22:01:00 2026 GMT
Subject: CN=9517d7690b080ef7bbca57880c2b53a26a3cce0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:66:f1:81:b1:b6:45:bb:37:cc:b8:82:8f:
f6:59:3b:85:b1:2c:7b:c6:7c:50:5a:8a:29:60:9e:
bd:07:c7:d1:58:45:0f:d1:f5:21:37:bd:00:ad:f4:
5e:01:04:e0:e4:46:b7:59:f6:82:6b:a9:b1:22:a1:
81:99:b6:8f:9e:33:c0:33:aa:50:e5:d5:51:29:5a:
97:56:b0:ae:55:92:55:89:08:f5:71:7d:6f:e7:87:
da:ec:a3:87:56:e4:a0:1d:14:4f:b1:2c:14:af:db:
2c:77:d6:e0:d2:be:c5:69:2a:c1:c8:5e:af:4b:5b:
bb:cd:1d:ec:40:2c:14:27:b0:15:fb:d9:fd:ce:8b:
c4:ec:66:3a:b0:58:1a:fc:ca:f5:e4:75:35:06:e6:
42:07:eb:bc:7c:72:e6:87:11:7f:40:f1:e5:34:70:
80:3f:e4:5a:ef:90:a2:f2:8c:d0:0b:18:65:aa:9b:
24:88:07:0d:f9:7e:f8:af:b8:82:dd:1d:5d:1d:1d:
79:4c:4c:21:7e:c4:c9:f9:b9:25:cf:aa:5d:24:14:
f3:f5:2a:e0:a1:54:3c:48:ee:be:6b:f8:fa:2f:72:
bd:30:f7:e4:1c:b7:3f:98:4b:d8:77:61:2a:cf:f1:
2c:25:3b:06:52:cb:47:3a:ed:66:f6:c5:bb:26:02:
94:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:17:D7:69:0B:08:0E:F7:BB:CA:57:88:0C:2B:53:A2:6A:3C:CE:0B
X509v3 Authority Key Identifier:
keyid:1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b5:ce:15:87:18:30:9e:88:89:2d:cc:9a:2e:c4:5b:cd:4f:
63:05:cf:ff:a2:8a:ff:41:5a:b2:15:a7:8c:0f:bd:a7:f6:8e:
b9:c2:80:35:0a:98:8f:74:37:55:3b:45:f7:33:e2:a2:42:ae:
f7:f5:f1:5c:9e:8e:09:a1:a9:5c:02:95:5c:21:4a:02:3b:47:
1e:1a:b3:9d:1b:a7:f4:b1:10:79:e5:08:81:e6:20:30:e6:e4:
16:d3:fb:10:14:f0:33:34:c3:64:19:ca:91:91:b1:3d:9c:b4:
19:26:ce:9c:c4:be:9b:5f:71:e1:eb:c2:57:1c:ee:09:6e:16:
3b:69:97:28:79:7b:14:7d:ad:5a:1a:24:bb:1c:bf:2f:9b:6a:
7e:a5:c4:65:76:7d:f9:eb:c3:7b:7f:4f:52:09:c8:9e:a8:c8:
a8:9a:97:6a:3c:ca:7f:0b:32:8a:16:ed:c0:c3:16:c9:51:e8:
e7:38:c4:bc:13:67:b5:75:72:54:3a:38:6b:a0:e6:c4:e1:25:
7a:e6:07:66:a8:4a:b7:45:26:f4:20:aa:66:33:21:5d:40:fe:
5c:17:c8:a8:0d:db:91:96:00:7a:40:58:09:cf:c7:62:51:ce:
e0:84:1c:74:72:3e:22:cb:44:f5:5f:7f:2f:29:20:49:60:f2:
08:fd:8f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:16:28 2026 by rpki-client