Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.mft
File: HqzGEKc4PxkkhnIDC9mkR80JQck.mft (raw, json)
Hash identifier: 7BjcELEVQRwDFMJhPDwtYa8ibH06Lc1DlcN0olgbYSg=
Subject key identifier: 85:72:6F:AF:22:0E:F4:AF:69:BD:A4:AD:14:DF:CC:3F:B3:03:1C:A4
Authority key identifier: 1E:AC:C6:10:A7:38:3F:19:24:86:72:03:0B:D9:A4:47:CD:09:41:C9
Certificate issuer: /CN=1eacc610a7383f19248672030bd9a447cd0941c9
Certificate serial: 019D389C2352F01AA3F65F5C5D426096D0EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqzGEKc4PxkkhnIDC9mkR80JQck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.mft
Manifest number: 01B5
Signing time: Sun 29 Mar 2026 08:00:49 +0000
Manifest this update: Sun 29 Mar 2026 08:00:49 +0000
Manifest next update: Mon 30 Mar 2026 08:00:49 +0000
Files and hashes: 1: HqzGEKc4PxkkhnIDC9mkR80JQck.crl (hash: i77WoOyKzf8+f6IWF4tZOwORINDc5lBk9HAQTgTVEVo=)
2: w5DFMmGugpC2zayHbrP3eIF5NMk.roa (hash: w1SpHPQ303joyUlwp38GwAgUdaYGdvz45URhf02GNpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqzGEKc4PxkkhnIDC9mkR80JQck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:23:52:f0:1a:a3:f6:5f:5c:5d:42:60:96:d0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eacc610a7383f19248672030bd9a447cd0941c9
Validity
Not Before: Mar 29 08:00:49 2026 GMT
Not After : Mar 30 08:00:49 2026 GMT
Subject: CN=85726faf220ef4af69bda4ad14dfcc3fb3031ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9b:20:84:13:e6:8d:50:50:df:f2:b2:2b:e5:
14:0d:44:dd:d4:8b:76:4c:91:c4:26:19:b2:6b:d7:
d5:fb:95:6f:f7:7c:1f:40:52:be:c5:0c:71:c0:57:
78:38:1b:e4:a3:0f:0a:6f:b8:25:4b:58:5a:d9:76:
17:3a:ce:25:c4:98:a5:fb:59:f9:a8:2f:62:c7:49:
ab:e3:c3:52:fc:09:40:56:dd:d2:fe:40:2b:cc:a2:
48:f4:46:89:f2:90:9a:2a:47:e5:af:74:ca:1b:73:
5b:d6:55:c1:dd:f0:5d:dc:86:8c:54:ac:8c:63:ad:
b5:88:f7:37:3f:79:bf:58:f0:e4:af:ea:76:59:d7:
0c:7b:13:22:f1:bb:06:7c:e7:e6:05:89:22:24:1a:
97:91:66:2b:d7:48:48:a0:84:0b:df:e7:66:eb:b8:
bb:25:4c:4a:24:fb:50:ac:57:62:66:d9:5f:b3:c4:
19:f9:c4:b6:f5:d1:6e:b0:70:06:89:4b:28:87:eb:
c0:f2:56:59:b2:e2:19:97:df:96:f3:0a:66:5d:c8:
68:47:82:9d:4e:06:27:65:fb:dd:00:0d:27:11:4b:
f6:26:4d:b4:cc:7b:8e:28:2a:b3:17:20:ee:f8:2e:
1e:d6:02:2f:d0:ee:29:20:e1:41:f0:c2:39:1e:90:
62:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:72:6F:AF:22:0E:F4:AF:69:BD:A4:AD:14:DF:CC:3F:B3:03:1C:A4
X509v3 Authority Key Identifier:
keyid:1E:AC:C6:10:A7:38:3F:19:24:86:72:03:0B:D9:A4:47:CD:09:41:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqzGEKc4PxkkhnIDC9mkR80JQck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:78:37:be:87:e8:e1:7f:f6:ec:37:23:2a:2e:21:3c:0c:8b:
8c:0a:3c:23:29:f7:0f:ea:5a:88:4c:54:b4:77:5c:82:89:fe:
9f:89:2e:35:e7:57:4a:32:88:8a:21:c7:d0:b1:b3:e1:e9:67:
f8:e9:c3:9f:0f:cf:8d:1e:e9:cb:ae:1b:cb:fe:db:e7:92:52:
0d:4d:ef:7f:bf:59:7a:60:cf:6e:ad:ee:bb:cd:2a:c7:bf:0d:
9a:7a:e1:80:9f:18:60:7b:be:d8:1c:d1:f6:45:37:97:80:fe:
3b:05:98:d6:19:aa:82:3b:ba:6e:63:b6:61:34:e5:42:94:de:
53:1e:42:4a:17:6a:6e:bd:1c:69:26:cf:14:7b:d9:ef:85:41:
15:a5:16:49:9c:f5:1d:e2:98:62:c9:18:93:05:7d:54:56:c1:
d4:85:57:d0:7e:33:0a:bc:2e:6a:af:c8:21:c7:65:7b:73:bb:
99:c2:5e:7b:bf:36:12:de:3b:16:fc:3c:c9:99:98:e7:d3:d8:
e1:f4:c6:12:f4:f3:eb:46:77:cc:0a:a2:e3:1d:ef:26:0d:9e:
0b:f1:e4:47:8c:cc:c7:89:6e:d2:58:68:a7:50:86:ea:14:d9:
fc:75:c9:ed:be:72:5a:8f:0b:aa:9d:49:9c:a0:09:e7:28:18:
bf:63:04:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nCNS8Bqj9l9cXUJgltDqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYWNjNjEwYTczODNmMTkyNDg2NzIwMzBiZDlhNDQ3Y2Qw
OTQxYzkwHhcNMjYwMzI5MDgwMDQ5WhcNMjYwMzMwMDgwMDQ5WjAzMTEwLwYDVQQD
Eyg4NTcyNmZhZjIyMGVmNGFmNjliZGE0YWQxNGRmY2MzZmIzMDMxY2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJsghBPmjVBQ3/KyK+UUDUTd1It2
TJHEJhmya9fV+5Vv93wfQFK+xQxxwFd4OBvkow8Kb7glS1ha2XYXOs4lxJil+1n5
qC9ix0mr48NS/AlAVt3S/kArzKJI9EaJ8pCaKkflr3TKG3Nb1lXB3fBd3IaMVKyM
Y621iPc3P3m/WPDkr+p2WdcMexMi8bsGfOfmBYkiJBqXkWYr10hIoIQL3+dm67i7
JUxKJPtQrFdiZtlfs8QZ+cS29dFusHAGiUsoh+vA8lZZsuIZl9+W8wpmXchoR4Kd
TgYnZfvdAA0nEUv2Jk20zHuOKCqzFyDu+C4e1gIv0O4pIOFB8MI5HpBiMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVyb68iDvSvab2krRTfzD+zAxykMB8GA1UdIwQY
MBaAFB6sxhCnOD8ZJIZyAwvZpEfNCUHJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHF6R0VLYzRQeGtraG5JREM5bWtSODBKUWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC83ZjNkMjktNDE4ZS00MTM2LThiNTIt
ZmU1MDI1OTkzNjllLzEvSHF6R0VLYzRQeGtraG5JREM5bWtSODBKUWNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC83ZjNkMjktNDE4ZS00MTM2LThiNTItZmU1MDI1OTkzNjll
LzEvSHF6R0VLYzRQeGtraG5JREM5bWtSODBKUWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt3g3vofo
4X/27DcjKi4hPAyLjAo8Iyn3D+paiExUtHdcgon+n4kuNedXSjKIiiHH0LGz4eln
+OnDnw/PjR7py64by/7b55JSDU3vf79ZemDPbq3uu80qx78NmnrhgJ8YYHu+2BzR
9kU3l4D+OwWY1hmqgju6bmO2YTTlQpTeUx5CShdqbr0caSbPFHvZ74VBFaUWSZz1
HeKYYskYkwV9VFbB1IVX0H4zCrwuaq/IIcdle3O7mcJee782Et47Fvw8yZmY59PY
4fTGEvTz60Z3zAqi4x3vJg2eC/HkR4zMx4lu0lhop1CG6hTZ/HXJ7b5yWo8Lqp1J
nKAJ5ygYv2MERw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:25 2026 by rpki-client