Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
File: Hqemr7IbsUh0L2FV0aOa_I_H55w.mft (raw, json)
Hash identifier: EZefVK0e/efObAfXtk/nldwZwpJJUA4x8FoSvviXhNc=
Subject key identifier: 2F:E6:99:CA:7E:BF:C7:7D:3D:7F:5B:2E:9D:77:75:B3:B0:7E:88:14
Authority key identifier: 1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
Certificate issuer: /CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Certificate serial: 019D382E7123D31317ADCB98CC3F04B85F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
Manifest number: 11D3
Signing time: Sun 29 Mar 2026 06:01:00 +0000
Manifest this update: Sun 29 Mar 2026 06:01:00 +0000
Manifest next update: Mon 30 Mar 2026 06:01:00 +0000
Files and hashes: 1: Hqemr7IbsUh0L2FV0aOa_I_H55w.crl (hash: h+y3AHxzlhZo9P13nx6O6uYuYr+xPl+TYR0hHBBw14s=)
2: fSE8Q3BHF-37hTlX0eyFzGv4iBc.roa (hash: pVD8HGH2rJXCl52itQj8YwGZtz7maygncTTWGAdWmOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:71:23:d3:13:17:ad:cb:98:cc:3f:04:b8:5f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Validity
Not Before: Mar 29 06:01:00 2026 GMT
Not After : Mar 30 06:01:00 2026 GMT
Subject: CN=2fe699ca7ebfc77d3d7f5b2e9d7775b3b07e8814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3f:cb:59:de:95:31:c6:11:57:2a:f8:39:f0:
11:a5:74:15:c3:dc:80:72:5c:de:2f:b3:5d:52:fa:
19:82:98:31:a5:7b:41:d2:d3:1b:93:9e:01:db:1a:
41:29:3f:b0:bd:11:f1:1d:67:c0:6c:62:84:7b:da:
1a:e2:e0:f1:65:4d:05:87:df:da:6a:ad:40:7c:a9:
70:e5:e3:87:9e:cb:c7:1b:11:f5:0e:c4:2d:62:f0:
f2:c9:aa:b1:6e:5b:b8:20:18:f8:0a:c8:a8:12:96:
28:e5:c4:d9:0f:96:c3:3e:fa:36:69:3b:0a:94:43:
57:3c:ad:f5:c9:28:e6:81:8b:95:51:8e:55:69:fe:
75:50:27:93:55:b8:e6:d7:06:df:44:c3:26:63:0e:
7e:94:3b:8b:d6:f4:b5:12:1d:94:d2:bb:f6:6e:7a:
cf:46:1d:9a:6a:ee:b3:18:d7:2f:57:ff:0f:84:31:
1f:90:1b:50:ff:79:a5:06:13:d5:bf:ff:f7:f3:bf:
ba:bd:b1:71:1f:19:89:41:4d:99:c9:ce:d4:fa:e5:
53:ed:d9:e8:68:8b:b1:1c:1c:87:e4:39:04:9f:48:
91:d1:21:b0:56:89:2c:d0:f3:e0:52:39:d2:1b:d5:
ee:ed:8d:61:0f:2f:1c:67:d6:37:d6:6f:7e:79:30:
5b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E6:99:CA:7E:BF:C7:7D:3D:7F:5B:2E:9D:77:75:B3:B0:7E:88:14
X509v3 Authority Key Identifier:
keyid:1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2d:44:c2:f4:34:38:1e:85:3b:c4:3e:81:69:3b:9c:e7:32:
66:5b:fb:d1:95:4f:6b:7c:a9:aa:49:d5:7a:0a:ea:8e:c8:de:
9e:fa:e4:f4:cd:e9:c2:6b:ac:e3:5b:8c:df:13:c1:c8:a1:c3:
98:81:d7:b7:af:50:29:95:b9:7d:da:56:a8:b7:45:9d:60:18:
9d:8d:7d:25:a7:b4:49:20:3d:de:c8:77:44:6d:1e:2b:7a:23:
4a:20:19:b4:86:bd:84:b0:4e:b7:35:0a:98:f6:c4:a4:70:d8:
be:71:c8:e4:4a:f3:3a:23:e4:ae:11:00:25:f6:1c:b3:d4:30:
cd:72:74:56:5e:c3:b9:32:13:35:b3:3d:ee:48:74:f1:01:40:
9b:f0:35:c3:7f:f0:be:0a:8c:7d:80:31:60:66:85:dc:1d:98:
c9:9d:5e:e6:f1:09:64:ac:da:fa:96:29:15:be:c7:66:34:fe:
7f:e6:fe:f6:0d:f1:95:dd:9a:7b:d8:e8:14:c7:7d:1c:17:2f:
a4:c1:48:31:01:98:d9:3a:6f:73:59:7c:54:26:ce:07:cb:49:
c7:dd:de:44:5e:64:7a:2e:27:8d:fb:83:b1:35:4e:af:18:3c:
e4:9a:77:d0:85:14:d5:3c:88:b6:ab:93:ce:9b:61:47:e2:22:
f1:6e:20:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:24 2026 by rpki-client