Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
File: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft (raw, json)
Hash identifier: jlQ1WF/rqFus+N7UwpIyfVnUxXZtnEhyRwnHX91ZMrE=
Subject key identifier: 4D:04:5D:BF:37:38:95:A8:36:70:26:6D:B2:96:27:CF:41:95:D8:D0
Authority key identifier: 86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
Certificate issuer: /CN=86c4112efc9bed84761d3678b87c483948d2a72f
Certificate serial: 019D378960F109614C6C3426BB84FFB34BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
Manifest number: 15C5
Signing time: Sun 29 Mar 2026 03:00:43 +0000
Manifest this update: Sun 29 Mar 2026 03:00:43 +0000
Manifest next update: Mon 30 Mar 2026 03:00:43 +0000
Files and hashes: 1: ZLAxEh4litD4nIq8JP6jHqrQBEI.roa (hash: wOnTcEEXKGcVn5w5YtBIgaG5tAO0klLqAJlQ/7xmzWI=)
2: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl (hash: fvBWWnOe/CeiglBBQvw4OFA2d1uYTu++1+o22c61B8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:60:f1:09:61:4c:6c:34:26:bb:84:ff:b3:4b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86c4112efc9bed84761d3678b87c483948d2a72f
Validity
Not Before: Mar 29 03:00:43 2026 GMT
Not After : Mar 30 03:00:43 2026 GMT
Subject: CN=4d045dbf373895a83670266db29627cf4195d8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:26:87:51:d8:f3:9d:ff:e7:ba:d7:c7:0b:
c9:4d:1b:f4:46:f3:95:5f:ea:79:2a:3f:83:36:68:
eb:c9:dc:93:90:09:38:6b:31:c5:76:98:84:cc:a7:
fe:af:e1:c1:94:c5:38:05:c3:cd:22:c9:10:e0:19:
6c:5a:a5:18:16:db:cf:cb:ec:61:22:91:1b:ad:48:
c3:b5:4e:c8:b9:fa:0e:23:9f:43:37:8f:b9:a6:31:
29:b8:55:f4:7d:ba:54:e3:f5:43:4a:96:35:11:1e:
d0:a5:aa:ea:8c:77:98:6c:cc:32:c8:3f:ac:5e:06:
3d:ba:df:3a:dd:ec:72:09:fd:74:e0:15:41:36:9b:
ba:f7:df:d7:31:03:e4:46:5b:66:21:e8:4e:65:23:
20:ee:18:2c:9c:c5:72:d9:64:dc:f6:67:de:8a:2d:
c5:76:3f:39:c8:97:f5:c2:43:4e:19:a7:cd:9b:e9:
1a:b8:2c:88:14:73:55:58:c7:97:29:c5:00:cf:b7:
d1:7e:9e:67:e6:ec:c1:e9:12:0c:a5:30:5d:b3:df:
2c:90:33:15:ee:15:3f:51:20:01:52:6b:17:4e:7f:
a2:80:3f:ea:ac:55:79:1c:74:e4:ce:dd:f5:57:f4:
aa:0e:1c:80:77:15:b0:99:79:4f:20:0a:c6:11:df:
59:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:04:5D:BF:37:38:95:A8:36:70:26:6D:B2:96:27:CF:41:95:D8:D0
X509v3 Authority Key Identifier:
keyid:86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:99:37:b3:54:46:67:41:7e:3f:23:cb:5f:d7:ae:44:d1:8a:
5d:fb:18:8c:a8:aa:3c:a2:85:0f:47:a5:5c:a1:5c:79:3f:50:
f9:b7:57:59:99:7a:0d:5d:27:3c:30:87:95:10:48:6c:a8:98:
b8:dd:85:25:2c:ca:f1:2e:d8:fe:52:e8:2a:38:0e:7b:96:5a:
ff:c3:ef:6e:f4:c2:13:c7:a6:31:e9:aa:22:1c:fc:ee:d1:a1:
07:5a:3a:a5:02:ea:e6:02:bd:cd:30:07:ab:bc:67:4e:22:0f:
ac:43:c4:1b:22:d2:8d:26:14:bb:05:0d:6e:ef:4b:f2:ea:ff:
5f:28:a8:82:7b:4d:52:01:e1:99:9e:bb:fe:a7:4b:3d:f9:19:
9c:5f:2f:2d:bd:71:7d:bf:2c:68:94:c5:58:81:6f:db:5f:82:
1d:82:a5:78:d6:f2:c3:e2:b7:85:d1:80:55:ef:f9:e2:1d:9d:
28:c9:51:8b:0e:03:d3:3e:5d:64:f4:2e:ec:51:5f:0b:12:b8:
1a:11:9a:d3:9d:b4:50:5f:e3:5f:10:cf:c1:a4:93:f3:d4:68:
78:31:36:d8:2c:b8:f2:64:1d:8d:6a:f9:cc:ee:36:c6:90:1c:
aa:82:ee:21:69:fb:f8:2a:50:af:f8:d7:5a:40:fe:ed:6b:f7:
fc:73:bb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:32 2026 by rpki-client