Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.mft
File: HQXcdA9vS7W8SwM4fptHUwhQdDw.mft (raw, json)
Hash identifier: hnUKngRO1MXpqTtb0XTXuL2VtYp4VHX5+jjojlVoFgc=
Subject key identifier: BD:C5:18:8B:59:84:0C:68:AD:10:F0:B0:02:D9:3E:A9:86:7E:96:3A
Authority key identifier: 1D:05:DC:74:0F:6F:4B:B5:BC:4B:03:38:7E:9B:47:53:08:50:74:3C
Certificate issuer: /CN=1d05dc740f6f4bb5bc4b03387e9b47530850743c
Certificate serial: 019D39E5C87CDF818A1F1DA9B803451FA717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.mft
Manifest number: 0140
Signing time: Sun 29 Mar 2026 14:00:53 +0000
Manifest this update: Sun 29 Mar 2026 14:00:53 +0000
Manifest next update: Mon 30 Mar 2026 14:00:53 +0000
Files and hashes: 1: EACCpkJUe6xsP4_nCRlj7NVGBLc.roa (hash: cbbyB5SvosFwqsVBAsWwnY8rZFf7hG0lJZ2R8+Yzr20=)
2: H3pYhN3aP-4mmqKhhpci3ig1tCA.roa (hash: 4vAvKOvcUAX6c1K5Wxm9Dj65zDW/pqpYSeloWgjaCn4=)
3: HQXcdA9vS7W8SwM4fptHUwhQdDw.crl (hash: poLWPtD0A2jJST71DqksonqT0IC8P/pVgYqh6z+YyIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:c8:7c:df:81:8a:1f:1d:a9:b8:03:45:1f:a7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d05dc740f6f4bb5bc4b03387e9b47530850743c
Validity
Not Before: Mar 29 14:00:53 2026 GMT
Not After : Mar 30 14:00:53 2026 GMT
Subject: CN=bdc5188b59840c68ad10f0b002d93ea9867e963a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:67:bf:1b:de:19:b0:29:d8:da:d4:e3:90:
35:d1:d1:04:e8:91:48:5b:1c:dd:8f:af:e3:0d:e9:
a3:57:bc:bb:a5:34:ed:3f:5d:a0:21:06:a7:1e:4c:
84:2d:12:8e:83:af:33:05:4a:4f:06:3e:3b:3a:73:
89:5e:c4:ff:a1:31:02:c6:23:ae:52:13:d8:d3:0d:
05:43:81:12:a6:d0:26:38:48:c8:0f:bc:80:c8:2d:
39:0c:6c:58:ca:6d:72:b5:30:57:7f:10:4b:a5:e3:
4b:a0:91:60:62:bf:cb:fd:c9:55:84:9d:2f:87:61:
64:dd:87:7d:b8:d7:35:a5:a5:ed:2d:83:8f:3c:35:
7f:4f:85:61:4e:41:d2:1c:b3:a7:41:a7:11:9d:3c:
c5:fe:4f:4c:99:8b:fa:ae:7d:4f:b6:2e:cf:98:28:
3a:62:59:98:da:dc:26:06:9f:6a:d6:15:68:4e:1a:
9a:83:a9:2c:12:66:e8:a9:fd:a7:83:4c:70:36:d7:
70:88:99:e3:7e:cc:5e:8b:74:5e:6d:55:f3:7f:33:
97:82:72:95:6b:7c:76:91:e8:fc:fe:ed:2d:cf:68:
18:fb:14:95:e7:a3:e7:b1:52:5a:d8:bb:9a:2a:97:
2c:f1:78:21:33:b3:04:47:d4:71:86:e1:c4:0f:97:
f7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C5:18:8B:59:84:0C:68:AD:10:F0:B0:02:D9:3E:A9:86:7E:96:3A
X509v3 Authority Key Identifier:
keyid:1D:05:DC:74:0F:6F:4B:B5:BC:4B:03:38:7E:9B:47:53:08:50:74:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:f9:53:06:ef:f2:e6:f5:73:06:36:9f:f5:b4:be:39:2f:f6:
7e:91:d6:dc:a0:49:4a:2e:12:27:15:9f:6c:10:08:ac:20:fe:
96:0a:3b:8d:d8:75:27:7f:db:ca:63:67:74:7d:6b:db:7e:b9:
5d:e1:08:53:5e:fc:26:28:5b:14:ed:4b:3c:75:7c:81:0b:41:
ae:68:38:47:06:5a:9a:02:88:00:99:75:18:08:10:49:12:4f:
76:5a:3b:fa:8d:a9:b5:ce:8e:ff:c2:69:4d:35:2d:4d:38:3d:
80:e2:c8:c1:bf:6d:e6:c0:91:31:76:cf:9a:cf:25:e1:71:cf:
17:ab:11:2d:d7:94:39:81:d5:63:07:46:56:11:9d:50:d4:0f:
33:36:1c:81:a1:4d:38:56:93:ba:80:0a:f4:f7:42:c9:db:f0:
4d:8d:db:45:5f:2a:21:5d:7f:fb:70:93:7f:30:fc:44:13:52:
ed:aa:c2:06:fe:4b:59:16:55:b6:6a:67:f6:b4:89:a8:9a:81:
53:ab:f0:2f:f3:67:f1:86:d6:8f:45:89:58:7c:70:a1:9a:5c:
f5:4d:b6:c0:1e:a4:79:84:7c:c2:04:e7:f3:b3:16:5b:09:a9:
ac:d4:dd:37:93:e6:23:87:23:0a:32:1d:da:31:75:48:a1:71:
0b:a8:eb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:47 2026 by rpki-client