Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
File: HkQmt06M9v_e23sGBBgIMqhiXzI.mft (raw, json)
Hash identifier: MgM0o631ReDkt9Ehb1OSURVXjaY7owV4PAqaAXZsyxo=
Subject key identifier: 00:E7:76:41:93:08:A1:F9:0F:A7:A6:A2:50:01:0A:2F:65:40:B9:26
Authority key identifier: 1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32
Certificate issuer: /CN=1e4426b74e8cf6ffdedb7b0604180832a8625f32
Certificate serial: 019D386617CD2A94FFFD0FFA7EDC8D9DEC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
Manifest number: 09A0
Signing time: Sun 29 Mar 2026 07:01:47 +0000
Manifest this update: Sun 29 Mar 2026 07:01:47 +0000
Manifest next update: Mon 30 Mar 2026 07:01:47 +0000
Files and hashes: 1: HkQmt06M9v_e23sGBBgIMqhiXzI.crl (hash: 1gqcgzc0SjiNM3SX9MS6CtmYeOjwMZ2CbTCZzK02/hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:17:cd:2a:94:ff:fd:0f:fa:7e:dc:8d:9d:ec:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4426b74e8cf6ffdedb7b0604180832a8625f32
Validity
Not Before: Mar 29 07:01:47 2026 GMT
Not After : Mar 30 07:01:47 2026 GMT
Subject: CN=00e776419308a1f90fa7a6a250010a2f6540b926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4f:d4:79:47:a4:11:5f:e8:48:d9:41:31:17:
48:57:9c:f4:1b:68:3b:3f:1f:87:d2:f7:1f:96:5d:
6c:e6:22:6d:52:7d:9d:aa:a3:da:ea:36:da:d4:a6:
2b:ac:b6:41:ff:6d:a1:70:eb:46:af:d4:92:39:c6:
63:80:66:84:52:85:51:d7:35:ee:08:bb:bd:12:82:
ad:be:85:8e:a6:8e:6d:f0:d4:d4:92:2b:11:62:8e:
9b:de:b3:53:3c:c3:5b:97:03:a0:90:98:a1:32:66:
54:b7:2d:4e:aa:95:4d:1e:0b:be:77:0c:44:7f:dd:
d8:13:bd:84:55:c1:c7:b1:59:7b:cd:b4:7f:b4:e5:
f6:45:bd:6b:63:c3:c9:8d:6e:7b:ed:b2:e7:97:a5:
4b:61:6e:c4:24:dd:c7:33:89:ac:05:39:61:85:61:
eb:98:86:fb:b2:9b:c3:1c:3a:5c:48:b6:bd:ea:5b:
43:e3:e3:dc:10:6b:2d:7e:eb:49:f3:8f:ba:94:47:
fb:a1:a2:98:16:37:a8:2b:a6:77:c7:55:65:6b:fa:
5d:c5:9a:bb:3f:65:d6:d8:a7:3e:71:90:64:46:27:
72:25:07:17:00:e2:d6:2b:29:1f:af:1b:87:11:17:
f7:ef:91:f6:4c:95:cd:b9:d1:96:6e:5e:0e:f0:f2:
6b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E7:76:41:93:08:A1:F9:0F:A7:A6:A2:50:01:0A:2F:65:40:B9:26
X509v3 Authority Key Identifier:
keyid:1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:22:d9:6e:2d:08:96:55:ab:ac:76:95:91:b9:1f:63:68:f6:
8f:d9:00:7c:1e:1e:8f:c0:b6:cc:c2:b3:c4:c1:18:d3:d8:7d:
cb:a0:16:6a:ce:19:fa:54:cf:fe:1c:e0:0d:70:31:71:04:3a:
27:3b:94:38:1f:71:77:61:01:64:bd:4c:a0:2a:be:60:1d:24:
bb:66:12:f5:fb:f4:bd:25:e9:57:1e:6d:7c:d3:ff:62:08:e2:
69:f8:7b:d1:a4:cb:bc:10:94:5a:cd:7f:8b:43:7b:3d:07:c3:
50:d2:fe:6f:df:70:6b:08:00:48:56:fc:4d:66:c5:9e:b4:f2:
25:ba:83:e8:c6:47:3d:53:1b:f8:34:1f:f0:ab:13:37:36:34:
86:13:b7:41:32:69:e0:e8:e8:08:9d:4e:0a:0b:84:e8:b4:06:
f8:b8:22:96:04:d1:5d:50:b2:55:11:c0:79:71:06:88:02:75:
03:8f:8e:ec:7b:e8:fb:b2:4a:f3:12:72:ee:73:97:fe:78:79:
72:53:f3:cd:99:bf:28:89:11:d6:75:c0:82:31:b5:35:53:b7:
f0:f8:45:a8:ee:cf:52:50:1d:1d:9e:f8:35:79:f3:03:f0:80:
0d:8e:4d:f8:19:2e:69:12:ec:a5:0d:c2:27:88:cc:38:35:b1:
c7:be:fe:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:19 2026 by rpki-client