Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
File: HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft (raw, json)
Hash identifier: fT6w6+tK9MZqVHemqb+xRboyPcEc0fRDasRKUcBml2s=
Subject key identifier: 5D:D2:5E:80:74:5E:D3:96:28:8F:9A:0E:8C:F7:FE:57:C5:A0:C5:76
Authority key identifier: 1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE
Certificate issuer: /CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
Certificate serial: 019CE66D053D5E93A7015742F79D5E7BC7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
Manifest number: 0138
Signing time: Fri 13 Mar 2026 09:00:30 +0000
Manifest this update: Fri 13 Mar 2026 09:00:30 +0000
Manifest next update: Sat 14 Mar 2026 09:00:30 +0000
Files and hashes: 1: HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl (hash: XoL/NOQzOidcnsjbxcqBXmBOoSrcVEN7C7r3rQm/WRg=)
2: alFC4352ujfylmeJv44dIFDrX8I.roa (hash: EyvWXf/Mudgwkv08n9JwLU88K529FLdo5Jy2xLKZhDY=)
3: qYc1GDRHdMKB8iddli8zkMN3RVY.roa (hash: Raz+vndSPY3IPBLJicVFRGraRf1O/aOAmmwEA/V9D9U=)
4: vWwiGSVRiuY5G_sGCiMiyC9oZaw.asa (hash: TYWXQ81PwJFaPM/v0IBTjfWfvW7fjHxqu9IT+A6xBqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:05:3d:5e:93:a7:01:57:42:f7:9d:5e:7b:c7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
Validity
Not Before: Mar 13 09:00:30 2026 GMT
Not After : Mar 14 09:00:30 2026 GMT
Subject: CN=5dd25e80745ed396288f9a0e8cf7fe57c5a0c576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:a4:e5:3c:5d:fd:66:8d:b4:1a:9e:ea:43:
0c:b5:4a:51:6f:e9:73:0b:af:ff:6e:cc:cc:de:22:
2b:ac:90:16:4f:a2:f5:39:8c:a7:10:48:ea:b6:d2:
07:95:6f:fa:a2:a7:72:36:7f:ae:72:12:bf:6c:e1:
59:59:23:fe:7c:06:bf:04:6a:b5:a3:8f:ed:5f:63:
f6:48:cf:6a:39:7c:fd:ac:a6:e2:99:d7:e5:4d:ef:
6d:f2:6c:c7:12:ba:00:6d:d4:d0:ef:5e:8e:bc:c1:
36:05:22:4c:7b:53:56:25:35:d9:87:3e:22:40:08:
ca:97:c5:bd:5a:62:b8:4e:ff:ab:63:dd:60:ce:84:
c2:eb:61:41:b5:c0:2f:5a:29:44:85:fc:fb:56:5c:
65:d3:97:dc:4f:49:66:e7:c0:7c:c4:09:34:15:5a:
78:83:9c:55:e9:61:7e:87:5e:60:63:1f:e5:07:33:
71:b1:4d:b8:59:6f:a6:8f:54:45:b5:17:44:76:a0:
b6:15:4d:b6:e7:d0:42:3a:37:61:cd:bc:91:42:8d:
ef:87:b9:3e:e8:3a:68:07:3c:45:fd:8d:1f:54:f4:
dc:af:1c:d2:66:9c:50:7d:47:ea:bd:fb:98:d1:fd:
f4:63:ad:e3:94:a1:54:ff:5a:14:d1:a8:f2:e0:88:
2c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D2:5E:80:74:5E:D3:96:28:8F:9A:0E:8C:F7:FE:57:C5:A0:C5:76
X509v3 Authority Key Identifier:
keyid:1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:4a:0d:8e:72:c0:84:34:ff:71:bd:7a:58:6a:59:57:dc:bb:
f7:d6:4c:aa:38:a8:95:fc:27:4a:93:ca:59:ca:6b:8b:65:6c:
3e:cc:c7:7f:a2:6b:26:f9:01:cf:f1:01:bb:ca:53:15:99:b3:
4a:00:75:27:e5:34:57:4d:05:25:14:2f:71:0f:bd:11:d5:cc:
db:d0:e5:45:d5:7e:39:a9:8b:5d:2f:f3:06:ca:a8:bf:24:9d:
ba:a6:1f:82:b6:97:71:d4:db:3b:0b:4f:d0:c5:b6:b1:25:21:
08:e6:8f:f5:24:9e:47:cb:c5:71:51:75:c4:c0:5b:8f:1f:18:
4b:0c:1b:0a:1e:21:4a:f1:e3:aa:1f:ed:b4:c6:37:bb:08:df:
cf:0b:10:dc:1b:bb:d0:c9:e7:8e:ae:fb:de:fd:ff:b1:0c:80:
ac:5e:e7:81:d6:d1:83:a4:be:98:18:99:a8:2f:b9:f0:47:96:
45:13:fe:f7:82:78:a1:2b:a6:0f:e1:9d:3b:83:54:da:8c:6b:
e4:e6:3f:47:d1:8a:61:16:4d:10:11:ef:85:5a:99:65:63:aa:
2b:6c:73:55:a1:c9:6e:a1:57:c7:53:9f:28:2c:fb:a7:a8:e6:
f5:af:d1:e5:73:fa:1b:fb:8a:35:32:78:fc:5e:8b:0c:75:d3:
37:ce:64:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:48:00 2026 by rpki-client