Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
File: HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft (raw, json)
Hash identifier: P6V6c9u2bgIO0zogg0EG8vaUdpzGxxYvSFXhtJTJmok=
Subject key identifier: 15:B1:AA:18:BB:CC:9F:B1:E9:73:B0:06:A7:72:64:2E:0D:1E:A0:1F
Authority key identifier: 1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE
Certificate issuer: /CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
Certificate serial: 01A17D05E3F5B03346C763D06E038FCA2988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
Manifest number: 0399
Signing time: Tue 27 Oct 2026 11:01:40 +0000
Manifest this update: Tue 27 Oct 2026 11:01:40 +0000
Manifest next update: Wed 28 Oct 2026 11:01:40 +0000
Files and hashes: 1: HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl (hash: FD6XPOJa4GPIHLA6pKVi+4PbYX9k1ldF4KHkl/1G8ms=)
2: X01IfSkC0_7ntZbrUIkZ_L-D4vE.asa (hash: aZEncQf/BAdEF1bttJTpzCCc9CG56JQeD1jy67NOedw=)
3: alFC4352ujfylmeJv44dIFDrX8I.roa (hash: EyvWXf/Mudgwkv08n9JwLU88K529FLdo5Jy2xLKZhDY=)
4: qYc1GDRHdMKB8iddli8zkMN3RVY.roa (hash: Raz+vndSPY3IPBLJicVFRGraRf1O/aOAmmwEA/V9D9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:e3:f5:b0:33:46:c7:63:d0:6e:03:8f:ca:29:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
Validity
Not Before: Oct 27 11:01:40 2026 GMT
Not After : Oct 28 11:01:40 2026 GMT
Subject: CN=15b1aa18bbcc9fb1e973b006a772642e0d1ea01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:51:aa:b5:74:ff:4d:31:07:40:2e:d0:af:2d:
f3:a3:ac:2d:12:df:05:4f:89:53:30:49:71:b2:48:
b5:35:b3:7f:4a:90:c4:f9:bb:ae:80:dc:c1:69:46:
ea:d8:d3:3a:56:a2:c8:41:07:ae:5f:19:76:fa:19:
76:0b:98:2c:07:ae:a7:61:0b:bf:5a:2f:a7:84:77:
f3:63:93:18:0d:b1:e5:98:03:41:43:c3:ac:f7:19:
c5:03:ca:8d:66:e5:b8:35:9b:29:c1:a5:8f:5c:e4:
5f:a1:85:fb:44:c0:67:2b:42:b2:79:08:24:74:b2:
27:76:e9:dd:9a:e5:4b:63:24:2b:f3:6a:f3:bb:c0:
b1:b2:88:37:70:06:57:3d:d9:c9:fe:f3:6c:78:8d:
20:86:1a:7a:c2:a9:e0:ec:62:dd:13:47:66:ca:fb:
6a:77:4b:8b:16:bb:5f:a8:42:24:0a:10:64:54:89:
45:f6:8d:3b:2b:7b:a6:b9:f5:42:08:eb:cb:c4:e3:
b7:0e:8e:28:64:2a:ba:09:6e:e9:4b:b7:f7:c8:51:
25:6f:7e:95:57:0f:a4:84:39:e5:2c:32:e3:fb:58:
35:29:37:89:9d:11:af:91:d8:8b:2c:bc:f1:e9:90:
cd:65:a8:01:9b:fd:5d:92:ca:bf:e4:50:cb:b9:53:
79:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B1:AA:18:BB:CC:9F:B1:E9:73:B0:06:A7:72:64:2E:0D:1E:A0:1F
X509v3 Authority Key Identifier:
keyid:1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:ba:4a:93:c8:4f:c8:5a:8b:99:06:9a:68:10:9e:4f:91:63:
cb:7a:aa:ac:55:b0:12:ba:6e:94:3a:f3:1d:af:d9:ff:ee:37:
89:6a:09:bd:d9:9e:84:13:2b:cd:50:59:0e:03:8f:ad:ef:64:
0e:d3:d2:69:92:a1:be:76:6b:5a:a7:3e:70:d3:a9:09:50:4f:
ff:a8:c4:12:54:af:50:be:13:df:06:9b:d5:63:d3:83:66:8a:
18:8f:62:c3:47:45:fe:4c:4e:fb:1d:a1:65:16:01:81:46:62:
05:4c:d8:35:c6:93:ee:00:88:e2:76:5e:2f:7e:63:c7:b9:a9:
5e:dd:4e:68:9c:63:74:15:1b:89:bc:ee:29:c6:9b:03:de:53:
87:54:c5:57:45:95:60:09:f8:3b:01:38:54:55:cb:44:57:8f:
a9:a6:4e:3d:9d:10:a8:8c:e7:19:1d:3a:3c:3f:7b:df:af:be:
5b:e9:ee:51:16:a2:a6:ab:34:ba:5f:de:70:58:39:4e:b4:ee:
9c:20:48:5c:75:20:98:a8:7d:70:33:e2:39:62:0d:46:4b:0d:
39:bc:b5:12:1f:76:22:fb:1d:b5:93:9a:bc:ae:2d:78:29:1a:
9e:70:8f:66:d1:f3:4d:13:7f:51:0b:13:f1:96:eb:b9:27:03:
83:97:ec:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:38:37 2026 by rpki-client