Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
File: HpqS2vCMILRpG5Jc8DLlSR_grMA.mft (raw, json)
Hash identifier: vHSZVAyw+xVFkdgM0tpHp+dWXxBx6jByHtEn+mXXoMw=
Subject key identifier: 0A:A3:AF:EF:11:88:A5:EC:69:D5:13:C4:86:50:6C:3F:09:81:D1:3A
Authority key identifier: 1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
Certificate issuer: /CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Certificate serial: 019D39AECA23DFC9676C1DE81A6847C59577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
Manifest number: 145E
Signing time: Sun 29 Mar 2026 13:00:49 +0000
Manifest this update: Sun 29 Mar 2026 13:00:49 +0000
Manifest next update: Mon 30 Mar 2026 13:00:49 +0000
Files and hashes: 1: HpqS2vCMILRpG5Jc8DLlSR_grMA.crl (hash: xVqOWSFCXWvQulpaud6PwgoIwZb+X9WvoeYZqD8UPrc=)
2: xjZQLy8vRD61BJY6zdBKr_UBjVY.roa (hash: SELpzilV3F78kMxps90YOTYAH+UvWHxqXIdoDWHgTLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:ca:23:df:c9:67:6c:1d:e8:1a:68:47:c5:95:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Validity
Not Before: Mar 29 13:00:49 2026 GMT
Not After : Mar 30 13:00:49 2026 GMT
Subject: CN=0aa3afef1188a5ec69d513c486506c3f0981d13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b3:8a:84:98:d7:60:af:f8:ae:3b:b2:7e:51:
10:ee:2c:b5:7e:84:b4:76:f9:87:f7:89:ca:de:47:
db:de:91:77:c6:d6:2c:6a:58:c6:a1:97:47:c9:6d:
bb:37:2d:b3:8d:b3:58:a9:01:61:19:9d:73:dc:82:
09:ec:d0:02:e2:65:49:ab:7d:6d:16:09:c0:09:05:
6e:93:c1:fb:8f:97:2b:19:3a:90:00:9c:0c:c2:61:
3d:d7:cb:cc:b9:d1:af:a5:27:06:68:54:48:39:98:
4d:c7:2b:68:1a:bc:e7:e0:19:a4:88:4c:54:34:58:
b2:c3:ba:56:b4:b1:77:02:3c:9f:8a:98:14:35:4c:
8b:72:7d:ac:4a:d4:df:fc:74:61:69:69:39:f4:d2:
33:da:64:93:31:0c:0e:b9:0d:4d:f5:54:ba:b7:72:
9f:d5:1e:2a:35:47:7d:9c:1a:25:a8:e6:af:ac:53:
ab:8a:56:48:78:54:f1:16:36:6a:75:17:e0:4e:25:
da:1a:7c:fc:35:d1:9f:da:ce:33:d8:74:26:4d:3d:
f4:86:5c:f2:2e:40:32:72:75:2f:8f:ea:32:5d:9e:
b7:7e:8f:7f:74:6b:b9:5f:45:fa:23:e4:df:ec:03:
12:ff:02:0a:c1:44:93:92:f0:8a:80:d8:4c:00:ba:
93:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A3:AF:EF:11:88:A5:EC:69:D5:13:C4:86:50:6C:3F:09:81:D1:3A
X509v3 Authority Key Identifier:
keyid:1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8c:29:8c:ed:eb:72:90:62:aa:51:60:fa:94:a6:b3:c0:50:
b9:c6:93:fb:45:8b:2c:68:38:5f:5d:a9:0c:10:58:f0:86:7b:
79:eb:85:e7:11:7a:be:dc:4d:1b:18:51:1e:0e:a3:ba:8e:9d:
ce:d1:38:61:53:46:24:77:18:51:13:24:c5:c8:42:ba:25:6a:
8d:8f:ff:ab:e6:ef:fc:94:17:82:83:51:9b:6d:f9:17:1d:9c:
0b:e5:c3:cb:d8:08:16:47:ba:cc:20:1d:dd:00:ce:20:4f:33:
d1:2b:f5:b1:4a:bb:eb:1d:e7:4a:bb:6f:d0:7a:80:a6:26:3d:
ca:d1:2c:69:f2:a7:08:68:cf:4f:74:fe:47:c7:54:cc:e4:1a:
36:e8:e8:63:0e:cf:a4:91:87:cd:a5:b2:1d:14:1d:60:c4:dc:
74:d0:4a:ad:c8:ae:e1:7c:e1:db:de:8d:cf:52:d7:29:fd:59:
7c:c1:64:b5:49:01:0d:da:9a:7b:a0:b9:8a:ba:ec:90:14:8e:
ca:f0:a5:7d:e4:94:50:62:d1:4d:3c:ec:e0:30:73:05:91:f3:
ac:f7:aa:3a:91:6d:09:d4:f4:b0:3f:e3:d0:33:88:00:94:e3:
98:5b:63:25:33:06:1a:45:cc:3e:bc:c6:5a:e1:e3:31:35:d9:
14:16:be:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rsoj38lnbB3oGmhHxZV3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOWE5MmRhZjA4YzIwYjQ2OTFiOTI1Y2YwMzJlNTQ5MWZl
MGFjYzAwHhcNMjYwMzI5MTMwMDQ5WhcNMjYwMzMwMTMwMDQ5WjAzMTEwLwYDVQQD
EygwYWEzYWZlZjExODhhNWVjNjlkNTEzYzQ4NjUwNmMzZjA5ODFkMTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7OKhJjXYK/4rjuyflEQ7iy1foS0
dvmH94nK3kfb3pF3xtYsaljGoZdHyW27Ny2zjbNYqQFhGZ1z3IIJ7NAC4mVJq31t
FgnACQVuk8H7j5crGTqQAJwMwmE918vMudGvpScGaFRIOZhNxytoGrzn4BmkiExU
NFiyw7pWtLF3AjyfipgUNUyLcn2sStTf/HRhaWk59NIz2mSTMQwOuQ1N9VS6t3Kf
1R4qNUd9nBolqOavrFOrilZIeFTxFjZqdRfgTiXaGnz8NdGf2s4z2HQmTT30hlzy
LkAycnUvj+oyXZ63fo9/dGu5X0X6I+Tf7AMS/wIKwUSTkvCKgNhMALqTnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqjr+8RiKXsadUTxIZQbD8JgdE6MB8GA1UdIwQY
MBaAFB6aktrwjCC0aRuSXPAy5Ukf4KzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBxUzJ2Q01JTFJwRzVKYzhETGxTUl9nck1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jMTQxMTUtOGNmOC00MGM4LTg3Yzgt
Y2U4MmViZTExYWM4LzEvSHBxUzJ2Q01JTFJwRzVKYzhETGxTUl9nck1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jMTQxMTUtOGNmOC00MGM4LTg3YzgtY2U4MmViZTExYWM4
LzEvSHBxUzJ2Q01JTFJwRzVKYzhETGxTUl9nck1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYwpjO3r
cpBiqlFg+pSms8BQucaT+0WLLGg4X12pDBBY8IZ7eeuF5xF6vtxNGxhRHg6juo6d
ztE4YVNGJHcYURMkxchCuiVqjY//q+bv/JQXgoNRm235Fx2cC+XDy9gIFke6zCAd
3QDOIE8z0Sv1sUq76x3nSrtv0HqApiY9ytEsafKnCGjPT3T+R8dUzOQaNujoYw7P
pJGHzaWyHRQdYMTcdNBKrciu4Xzh296Nz1LXKf1ZfMFktUkBDdqae6C5irrskBSO
yvClfeSUUGLRTTzs4DBzBZHzrPeqOpFtCdT0sD/j0DOIAJTjmFtjJTMGGkXMPrzG
WuHjMTXZFBa+ZQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:17:30 2026 by rpki-client