Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
File: HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json)
Hash identifier: 2xhc2vy7mPYLxXRSqmqAsgTh/4xlMCC8LyXAMORUv2E=
Subject key identifier: B1:85:58:6B:B6:C8:8B:FF:59:77:C2:A8:82:4C:DB:96:AC:01:B7:2E
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 019D39E54DA3F2B2726781EEE30F0EC51D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
Manifest number: 0F52
Signing time: Sun 29 Mar 2026 14:00:21 +0000
Manifest this update: Sun 29 Mar 2026 14:00:21 +0000
Manifest next update: Mon 30 Mar 2026 14:00:21 +0000
Files and hashes: 1: A_5oAx6RTX4seU-tsf_hsJM1QfM.roa (hash: v9Bgj8QT90sJo8g5+vI6AXOfjQ2Zxqu0x7TfHuAGD6g=)
2: CIwlYwnQgY17UeavMkm13EVL2n8.roa (hash: r4bZKQmC1Ctifqf/+GSiUbszN3swZZeF7mrqnTsUuQ8=)
3: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: 9evi4RsvQbYs06aDGsI4VXip4kGQDZqPal0ZK+D+wLI=)
4: IzAZsf_Qc2A8pMxdGG-nBxB2gRw.roa (hash: 4TJbYmdeXG/rQN3FAOOPwKLfkTdziJof+SKAImG/iP0=)
5: liurjQr2aFUZ4RN7sB5e2xaGm1M.roa (hash: YNt6MjSDV5Wvd3Oc5pFyN0vEC7cDDHJYrDTH0YBIpGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:4d:a3:f2:b2:72:67:81:ee:e3:0f:0e:c5:1d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Mar 29 14:00:21 2026 GMT
Not After : Mar 30 14:00:21 2026 GMT
Subject: CN=b185586bb6c88bff5977c2a8824cdb96ac01b72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:fe:eb:81:9a:88:bc:ab:bc:d5:28:ed:7e:
66:54:ec:8b:22:71:13:f1:02:f0:0a:24:18:04:08:
8e:f5:70:da:e3:86:e9:d5:40:95:61:47:56:60:88:
8e:c6:ee:11:bb:0e:00:27:35:59:93:78:e9:ee:7f:
3e:fe:3e:33:09:c2:5a:b9:c2:1b:80:96:c5:54:b7:
a9:21:33:2d:d3:12:4b:5a:35:e3:d7:f9:56:2e:a1:
d2:e8:1a:6f:24:d7:f4:fd:c0:81:03:8b:04:06:ab:
3a:d6:15:05:cc:2f:8f:09:4d:ac:1a:1b:15:83:06:
45:c1:0d:36:61:d7:df:07:cb:7c:54:5b:fa:d2:e3:
8f:62:43:aa:52:8f:90:44:63:a0:d1:eb:3a:1b:d8:
d1:cb:64:6f:df:b8:8b:27:15:0c:cf:5e:07:e9:4a:
d2:87:1c:95:58:d3:f6:ce:87:b4:c8:8c:bb:c4:43:
dc:95:0b:63:ec:c3:0d:f5:8e:e9:1b:22:bc:f7:c1:
2d:94:0a:04:e4:2a:e1:f3:bc:6b:0c:5c:0c:92:fa:
66:f3:b0:0f:c0:f2:8f:4f:bf:7f:fd:f7:f2:a8:a5:
61:79:be:f8:63:dd:5c:07:74:a1:ce:ab:4f:f4:81:
da:d0:00:5a:1f:92:c0:fd:24:97:ea:56:40:45:20:
b1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:85:58:6B:B6:C8:8B:FF:59:77:C2:A8:82:4C:DB:96:AC:01:B7:2E
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:54:5b:e6:15:8e:b7:c3:04:30:ab:2c:3d:3b:30:59:44:da:
05:cb:f6:5c:79:e1:48:bd:2c:1e:e6:2b:ee:bc:c1:69:78:9d:
a9:02:20:77:a6:d4:5a:ed:7e:5b:28:86:14:92:35:5b:d1:bc:
04:ca:78:a6:96:94:e8:8b:86:ef:ab:94:12:99:f0:9b:52:b9:
15:c2:3c:7a:6f:61:49:8a:7f:8d:a6:9d:8c:d9:ec:2d:4b:e7:
ec:b1:fb:4c:e2:89:cb:7c:32:fd:73:36:7f:f7:67:eb:bc:7f:
52:c3:49:5f:da:1f:44:63:79:0f:ec:05:c1:d3:00:0a:67:7a:
78:82:4b:b6:2a:46:a4:c2:8c:8b:fb:ca:77:63:5b:9f:f8:b8:
4d:36:ac:b0:ee:61:81:e7:ff:17:93:5a:0b:ea:c0:71:9f:ee:
64:d6:d3:dd:bd:f6:51:63:ca:8d:9a:ec:1e:f4:66:f4:b8:57:
f5:5b:d1:9c:7e:9a:08:63:44:08:b8:60:d8:6b:9b:25:58:af:
54:46:17:db:fb:a8:0d:5b:35:6f:06:cd:9d:c0:f8:c5:b7:3a:
fe:0f:c4:84:bd:1c:92:61:1b:18:ab:96:b2:16:11:97:12:b7:
2d:03:70:26:c7:43:c0:68:38:91:2f:eb:2c:18:f0:8f:a9:d7:
5f:a9:3c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:51 2026 by rpki-client