Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
File: HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json)
Hash identifier: V69H6n2OT56UmEiVVmgdLWT+7AO2nJ3ZRMnBaANILSU=
Subject key identifier: 23:D0:0F:0E:FB:52:42:DA:8B:1C:5D:9A:2E:80:92:C1:64:25:33:0C
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 019E31173B0298E833B1BA7BB9E38F586C0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
Manifest number: 0FD2
Signing time: Sat 16 May 2026 14:01:06 +0000
Manifest this update: Sat 16 May 2026 14:01:06 +0000
Manifest next update: Sun 17 May 2026 14:01:06 +0000
Files and hashes: 1: A_5oAx6RTX4seU-tsf_hsJM1QfM.roa (hash: v9Bgj8QT90sJo8g5+vI6AXOfjQ2Zxqu0x7TfHuAGD6g=)
2: CIwlYwnQgY17UeavMkm13EVL2n8.roa (hash: r4bZKQmC1Ctifqf/+GSiUbszN3swZZeF7mrqnTsUuQ8=)
3: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: ztxBEabn/PvNSFUc0ngcCrBQJPuSexROmrSpX3A4FYU=)
4: IzAZsf_Qc2A8pMxdGG-nBxB2gRw.roa (hash: 4TJbYmdeXG/rQN3FAOOPwKLfkTdziJof+SKAImG/iP0=)
5: liurjQr2aFUZ4RN7sB5e2xaGm1M.roa (hash: YNt6MjSDV5Wvd3Oc5pFyN0vEC7cDDHJYrDTH0YBIpGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:3b:02:98:e8:33:b1:ba:7b:b9:e3:8f:58:6c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: May 16 14:01:06 2026 GMT
Not After : May 17 14:01:06 2026 GMT
Subject: CN=23d00f0efb5242da8b1c5d9a2e8092c16425330c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:d1:80:e0:d2:b4:bf:dd:f4:8d:2d:1c:90:
49:ea:8d:a6:a0:07:49:7a:01:b8:68:6e:45:84:ad:
94:6f:61:f3:b5:17:33:07:86:5b:32:bb:52:f6:a8:
54:4a:4f:51:21:7b:f7:9d:69:a0:72:b9:00:a7:51:
85:7e:9c:d4:3a:1c:d8:b6:3f:a0:f1:de:29:03:6e:
89:80:3a:84:69:9d:2f:12:27:b0:a0:56:27:4f:66:
38:0d:c8:92:27:0c:2e:13:63:84:e0:ce:12:55:dd:
79:3f:c8:3e:32:24:5e:94:07:5d:11:98:4f:a0:ce:
75:74:f4:65:6e:89:d3:d6:12:bf:07:59:42:4c:d5:
66:e4:a2:d3:19:99:5e:19:23:19:aa:d5:5a:13:e7:
23:b7:af:41:8c:97:a5:ac:a7:76:a6:4d:eb:bb:66:
a0:27:b7:94:c2:34:09:93:c3:83:a4:58:bc:0c:c8:
a2:91:a3:13:74:5d:7a:84:f2:53:69:24:cb:3d:8a:
c9:6f:8b:8a:50:f4:da:3b:8a:89:5d:ea:fc:9a:c7:
af:58:92:4b:7b:a4:89:6b:2c:79:cd:9e:ad:4b:1f:
1a:24:c1:45:df:53:4b:44:fd:70:7d:e9:7a:b1:95:
20:27:cf:59:60:35:9c:7e:3f:17:b8:90:aa:67:b6:
f5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D0:0F:0E:FB:52:42:DA:8B:1C:5D:9A:2E:80:92:C1:64:25:33:0C
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:7d:34:47:2e:75:43:f9:6e:47:5c:80:b7:df:77:46:e2:2b:
8f:25:93:44:fc:53:83:de:c1:0d:cb:84:cc:3e:96:cd:d0:ae:
0e:68:af:03:d8:60:ad:85:b6:76:71:73:a8:e8:5a:7c:76:97:
4d:01:e0:3f:07:7e:94:56:d4:c0:af:ea:47:cc:55:e4:57:95:
53:69:43:20:f2:7f:21:94:1d:c8:3f:bb:35:86:84:80:6f:fe:
8f:bb:99:03:67:49:1e:b3:17:d2:44:51:70:ad:66:09:1e:83:
91:3d:be:69:08:5f:11:cf:f1:0a:06:a6:94:e7:c8:6e:cb:b2:
9e:8b:a1:67:28:a9:6d:f2:73:73:71:f1:24:76:f6:e3:45:3f:
a4:0e:ce:40:3d:78:c6:7e:c5:04:6c:1b:b6:37:c5:f8:51:40:
48:30:0c:de:10:48:18:0e:a3:f4:51:e5:e8:33:b9:53:db:aa:
1c:d0:ae:b0:f4:32:36:5b:cc:7e:4b:04:3c:9b:be:e8:50:f6:
e8:da:98:28:48:04:3a:11:83:e3:9f:1e:b9:4d:96:9a:e3:6d:
04:9f:e8:28:ed:84:7d:69:e1:ec:da:6c:27:9c:5a:ec:16:e6:
c3:a9:e1:9c:17:db:0f:5c:a4:46:37:53:46:5d:f0:19:4f:c0:
b5:4d:0e:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xFzsCmOgzsbp7ueOPWGwPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTBhOWViNDdkODI0YjUxZjE1NDQ0MjQ4MWEyNTcxNjgz
OTQ1NTEwHhcNMjYwNTE2MTQwMTA2WhcNMjYwNTE3MTQwMTA2WjAzMTEwLwYDVQQD
EygyM2QwMGYwZWZiNTI0MmRhOGIxYzVkOWEyZTgwOTJjMTY0MjUzMzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJjRgODStL/d9I0tHJBJ6o2moAdJ
egG4aG5FhK2Ub2HztRczB4ZbMrtS9qhUSk9RIXv3nWmgcrkAp1GFfpzUOhzYtj+g
8d4pA26JgDqEaZ0vEiewoFYnT2Y4DciSJwwuE2OE4M4SVd15P8g+MiRelAddEZhP
oM51dPRlbonT1hK/B1lCTNVm5KLTGZleGSMZqtVaE+cjt69BjJelrKd2pk3ru2ag
J7eUwjQJk8ODpFi8DMiikaMTdF16hPJTaSTLPYrJb4uKUPTaO4qJXer8msevWJJL
e6SJayx5zZ6tSx8aJMFF31NLRP1wfel6sZUgJ89ZYDWcfj8XuJCqZ7b1tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPQDw77UkLaixxdmi6AksFkJTMMMB8GA1UdIwQY
MBaAFB6gqetH2CS1HxVEQkgaJXFoOUVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFDcDYwZllKTFVmRlVSQ1NCb2xjV2c1UlZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8zMDMzYzYtY2NlOC00NTBkLWEwYzkt
ODQxOGE5NmY2Nzk1LzEvSHFDcDYwZllKTFVmRlVSQ1NCb2xjV2c1UlZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8zMDMzYzYtY2NlOC00NTBkLWEwYzktODQxOGE5NmY2Nzk1
LzEvSHFDcDYwZllKTFVmRlVSQ1NCb2xjV2c1UlZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoX00Ry51
Q/luR1yAt993RuIrjyWTRPxTg97BDcuEzD6WzdCuDmivA9hgrYW2dnFzqOhafHaX
TQHgPwd+lFbUwK/qR8xV5FeVU2lDIPJ/IZQdyD+7NYaEgG/+j7uZA2dJHrMX0kRR
cK1mCR6DkT2+aQhfEc/xCgamlOfIbsuynouhZyipbfJzc3HxJHb240U/pA7OQD14
xn7FBGwbtjfF+FFASDAM3hBIGA6j9FHl6DO5U9uqHNCusPQyNlvMfksEPJu+6FD2
6NqYKEgEOhGD458euU2WmuNtBJ/oKO2EfWnh7NpsJ5xa7Bbmw6nhnBfbD1ykRjdT
Rl3wGU/AtU0ODw==
-----END CERTIFICATE-----
Generated at Sat May 16 22:01:06 2026 by rpki-client