Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
File: HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft (raw, json)
Hash identifier: foWrRJ7RdmW4EjCv80UMWQy5Y58GDCu82lnO2BPR/yY=
Subject key identifier: 39:51:F4:1D:52:6E:12:B8:97:EB:05:29:37:11:97:27:47:FB:57:53
Authority key identifier: 1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
Certificate issuer: /CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Certificate serial: 019D382ECBEFC990812769970F55C617590E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
Manifest number: 0DC6
Signing time: Sun 29 Mar 2026 06:01:24 +0000
Manifest this update: Sun 29 Mar 2026 06:01:24 +0000
Manifest next update: Mon 30 Mar 2026 06:01:24 +0000
Files and hashes: 1: HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl (hash: jrNxx2qRwe2gvc9F0qb94nxxW8lUwXviK+MLIE54HsI=)
2: gusOyZenv7586RqtEWmnhh7N0MA.roa (hash: 2ylZF1yMijEe2k4/d611VBCjiq1WUabPgeneyDm3vsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:cb:ef:c9:90:81:27:69:97:0f:55:c6:17:59:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Validity
Not Before: Mar 29 06:01:24 2026 GMT
Not After : Mar 30 06:01:24 2026 GMT
Subject: CN=3951f41d526e12b897eb05293711972747fb5753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:aa:01:3d:50:0d:3c:c6:fb:ce:cb:e5:0c:cd:
8f:2c:6c:55:35:d4:45:c3:30:62:96:ee:7f:a9:fb:
81:a2:43:dc:d3:f3:f1:a1:02:12:2f:86:4d:13:f1:
ea:7f:05:b8:dd:55:fb:a3:87:62:ec:0f:e4:d8:8d:
79:79:01:13:a0:13:ed:fb:32:77:c6:90:93:4a:41:
48:f5:07:3c:ab:1c:b0:9f:90:fc:76:0b:19:55:03:
c7:09:4d:a3:35:cf:42:af:8c:ee:01:21:f8:59:01:
00:b3:cd:c7:6b:25:7a:92:17:02:84:34:73:1e:86:
98:61:da:9c:f2:b2:df:21:c1:44:1b:85:19:0b:11:
d3:28:26:31:44:27:3c:c9:cc:2e:98:90:26:4f:62:
87:fa:97:ab:07:e8:d9:27:58:d3:46:7c:02:6f:11:
2f:91:b1:20:a0:88:89:1d:4a:6e:ab:e3:3f:6b:8e:
2f:d5:ec:95:f7:47:21:0a:bd:6f:38:6d:ca:15:9c:
32:0e:d7:86:df:95:34:02:5f:09:bc:91:3c:5b:60:
49:d0:a4:fc:7b:42:f3:1b:b5:a6:5e:4f:04:e6:a5:
d1:1c:6e:a2:d9:c8:62:2f:67:4b:72:96:f5:3c:51:
0f:66:5a:20:1c:ee:0b:13:db:73:96:85:d2:8e:fc:
cc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:51:F4:1D:52:6E:12:B8:97:EB:05:29:37:11:97:27:47:FB:57:53
X509v3 Authority Key Identifier:
keyid:1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:2f:b3:ca:6b:bf:93:d7:e3:f1:bb:8c:6c:34:d3:1c:5d:84:
87:2c:28:72:b7:1d:37:7a:c4:47:a7:e3:54:11:47:bd:26:d8:
be:7f:d0:e0:83:90:4a:c5:e6:e9:85:86:70:52:87:8e:a0:f7:
7b:33:48:23:79:f0:83:20:0a:f4:02:9f:10:87:94:7b:25:69:
48:12:d0:3f:bc:06:ca:70:13:d4:72:96:9c:99:41:f1:5d:fc:
59:3f:3a:84:02:e3:34:ee:50:c9:5f:88:1a:9c:f7:dd:56:76:
6d:49:2a:5f:d4:f1:68:a4:68:66:e5:f5:40:90:16:c6:84:12:
74:77:2f:78:87:cd:54:96:da:75:28:07:cb:be:25:0f:b0:a8:
d5:ff:f2:32:c2:66:ba:a5:c5:08:c0:ef:50:1b:44:02:c0:40:
1e:76:e1:2e:9a:9f:03:ff:8d:e0:e0:d4:39:aa:15:4e:88:e4:
04:ad:97:6d:2e:6c:6c:b7:72:13:04:4c:31:1b:0a:90:9a:eb:
24:da:7e:d1:2c:2f:6a:e8:e7:9b:2e:99:77:f5:b6:b5:b7:85:
48:91:bf:2d:91:b1:2d:3d:63:4b:0f:f4:5f:98:f1:10:4c:7d:
04:e2:ff:da:22:cf:bc:4b:71:2d:f7:40:17:a2:81:c0:6f:84:
fd:2c:22:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:06 2026 by rpki-client