Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
File: HNq3BST9UTE7hPXY9GNio9jICBQ.mft (raw, json)
Hash identifier: EIn2KjE9ASXQZ5rw3uuC5+kJdh1bT2lxwS59kwBjexA=
Subject key identifier: A6:AA:5B:D2:7B:6D:28:FF:7B:10:9D:A2:C5:C8:7D:06:08:6B:39:A8
Authority key identifier: 1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14
Certificate issuer: /CN=1cdab70524fd51313b84f5d8f46362a3d8c80814
Certificate serial: 019D382E20A0FAEF96DFA3D21A38C39CC511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:40 +0000
Manifest this update: Sun 29 Mar 2026 06:00:40 +0000
Manifest next update: Mon 30 Mar 2026 06:00:40 +0000
Files and hashes: 1: HNq3BST9UTE7hPXY9GNio9jICBQ.crl (hash: +90tYBf0FBKaq8cF7pn3DHq0hoM4pPGFVMU+PcRiGjc=)
2: wJTOj0mEUrIF3Tlq4qTWWTuOppI.roa (hash: w9rdqk85HiQNy+SgpZs0zo1ZOjcfj7xojv16EEwMZF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:20:a0:fa:ef:96:df:a3:d2:1a:38:c3:9c:c5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdab70524fd51313b84f5d8f46362a3d8c80814
Validity
Not Before: Mar 29 06:00:40 2026 GMT
Not After : Mar 30 06:00:40 2026 GMT
Subject: CN=a6aa5bd27b6d28ff7b109da2c5c87d06086b39a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:ce:36:fe:a2:f7:c2:6c:11:48:27:a9:16:
05:7d:93:0d:59:11:85:dd:67:ea:f6:20:f3:cf:b3:
ed:9e:56:a5:cf:03:36:68:87:b6:15:96:90:28:d5:
f5:40:46:80:63:9f:db:92:3b:b9:3e:78:71:04:c9:
82:58:a3:dd:f2:ee:af:9e:f0:4c:e9:48:e6:02:e4:
c4:4c:c2:7e:05:35:5a:14:e6:cf:6e:f2:a9:6e:d9:
a3:20:97:de:b9:8b:a7:9b:41:e9:92:d7:2b:dd:b4:
07:9c:dd:e6:83:81:e0:68:8b:94:bd:f8:fa:59:48:
97:06:0b:36:4c:37:69:66:d5:d9:72:6b:ac:58:60:
ed:21:3f:32:23:2b:8a:0a:60:f6:3b:ae:26:c8:3a:
76:07:e8:d6:65:c1:d3:ee:60:08:2a:21:62:f7:be:
46:94:13:4e:6f:9a:5d:25:6e:c0:e0:04:dd:31:6b:
ea:bb:e4:8b:3d:3d:7d:b9:99:fa:45:4f:2c:55:30:
12:4c:dd:8e:41:8e:be:8e:79:15:8b:a0:fb:13:57:
42:9f:f0:e6:2a:8e:f7:c1:6b:4e:88:15:b4:c6:fa:
38:75:52:67:9a:df:95:62:dc:70:66:2d:15:56:b3:
f6:f7:68:62:f1:4a:c5:a2:90:b4:90:e1:55:9f:f0:
75:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AA:5B:D2:7B:6D:28:FF:7B:10:9D:A2:C5:C8:7D:06:08:6B:39:A8
X509v3 Authority Key Identifier:
keyid:1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c4:da:4a:df:64:f0:96:86:3b:f7:f6:ab:ed:3e:5a:b8:9c:
c4:2b:be:35:b0:64:f1:55:72:c3:ef:ca:a9:ea:b6:13:74:3a:
6c:cb:da:95:b8:f0:28:53:a6:c4:26:e1:ea:ab:4a:08:2e:51:
4d:ef:2e:43:53:da:2c:61:72:3b:7c:7e:ef:92:3d:0d:e8:ae:
0f:31:96:57:73:27:86:30:5a:29:bc:8c:60:60:26:cc:23:1a:
03:e6:84:f2:4b:60:a4:9d:b7:26:79:aa:c6:c1:35:75:01:2d:
a3:e2:2d:47:ae:6c:00:94:0d:a7:06:56:14:fd:b1:c8:2a:64:
3f:0a:c1:49:a8:4e:2d:99:19:1e:d7:65:bf:6e:4e:73:d2:e1:
29:ab:91:1d:e2:9a:3c:36:df:bd:86:4c:04:94:07:c5:fc:b8:
76:7b:17:46:e9:5e:26:69:d0:25:5b:7b:a2:79:eb:31:55:ba:
02:db:e0:0f:dd:d5:75:bb:6e:e4:c6:b0:df:f0:d4:35:37:b3:
2a:8c:7b:10:c9:56:04:4c:8b:18:a2:4b:21:14:d1:00:ca:b2:
d2:26:ab:b7:25:c1:05:7c:e4:7b:4a:c0:2d:83:cb:90:5e:48:
f4:d7:d2:9a:b7:b6:fa:4f:18:e0:d4:82:b6:5a:3b:bb:d6:8f:
55:6c:95:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:58 2026 by rpki-client