Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
File: HISp5A-Qddjq_PaKAkhPUpJAlWo.mft (raw, json)
Hash identifier: 0PFhBxqnl4Fk76RgcLcDzkrlx96HC8USK3PjMpMR/WA=
Subject key identifier: 7A:D1:D2:73:19:38:B6:23:AE:EC:5E:72:E7:E2:50:78:A5:97:7A:D0
Authority key identifier: 1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
Certificate issuer: /CN=1c84a9e40f9075d8eafcf68a02484f529240956a
Certificate serial: 019D389BA9A788F402247483069A525F77B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
Manifest number: 13AF
Signing time: Sun 29 Mar 2026 08:00:18 +0000
Manifest this update: Sun 29 Mar 2026 08:00:18 +0000
Manifest next update: Mon 30 Mar 2026 08:00:18 +0000
Files and hashes: 1: HISp5A-Qddjq_PaKAkhPUpJAlWo.crl (hash: 5iOrW1dh8UQE12G3JPrYwaBLtVSKoWmiEsuPFsQLSB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:a9:a7:88:f4:02:24:74:83:06:9a:52:5f:77:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c84a9e40f9075d8eafcf68a02484f529240956a
Validity
Not Before: Mar 29 08:00:18 2026 GMT
Not After : Mar 30 08:00:18 2026 GMT
Subject: CN=7ad1d2731938b623aeec5e72e7e25078a5977ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:2e:b1:61:15:3f:04:fb:5e:62:e7:ef:36:
5d:2d:17:ad:6c:ec:be:aa:99:0d:07:32:57:94:2b:
45:8b:cd:27:f8:7b:6b:3c:a1:70:bc:22:cd:e5:67:
db:08:6d:1f:ff:c0:1c:5b:2d:1a:e7:bc:2d:2a:19:
20:66:0a:6a:bd:01:d1:38:34:f2:1f:99:08:da:9d:
d8:57:f5:f4:32:9c:8d:81:eb:e0:f4:11:16:e0:cc:
17:dc:9b:f3:ec:9b:0e:2f:85:bb:83:d8:ed:a8:c0:
ed:9f:c4:fe:72:fe:83:5a:09:9c:86:4c:f3:dd:44:
98:40:46:5b:b9:ec:38:62:6b:a0:c1:0d:be:42:5d:
5a:e8:1f:57:7e:d5:8a:b4:d7:18:53:01:1a:9c:96:
eb:5d:8e:67:68:ca:0b:8f:22:23:1f:6e:28:95:23:
db:e8:38:27:32:2d:a0:73:79:99:65:ed:2c:2e:64:
d9:b9:f2:fc:d9:93:c0:14:e4:1f:31:bf:bf:77:e6:
62:d8:72:46:eb:66:f0:dd:64:78:2f:ce:b8:3c:fb:
af:6a:5f:9b:9c:54:3a:6c:80:f6:bc:c7:3d:07:ee:
7d:00:f3:65:5a:39:5c:22:f5:3c:24:32:a8:25:0f:
35:a3:32:a7:b6:4d:64:fe:ca:87:15:2a:02:03:ab:
f3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D1:D2:73:19:38:B6:23:AE:EC:5E:72:E7:E2:50:78:A5:97:7A:D0
X509v3 Authority Key Identifier:
keyid:1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:43:df:58:b3:9a:41:eb:b4:78:df:40:88:63:f8:b8:33:77:
e3:fa:4f:dd:ae:ca:31:26:39:c2:3e:81:3e:62:da:d9:ca:55:
ae:03:a2:50:ed:cd:12:5a:9a:27:59:20:eb:a1:23:4a:9f:f6:
f7:12:23:7a:aa:d7:4b:e2:65:bb:46:3e:58:de:a4:8f:5d:12:
04:36:5b:6d:17:c1:be:e4:0c:1e:9f:15:c7:68:ea:28:87:94:
7b:1b:42:fb:a8:3e:21:5b:bf:ec:f9:fa:56:48:6e:e0:df:ca:
4e:fb:64:72:a3:41:8c:2c:af:e6:03:0d:24:17:73:dd:69:c5:
cc:dc:ed:4f:dc:c6:3f:d1:17:42:bf:4f:b0:81:7c:b3:85:1d:
b1:d7:f6:8a:00:77:1c:a6:db:06:e4:34:59:5d:9e:fc:17:dc:
e6:63:6f:1d:20:4f:aa:05:2b:6f:d6:da:4c:2d:ac:3d:74:c4:
3e:34:51:87:86:5c:7e:98:33:35:d8:fc:56:e5:11:65:6b:7a:
67:20:4c:92:17:92:ea:59:c0:16:b7:be:4c:4d:0e:d8:ea:ac:
ca:6a:38:65:b6:d1:54:f5:85:6c:00:71:b9:29:a9:1d:e0:95:
3b:3c:0d:ed:fe:fa:57:ec:e5:df:23:54:8d:8b:d4:f9:a1:f4:
c2:5b:46:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:59 2026 by rpki-client