Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
File: HQH03_1vumbN-MN0ybDwR1UnBd0.mft (raw, json)
Hash identifier: WWcV6pHy61aW0IsYZfNi5cQ+36BXFoB3sEubzwrQd2w=
Subject key identifier: 00:9A:DB:B4:1C:3B:DA:D0:BF:34:0F:16:B6:A6:F4:EB:CE:8C:3C:F6
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial: 019D345193A8DCD79D0FAFBE30402CB2C59D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
Manifest number: 18D8
Signing time: Sat 28 Mar 2026 12:00:54 +0000
Manifest this update: Sat 28 Mar 2026 12:00:54 +0000
Manifest next update: Sun 29 Mar 2026 12:00:54 +0000
Files and hashes: 1: HQH03_1vumbN-MN0ybDwR1UnBd0.crl (hash: ZgDHl4jTl/WOWcnU33n4pl7uIhkG2fxUMRat/+B3IlM=)
2: gSeQdDXn3ygO_8pxNsOKtvz--Sw.roa (hash: a6EzKVma5/2ncxKjHy/KGoWOM1fh0VyLYME9lKewGmk=)
3: iX4GSDAKgDO8XApKKPZNl8rlRpM.roa (hash: R6eZBAlVK/N/5iGCZRyVlBAXsKn4rccdhUvB5Vtct50=)
4: jnambI_i1Pq9WfSXzTyJxwNqXTw.roa (hash: AT3Vk6O1Rxzzj5x8tTjuoggjZ3puukVm8amtuMG/2yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:51:93:a8:dc:d7:9d:0f:af:be:30:40:2c:b2:c5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Validity
Not Before: Mar 28 12:00:54 2026 GMT
Not After : Mar 29 12:00:54 2026 GMT
Subject: CN=009adbb41c3bdad0bf340f16b6a6f4ebce8c3cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:58:af:3f:34:e7:9c:8c:05:d0:3b:dd:02:78:
de:03:5f:22:66:14:b6:31:f2:d4:f6:0c:e5:14:27:
3e:cc:ee:fc:e5:f6:cf:51:76:67:02:18:f2:71:97:
67:9b:82:2d:1d:df:78:b8:6c:38:75:66:6c:3f:05:
f8:55:5c:6a:96:4d:92:70:60:e1:fc:5f:03:68:21:
af:d0:1f:56:9c:b7:f9:e3:1b:2d:ef:0c:52:2f:df:
bf:52:e4:ed:d2:62:33:5b:62:d1:d0:af:85:e3:cc:
4e:1f:c6:0d:29:06:7f:fd:cb:34:64:a3:fa:1f:fe:
95:65:29:9e:2f:22:a5:82:4f:82:80:e4:c1:9b:cf:
40:04:c0:b2:8c:27:53:3f:52:34:99:3b:67:df:a7:
29:de:f3:0e:ee:26:7b:3f:6a:0c:2c:01:b9:83:a0:
c5:a0:33:49:c1:35:b0:ee:6c:05:37:1f:1d:68:07:
2c:c7:2d:5a:24:86:9d:d7:c8:c9:4e:6e:f5:a1:53:
fa:a5:41:88:b5:92:80:87:42:02:52:df:66:22:6c:
35:ce:95:de:7b:b9:16:a4:53:d8:ce:a5:2c:2c:a1:
2d:28:dd:11:dc:21:a5:21:ab:3c:c2:a3:e7:ee:15:
dd:23:37:10:d6:67:b3:da:ca:13:f6:4f:1c:25:17:
48:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9A:DB:B4:1C:3B:DA:D0:BF:34:0F:16:B6:A6:F4:EB:CE:8C:3C:F6
X509v3 Authority Key Identifier:
keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:89:67:0a:26:05:90:a4:79:df:5b:7e:e7:64:6b:8e:29:2a:
1c:55:9b:a1:81:88:b9:42:9e:19:1c:01:ba:6e:00:e7:9a:fa:
4a:d9:d2:38:f4:89:05:ac:4c:30:a4:df:be:8e:a6:3b:89:6a:
2d:5c:bd:7f:12:53:8c:e4:6a:d6:c0:17:3a:9d:98:51:c2:62:
f3:00:55:04:2a:4d:1c:45:bc:b2:dd:1b:06:e9:e3:7d:02:6b:
9d:10:63:8a:ef:be:74:52:5a:76:0d:09:de:0d:9d:ad:f7:7d:
25:4f:4c:f0:ca:bb:04:a1:32:60:35:72:ac:79:5e:2d:1b:d2:
a1:a3:bc:d1:f9:af:fb:16:21:cd:20:fa:36:82:66:46:0c:5a:
66:0f:e0:26:60:59:7a:20:3f:d0:0a:03:67:64:6d:84:7a:83:
67:7f:7b:7d:cc:fb:27:65:6d:20:30:05:85:24:73:c0:df:eb:
10:d2:b0:55:6b:05:64:5c:9d:e5:8e:bc:2e:00:d8:62:11:0e:
78:76:81:6d:5d:13:21:cf:fb:20:2d:b7:9f:c6:50:d3:de:d8:
e9:d6:d5:dc:27:4f:84:04:8c:58:ee:e2:7d:8d:af:74:fc:31:
97:4a:39:0c:66:db:68:f9:73:59:ae:d1:11:31:a3:e8:24:80:
ce:48:45:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:13:03 2026 by rpki-client