Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
File: HCQvLpRcanLuKPjIDoDUiEM-N6M.mft (raw, json)
Hash identifier: VAr5075Ksb5OkB4k5ACcLdof5fRGNlRE8NrXjiVEnGU=
Subject key identifier: 21:9E:53:8E:D7:EC:7B:B6:99:ED:D0:D3:8E:33:40:57:82:5B:94:C4
Authority key identifier: 1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
Certificate issuer: /CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Certificate serial: 019CAA5882A8E16ADFCA088866568B15C2F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
Manifest number: 0B89
Signing time: Sun 01 Mar 2026 17:00:53 +0000
Manifest this update: Sun 01 Mar 2026 17:00:53 +0000
Manifest next update: Mon 02 Mar 2026 17:00:53 +0000
Files and hashes: 1: 4lgY0W_OGeoIOrzJmbXnEdo5-pc.roa (hash: l5wy/qIfUulCmH/VGEZK2Kox3s/Htye0nx0GKzhDkHw=)
2: HCQvLpRcanLuKPjIDoDUiEM-N6M.crl (hash: TPKFLrkrDJ0zqCKEq1i8HlpUL7dnlgo+KXjnvDLrkzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:82:a8:e1:6a:df:ca:08:88:66:56:8b:15:c2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Validity
Not Before: Mar 1 17:00:53 2026 GMT
Not After : Mar 2 17:00:53 2026 GMT
Subject: CN=219e538ed7ec7bb699edd0d38e334057825b94c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1c:a4:12:b4:d6:47:06:2d:c7:72:99:88:15:
2f:71:a8:3e:96:47:15:cf:21:86:2d:6a:2c:39:54:
93:7a:0d:95:31:57:27:d5:3d:09:ca:94:a3:83:0b:
4c:e8:31:44:b2:83:58:a2:9a:3c:0e:fd:9f:ba:f8:
01:7f:2c:9c:cc:d4:d1:b1:7b:00:87:73:7c:fa:23:
6b:34:3a:e3:37:e5:0f:94:c0:36:55:db:30:1b:06:
e2:b5:e4:f9:da:f4:ee:b2:4a:23:6f:3c:a4:22:1b:
81:13:a1:53:dd:f8:b1:66:80:3a:6e:71:37:52:8c:
c9:44:4f:ac:31:f9:05:e3:ab:f6:06:bc:33:b3:4f:
06:35:8e:62:8e:63:61:be:b6:03:93:96:14:7e:09:
f1:45:a4:f9:17:2f:9d:26:c9:04:6b:71:0b:96:6c:
25:0e:31:1b:06:64:22:e0:36:63:6f:3c:8c:f3:e1:
6d:c6:78:42:81:fb:6e:70:77:de:4d:c6:1e:8a:2e:
c0:df:a2:91:a6:44:6d:05:fa:68:6e:b8:ca:5f:4b:
cd:71:e6:0b:b7:ea:eb:4a:21:fd:49:72:9e:8e:30:
f6:21:e7:6f:47:58:d8:0d:f8:c4:09:fb:f6:21:b3:
51:39:e0:4f:20:8e:47:c3:0a:35:37:6c:64:87:41:
4b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9E:53:8E:D7:EC:7B:B6:99:ED:D0:D3:8E:33:40:57:82:5B:94:C4
X509v3 Authority Key Identifier:
keyid:1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4c:59:3f:c9:08:69:9c:f5:dc:ef:78:7c:14:f5:20:fa:36:
a9:23:28:50:97:27:05:f6:88:bf:91:7f:11:74:a7:cd:da:ec:
14:2a:8c:93:fb:2f:24:b8:3c:9b:d7:62:12:71:27:9f:1f:e1:
4b:f7:bd:35:64:7f:04:e7:48:d7:0e:48:06:9f:08:36:ef:33:
8e:68:1a:b6:77:7f:1a:e9:24:d5:05:9c:5d:7f:88:30:f8:01:
f3:7a:64:f2:9e:b1:b4:a9:e7:49:57:25:16:53:40:b8:d7:19:
53:10:2f:c8:25:08:f9:5b:f4:9a:44:ea:0f:ee:cb:5a:bf:47:
c4:d4:a4:bf:fc:46:ad:00:d0:86:bb:bd:70:e0:41:a8:70:59:
4c:87:47:69:f7:f3:8d:cd:e6:b7:55:a9:e8:35:44:10:3d:64:
15:a8:69:6d:df:26:68:4b:00:a3:ca:97:94:14:cd:b0:c0:76:
13:06:f5:b6:d8:56:dd:5c:45:15:3d:13:b0:81:28:11:7d:f6:
18:a5:df:6b:57:62:04:47:2f:2f:3b:5a:d6:45:c1:c8:b1:63:
bf:75:1e:ee:61:28:3f:8b:99:df:87:9e:ad:47:16:e8:20:38:
30:d9:e6:9e:8e:c5:8c:1b:f4:3b:dd:45:d5:92:9a:27:b6:1f:
26:00:fd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:23 2026 by rpki-client