Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
File: HqsBKTydvRqdatyGGCtSDNF2wAc.mft (raw, json)
Hash identifier: Pfc+0lCkRSrETNVZoN9TNjMbHNkAWCkLvsBr9oiCC14=
Subject key identifier: FD:FE:A0:C4:69:B9:BA:34:FC:F9:B8:97:A4:32:16:87:87:3D:B1:2F
Authority key identifier: 1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
Certificate issuer: /CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Certificate serial: 019CA7FD391DC594E29F744DC7B31CD83D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
Manifest number: 15F7
Signing time: Sun 01 Mar 2026 06:01:56 +0000
Manifest this update: Sun 01 Mar 2026 06:01:56 +0000
Manifest next update: Mon 02 Mar 2026 06:01:56 +0000
Files and hashes: 1: FD1D3tD8Wgemy0D_hjVkHNyyffA.asa (hash: dC2+srWHZQSVqWN4gNxQ5m+5yJw+nSPbHERxoSOT3g8=)
2: HqsBKTydvRqdatyGGCtSDNF2wAc.crl (hash: HM/sMOfrfhWmyiETqYxP0aINC3yBoK0X3+VQLYaJXYc=)
3: Ygz8nv_cil4CTr3aZUug7yPj4v8.roa (hash: PHkNGvc8VFiKuUZOzOtLVzJuZVZBuOD5WdBuF+PV+G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fd:39:1d:c5:94:e2:9f:74:4d:c7:b3:1c:d8:3d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Validity
Not Before: Mar 1 06:01:56 2026 GMT
Not After : Mar 2 06:01:56 2026 GMT
Subject: CN=fdfea0c469b9ba34fcf9b897a4321687873db12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9a:37:7b:28:dd:ff:1f:d8:cf:3a:99:83:55:
85:bb:0f:3d:3b:6a:73:f3:f4:1a:3a:ab:d3:d2:e8:
32:eb:d1:2d:36:09:fb:d5:d3:88:59:af:57:dc:3a:
35:88:c5:a5:c6:a9:f5:07:d0:1f:be:d9:ee:37:1c:
ce:0a:82:9f:b8:23:3c:fa:d7:3c:db:21:5b:73:4b:
db:79:de:cd:10:41:29:73:03:25:65:5f:26:5f:db:
b2:10:7d:49:e5:7f:5b:84:98:2d:94:4d:c6:39:3b:
2f:a3:1e:d5:66:41:e2:b1:df:d5:38:23:7a:79:20:
9d:e7:d6:d4:e7:19:cd:ed:e3:1c:45:85:05:60:73:
c2:a4:43:2d:4d:d9:e7:f8:81:53:d0:44:ae:c7:65:
b9:a5:a4:ca:fe:5c:67:b6:56:6a:7e:51:c1:53:83:
2c:2e:31:8e:8a:02:a7:aa:f0:22:06:c8:d0:c7:4f:
b8:00:d4:3a:78:ba:95:9c:71:c7:dc:5e:43:52:b7:
88:85:5c:74:77:4a:1a:49:e1:41:df:5e:a7:ea:a6:
24:36:61:b8:5b:46:69:cd:fa:df:e7:b1:95:ea:79:
46:cb:2b:0e:7e:aa:e2:af:2a:8d:9e:58:29:9a:70:
51:63:d2:a6:ae:75:be:43:d2:5e:53:84:85:50:db:
00:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FE:A0:C4:69:B9:BA:34:FC:F9:B8:97:A4:32:16:87:87:3D:B1:2F
X509v3 Authority Key Identifier:
keyid:1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:85:c9:dd:46:d7:46:91:13:b9:31:3f:01:6c:ee:d5:76:98:
df:27:b9:09:00:b5:49:a3:2a:75:93:ab:1a:ac:91:38:86:47:
5f:bf:6c:7a:32:2e:d6:ce:25:44:f0:06:10:f3:2b:0a:3e:08:
db:8c:9f:3a:f3:dc:aa:be:27:16:7e:32:6f:4a:1e:ab:65:a3:
a1:ad:e3:43:5e:3d:95:4a:15:2a:29:66:1c:22:49:1d:a8:98:
07:4b:36:b7:39:07:37:43:10:e3:d8:e8:09:2b:b0:bd:89:16:
0c:d0:7e:64:c9:7c:1c:9c:cb:ab:18:3b:8b:7a:ef:ff:b8:a7:
b3:48:02:0e:a1:df:26:2f:25:6b:89:a1:64:fd:ec:f1:33:ef:
aa:37:89:4f:5b:4e:ce:6b:fa:0e:02:45:d6:e6:bf:12:87:e3:
a2:a0:cb:53:f7:3c:38:1f:5c:a3:7b:95:f1:25:1c:9f:3a:70:
31:2d:e0:91:0a:00:db:22:4b:3f:01:c9:9b:8f:b3:53:92:87:
a7:e7:3b:1b:cb:3e:d9:06:20:3f:10:fb:03:2d:a0:98:b8:cd:
8f:f7:3f:85:92:8c:33:48:a6:ea:91:72:fc:3c:6f:65:bf:0f:
54:15:38:dd:64:00:fb:13:85:11:b7:ab:2c:33:c0:71:e3:78:
9d:b3:8e:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyn/TkdxZTin3RNx7Mc2D1cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYWIwMTI5M2M5ZGJkMWE5ZDZhZGM4NjE4MmI1MjBjZDE3
NmMwMDcwHhcNMjYwMzAxMDYwMTU2WhcNMjYwMzAyMDYwMTU2WjAzMTEwLwYDVQQD
EyhmZGZlYTBjNDY5YjliYTM0ZmNmOWI4OTdhNDMyMTY4Nzg3M2RiMTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpo3eyjd/x/YzzqZg1WFuw89O2pz
8/QaOqvT0ugy69EtNgn71dOIWa9X3Do1iMWlxqn1B9AfvtnuNxzOCoKfuCM8+tc8
2yFbc0vbed7NEEEpcwMlZV8mX9uyEH1J5X9bhJgtlE3GOTsvox7VZkHisd/VOCN6
eSCd59bU5xnN7eMcRYUFYHPCpEMtTdnn+IFT0ESux2W5paTK/lxntlZqflHBU4Ms
LjGOigKnqvAiBsjQx0+4ANQ6eLqVnHHH3F5DUreIhVx0d0oaSeFB316n6qYkNmG4
W0Zpzfrf57GV6nlGyysOfqriryqNnlgpmnBRY9KmrnW+Q9JeU4SFUNsAlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3+oMRpubo0/Pm4l6QyFoeHPbEvMB8GA1UdIwQY
MBaAFB6rASk8nb0anWrchhgrUgzRdsAHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMDBjMTMtNzkxYS00ZTE1LWJhZjct
ZTAzYWM1ODlhMDNmLzEvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9jMDBjMTMtNzkxYS00ZTE1LWJhZjctZTAzYWM1ODlhMDNm
LzEvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIXJ3UbX
RpETuTE/AWzu1XaY3ye5CQC1SaMqdZOrGqyROIZHX79sejIu1s4lRPAGEPMrCj4I
24yfOvPcqr4nFn4yb0oeq2Wjoa3jQ149lUoVKilmHCJJHaiYB0s2tzkHN0MQ49jo
CSuwvYkWDNB+ZMl8HJzLqxg7i3rv/7ins0gCDqHfJi8la4mhZP3s8TPvqjeJT1tO
zmv6DgJF1ua/EofjoqDLU/c8OB9co3uV8SUcnzpwMS3gkQoA2yJLPwHJm4+zU5KH
p+c7G8s+2QYgPxD7Ay2gmLjNj/c/hZKMM0im6pFy/DxvZb8PVBU43WQA+xOFEber
LDPAceN4nbOOWg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:45:32 2026 by rpki-client