Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
File: HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft (raw, json)
Hash identifier: vT8pW4fRIB7PCL/xPM0N/m8uhQPQAEWsXdTVRIL/n9g=
Subject key identifier: 5C:ED:37:3C:38:7F:8C:92:3B:67:F2:D9:0A:25:1C:27:76:92:39:01
Authority key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
Certificate issuer: /CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Certificate serial: 019FADF72F3C72F56BD2C82B24E45AF3BC9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
Manifest number: 0869
Signing time: Wed 29 Jul 2026 13:01:25 +0000
Manifest this update: Wed 29 Jul 2026 13:01:25 +0000
Manifest next update: Thu 30 Jul 2026 13:01:25 +0000
Files and hashes: 1: HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl (hash: t6E+R3gFZ+tgvWNQXa4mFYFF1/aPgZRvbV1gZ774EC0=)
2: m8GmWxaGzhbyfzeA3jXtYZtS49c.roa (hash: ufyYBYKdtvNPQKTZ7RHmH34YskTQ9OHfZWJp++dRaZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:f7:2f:3c:72:f5:6b:d2:c8:2b:24:e4:5a:f3:bc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Validity
Not Before: Jul 29 13:01:25 2026 GMT
Not After : Jul 30 13:01:25 2026 GMT
Subject: CN=5ced373c387f8c923b67f2d90a251c2776923901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:e3:6f:5c:76:f3:8e:be:bd:31:92:a6:ff:
a3:6d:bf:ff:4b:5a:75:17:6e:2e:04:f3:29:77:7a:
e9:cc:6e:1c:76:13:35:a9:37:4c:11:5d:79:fb:03:
be:d2:01:34:42:aa:87:28:80:d2:36:ee:a1:15:03:
5d:b4:4d:e0:10:1a:19:18:61:d9:e0:65:a4:94:8a:
6b:25:51:e7:1e:c4:5a:43:2b:7e:6c:97:58:1c:a7:
b0:db:ad:06:3b:e7:57:7b:13:20:fc:e0:ff:a1:81:
ba:58:be:6a:4c:2a:09:15:91:bb:22:77:15:98:53:
eb:c6:d4:cb:06:72:26:32:eb:13:6f:bb:7b:4c:3b:
a5:dd:27:d5:8b:db:d6:87:3b:77:9d:af:95:81:4e:
f0:46:57:62:70:a1:17:28:58:ae:f1:f9:18:01:66:
a8:5d:b4:41:5e:5b:e7:2b:55:0b:57:06:52:f5:87:
9f:1a:a6:25:c4:93:23:53:f3:60:3f:15:73:30:86:
e9:27:c0:e2:00:3c:e4:fe:47:aa:94:65:67:fa:49:
46:27:25:d4:4f:8d:0d:66:81:a0:96:6a:e7:00:8f:
a6:ed:83:0c:51:6f:b8:b7:92:1e:99:54:a4:06:51:
87:8b:94:3c:ae:12:bd:ef:01:a9:cc:e0:8c:1b:91:
cf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:ED:37:3C:38:7F:8C:92:3B:67:F2:D9:0A:25:1C:27:76:92:39:01
X509v3 Authority Key Identifier:
keyid:1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ae:b7:01:de:81:9b:61:6b:32:98:b3:90:c8:df:35:61:33:
da:20:88:be:92:c1:4b:81:3e:85:2e:b0:01:7c:0d:20:75:ba:
ab:2b:3c:41:7a:d2:cb:f1:25:03:93:4b:45:23:44:44:c1:55:
26:36:73:d6:c0:cc:a3:82:98:65:f8:35:d9:ad:cd:e8:17:eb:
ce:8f:e8:37:97:03:0f:74:03:50:ed:34:76:63:8e:b9:c3:e4:
70:cc:d9:c2:dd:d9:db:8d:d5:20:94:37:b1:21:5d:66:b5:14:
d1:56:7d:be:96:a0:37:30:10:2c:6e:a2:0c:54:61:c3:a8:1b:
a5:42:1a:f8:fb:b6:c7:82:e8:81:47:f2:03:d7:aa:e3:63:07:
ea:df:39:83:81:21:b0:10:98:a7:57:ec:f3:85:ef:83:e2:ef:
3b:6d:8f:5f:52:ff:36:df:78:49:b4:7f:fa:c7:f8:dc:cd:35:
f4:2a:8a:74:db:d0:a2:dc:61:49:3e:ae:57:2c:57:bf:93:da:
57:5b:34:60:84:e3:fa:1a:fc:f0:9f:a9:74:67:83:40:e5:a8:
69:ec:5e:8c:42:b4:f2:37:17:a0:aa:4f:9f:ac:f6:39:a9:4e:
e0:56:1a:2d:c2:7b:22:dd:7e:e1:1e:60:fc:ec:7c:62:b5:41:
21:cf:93:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:16:50 2026 by rpki-client