Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
File: Hqemr7IbsUh0L2FV0aOa_I_H55w.mft (raw, json)
Hash identifier: sq/dxtm7L5Gx7z6RnuIYbipILPb8iUIIUlyNVEo7rOk=
Subject key identifier: 8C:0F:11:44:17:7F:6C:40:0F:D2:B8:1B:B9:20:D8:95:09:BD:80:53
Authority key identifier: 1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
Certificate issuer: /CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Certificate serial: 019CAD2297C1314700EB5F9524EAE125B4B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
Manifest number: 118B
Signing time: Mon 02 Mar 2026 06:00:51 +0000
Manifest this update: Mon 02 Mar 2026 06:00:51 +0000
Manifest next update: Tue 03 Mar 2026 06:00:51 +0000
Files and hashes: 1: Hqemr7IbsUh0L2FV0aOa_I_H55w.crl (hash: edh2dC1sv57C1xkecQzv2ZS0Tj9Z5fxOpfDx6mH2ZgI=)
2: fSE8Q3BHF-37hTlX0eyFzGv4iBc.roa (hash: pVD8HGH2rJXCl52itQj8YwGZtz7maygncTTWGAdWmOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:97:c1:31:47:00:eb:5f:95:24:ea:e1:25:b4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Validity
Not Before: Mar 2 06:00:51 2026 GMT
Not After : Mar 3 06:00:51 2026 GMT
Subject: CN=8c0f1144177f6c400fd2b81bb920d89509bd8053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bc:1d:89:cc:30:ad:cf:fb:b4:bd:15:10:d8:
86:3e:e2:7b:fe:fc:48:83:45:b4:c1:0b:79:8c:d3:
4b:c4:a8:7a:d8:e6:27:f0:8d:43:67:87:57:1a:a9:
6a:28:31:dc:f2:26:3a:18:7e:49:52:c6:c0:28:ec:
55:24:0b:ff:1d:23:95:81:a3:59:a4:67:27:5a:60:
da:81:fe:3e:5d:22:d5:91:c9:f0:47:e0:19:f7:8c:
96:59:4b:7d:55:af:ce:dc:0e:5a:28:95:00:4a:a6:
21:27:be:db:d8:02:cf:32:28:c9:77:b6:50:72:0c:
7b:99:70:f1:a9:3e:0d:09:66:19:c7:8e:08:f3:b4:
c4:ee:63:48:dc:c2:0d:db:e4:b7:22:06:0a:c5:ec:
0c:da:f7:6f:5e:c9:5c:3e:f9:ef:78:d4:69:36:a7:
88:3d:79:b2:f2:9c:f8:c5:8d:f3:ed:01:76:96:3e:
3e:32:63:0e:53:4e:69:ba:8f:a5:7f:fb:87:15:2e:
35:41:54:94:39:e3:1d:bf:2a:51:de:dd:56:17:96:
5b:fa:b9:69:4c:08:c2:52:d9:43:b5:bb:96:24:22:
ce:a6:9c:3d:63:60:92:95:dc:75:0a:d4:56:ab:00:
a1:92:68:48:38:38:40:47:e1:01:44:cb:fc:73:53:
70:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0F:11:44:17:7F:6C:40:0F:D2:B8:1B:B9:20:D8:95:09:BD:80:53
X509v3 Authority Key Identifier:
keyid:1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c0:88:14:28:48:e5:16:84:26:55:c5:b2:b4:96:11:27:40:
91:a5:88:7e:77:71:e0:50:3f:7d:c9:cb:d8:a7:b7:ab:f5:ae:
ab:e2:5f:16:19:f9:ac:4a:9a:d9:87:33:31:ad:90:53:01:4d:
86:0f:42:d1:3d:da:21:a2:20:62:01:64:c4:f0:a1:01:5f:4f:
55:2b:78:15:dc:2f:bc:e9:de:8b:70:df:cb:bc:5d:ba:ce:8c:
85:f4:38:c9:01:b8:07:02:dd:c8:b9:d2:74:59:e0:fe:a2:6f:
ae:22:74:55:84:c6:1d:09:a5:30:39:20:91:74:f7:c6:7a:6f:
3e:e6:b1:92:32:c3:23:7e:cd:48:63:78:cc:b3:cb:a9:64:8f:
18:e6:da:b8:1f:ca:98:06:73:fa:fb:dd:14:1a:e3:5d:92:6f:
0e:6b:71:e1:88:08:5c:fd:cf:f6:09:cc:92:9b:91:d4:3d:ab:
ba:db:78:5e:af:f6:3b:62:43:72:fd:98:8b:63:d6:68:5f:1e:
5a:f0:8c:bb:a7:c2:36:e0:49:c2:66:b3:4b:40:66:41:ff:18:
84:15:cd:b3:57:41:05:8c:09:d7:10:ba:0c:5e:75:a0:0c:a5:
d0:8b:6b:05:d6:02:e3:be:38:30:00:f4:a2:98:b6:6b:9b:4b:
d5:a7:32:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:52:36 2026 by rpki-client