Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
File: hqnzrkX3AVCvF-uHiel4iQKe5dM.mft (raw, json)
Hash identifier: uEBN+LVxhfPbUEyHXV/lNbXuzbu5Sspuzh3KLZcaeHc=
Subject key identifier: AB:F4:B6:A0:A8:A7:77:7B:86:E3:BE:E8:32:DD:22:4D:01:F1:3A:76
Authority key identifier: 86:A9:F3:AE:45:F7:01:50:AF:17:EB:87:89:E9:78:89:02:9E:E5:D3
Certificate issuer: /CN=86a9f3ae45f70150af17eb8789e97889029ee5d3
Certificate serial: 019CAD59B2360C7C102607D35A818D57AB44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 07:01:02 +0000
Manifest this update: Mon 02 Mar 2026 07:01:02 +0000
Manifest next update: Tue 03 Mar 2026 07:01:02 +0000
Files and hashes: 1: O3Ze20ZxAwVm_hG9bsYyUaAYePQ.roa (hash: TSl1RQes/j1AF84x+h+cAOoSi4izTWDFh+hMOg3IRm4=)
2: hqnzrkX3AVCvF-uHiel4iQKe5dM.crl (hash: HiNNlu0QVIPSfxDhQO3g0LfSoI1FqyM8wJoBUaJEoZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:b2:36:0c:7c:10:26:07:d3:5a:81:8d:57:ab:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a9f3ae45f70150af17eb8789e97889029ee5d3
Validity
Not Before: Mar 2 07:01:02 2026 GMT
Not After : Mar 3 07:01:02 2026 GMT
Subject: CN=abf4b6a0a8a7777b86e3bee832dd224d01f13a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:8b:d9:cc:16:ab:59:0a:db:c3:0d:ff:c9:
fb:42:c8:0d:f4:d1:6e:e3:c4:26:41:15:52:3c:ab:
84:40:81:59:53:4d:0d:fe:78:b5:ff:01:0d:89:78:
0f:ed:c2:d4:25:90:15:9f:2d:16:6d:c6:0c:17:3c:
63:d9:11:33:d9:db:cb:02:ea:96:12:d5:c3:0b:6c:
db:c8:01:d4:22:57:2a:30:d5:99:71:10:56:4c:99:
60:f4:93:52:56:f0:6f:b9:a6:52:56:c2:91:22:5c:
ed:5c:e0:a0:ad:d6:c2:90:e4:06:96:ad:2b:14:0c:
be:3a:2e:42:44:1d:a6:11:b0:37:d1:26:74:3a:8f:
30:db:01:d7:a5:00:4d:63:d3:0f:97:9c:92:f8:ce:
fc:e6:1e:0f:f6:15:3d:cc:3b:73:a3:3c:a4:91:7a:
59:94:40:b5:07:76:a0:a2:52:ca:7e:fc:3d:67:06:
db:51:e5:67:1a:45:4c:41:f0:a5:ce:7a:f4:e7:44:
0b:b0:11:e1:19:51:b0:16:40:db:d4:1a:18:e0:8c:
21:2e:f5:d1:4e:d6:0b:61:73:41:8e:95:93:cc:f6:
54:e6:cb:15:b7:3d:54:ea:01:b3:fd:40:e0:3f:95:
e5:89:18:cf:2f:0c:3e:b5:f1:f9:31:90:39:56:81:
c6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F4:B6:A0:A8:A7:77:7B:86:E3:BE:E8:32:DD:22:4D:01:F1:3A:76
X509v3 Authority Key Identifier:
keyid:86:A9:F3:AE:45:F7:01:50:AF:17:EB:87:89:E9:78:89:02:9E:E5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:72:ca:2e:f7:a4:1d:de:b2:3b:f5:22:05:45:76:19:c6:f3:
b6:52:b4:e6:8e:f9:39:86:c0:34:ab:de:bf:6d:00:a7:fc:4f:
28:09:61:c5:88:49:20:99:16:0d:21:b8:3f:38:6b:3c:52:66:
5b:b5:b0:18:8d:07:cd:b0:f7:3b:84:80:5a:64:f2:35:4e:41:
40:19:88:3a:e3:4b:dc:48:a1:5a:9b:a7:98:52:d8:5b:75:de:
e4:50:79:0d:dc:e3:b5:55:e9:13:8a:0a:ac:0e:91:36:47:58:
53:e4:3a:e7:72:b6:19:4d:6a:22:40:78:c0:5e:71:22:c7:b7:
4d:27:87:aa:5f:5c:e6:24:a5:cb:0e:48:5e:6f:83:73:ee:3e:
99:e1:6d:bb:f2:1f:73:3b:cd:c5:99:96:2e:6a:2e:97:36:a9:
d3:5d:98:28:14:54:cc:73:cf:d5:c4:92:0d:8e:85:35:40:0e:
64:3c:16:40:78:65:ca:b6:9c:d8:12:ae:22:26:08:85:b8:e0:
d9:92:13:03:63:a5:5d:41:51:11:78:e4:67:34:cf:97:07:6b:
29:b5:14:73:cc:a2:c8:ff:64:87:96:09:c5:a2:24:2a:5a:e0:
02:e2:fa:59:e7:e5:f8:a7:7d:78:d7:a3:6e:c6:fb:0e:29:fd:
5d:55:a8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:50:56 2026 by rpki-client