Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
File: HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft (raw, json)
Hash identifier: +3/9QgCXyE0P0sa/EtwEKnX/ywp0zGVpbwhgQrcglW8=
Subject key identifier: 06:72:92:70:A7:12:01:89:F7:80:36:D3:22:92:36:94:94:E7:07:55
Authority key identifier: 1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93
Certificate issuer: /CN=1eaa87c6f8e320c93da9162250dac558c871dc93
Certificate serial: 019CAB3494EDF2B8AEB3278927E3F4C9137B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 21:01:15 +0000
Manifest this update: Sun 01 Mar 2026 21:01:15 +0000
Manifest next update: Mon 02 Mar 2026 21:01:15 +0000
Files and hashes: 1: HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl (hash: e9/xkZsGHBIp5GcXFBwHwMUZ3ZuUN/LpoDYn24u+yF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:94:ed:f2:b8:ae:b3:27:89:27:e3:f4:c9:13:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaa87c6f8e320c93da9162250dac558c871dc93
Validity
Not Before: Mar 1 21:01:15 2026 GMT
Not After : Mar 2 21:01:15 2026 GMT
Subject: CN=06729270a7120189f78036d32292369494e70755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:03:99:b3:9c:95:0e:82:18:6a:1f:14:fd:1b:
47:49:cd:8b:23:66:68:66:34:37:de:5d:11:c8:40:
c1:80:5c:93:c0:eb:14:53:68:9f:73:80:07:2b:24:
96:f1:21:de:ab:ee:ff:23:f5:61:37:bb:1c:ac:b7:
a6:cc:fe:30:36:e2:69:c2:1d:8b:8a:74:29:fc:f7:
2a:cd:55:76:f1:df:d1:1c:2b:59:a1:2d:87:e5:d6:
04:ec:f7:f3:45:87:bf:8c:79:97:d0:7a:3d:b8:1f:
b4:6d:5b:f6:f8:45:91:60:4a:9d:d9:cb:3f:c1:c3:
94:d7:b7:be:ec:03:20:e9:b1:dd:31:92:81:2d:8c:
6d:1b:43:76:1f:bd:8e:76:2c:36:cd:e3:f6:18:60:
e8:86:15:66:77:05:8e:e4:eb:74:ad:07:eb:90:25:
ed:bd:d8:2a:79:c2:77:34:2b:6e:41:62:8f:32:4f:
9b:39:e9:e8:ca:89:fb:fc:99:2f:7b:f4:1a:b3:5c:
c0:3c:fa:4f:93:2f:aa:09:2f:5c:74:fb:f5:bf:a0:
78:5c:1a:6e:f1:96:d3:f6:fc:a8:0a:7a:50:1d:f9:
21:d4:8c:a3:db:03:94:c6:a9:c0:64:17:2f:08:e1:
cd:b1:31:26:a8:b1:81:24:81:fa:73:62:00:38:75:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:72:92:70:A7:12:01:89:F7:80:36:D3:22:92:36:94:94:E7:07:55
X509v3 Authority Key Identifier:
keyid:1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fa:39:4d:ff:b2:5d:3a:3c:66:b0:9a:76:b6:d3:dc:de:7b:
99:a2:92:05:d7:10:ae:ce:dc:86:e5:8e:1c:3f:a1:f4:52:ce:
6d:e6:78:72:4b:0e:0d:9c:46:96:a3:a8:6b:54:94:77:04:ef:
ec:e1:8a:5f:2b:38:48:2c:76:7b:9f:7f:51:c4:98:2c:44:96:
97:8d:b1:5b:bd:a5:30:cb:2d:03:9f:f8:be:85:09:90:bb:7d:
34:68:ab:87:94:9e:74:ae:10:40:31:51:f9:0d:02:04:6e:73:
d0:8f:0c:9e:e9:b0:32:3a:3b:ec:eb:0b:34:1c:f5:9c:e1:7a:
a0:5f:25:94:84:25:16:af:5a:b7:9b:51:77:3b:3c:37:e6:1d:
ae:02:31:f9:4d:34:17:ee:f3:20:49:63:c8:8e:72:cb:9a:08:
da:7b:16:5f:b2:a5:52:02:e2:0a:a7:d7:ed:f9:b9:6f:5b:d5:
f6:c9:4e:5c:b7:7d:ef:c8:35:20:8d:d4:51:14:50:46:c2:1f:
ac:5a:98:9f:c0:62:34:08:dd:d0:fe:c4:45:9f:60:f9:29:7a:
da:f3:7d:70:ab:fa:7d:64:79:64:44:74:47:11:c8:08:03:02:
d1:4d:3f:bb:fa:f7:19:82:1b:aa:ea:f3:8f:d1:f3:7b:64:1b:
cc:78:aa:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:51 2026 by rpki-client