Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
File: hqSVrmh0HnnVjjiGviqoeMSME7Y.mft (raw, json)
Hash identifier: qziX9GrOSl+oGKyMlZR8y9BnyDwBFAOdX4xxVj+QnJw=
Subject key identifier: 73:38:45:E5:95:01:91:A4:B0:7D:01:39:21:7C:9B:66:6B:7E:7C:C7
Authority key identifier: 86:A4:95:AE:68:74:1E:79:D5:8E:38:86:BE:2A:A8:78:C4:8C:13:B6
Certificate issuer: /CN=86a495ae68741e79d58e3886be2aa878c48c13b6
Certificate serial: 019CAE35B6AE0774CC37C61FE6E9A6DC628B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqSVrmh0HnnVjjiGviqoeMSME7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 11:01:21 +0000
Manifest this update: Mon 02 Mar 2026 11:01:21 +0000
Manifest next update: Tue 03 Mar 2026 11:01:21 +0000
Files and hashes: 1: hqSVrmh0HnnVjjiGviqoeMSME7Y.crl (hash: apJeiyLmtNWNE84ncLXBgV6hQ3EZD5sgykp1grRcDSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqSVrmh0HnnVjjiGviqoeMSME7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:b6:ae:07:74:cc:37:c6:1f:e6:e9:a6:dc:62:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a495ae68741e79d58e3886be2aa878c48c13b6
Validity
Not Before: Mar 2 11:01:21 2026 GMT
Not After : Mar 3 11:01:21 2026 GMT
Subject: CN=733845e5950191a4b07d0139217c9b666b7e7cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:e7:e1:89:8d:0a:a3:40:88:7b:7f:ac:1f:8a:
28:d9:74:6c:81:89:eb:16:1e:ef:7b:5c:ac:27:29:
03:16:bb:a7:13:8e:87:cc:89:0a:63:ce:7b:cb:1e:
ba:46:77:f5:de:7c:72:ad:0c:4d:ec:55:a8:50:d3:
05:15:92:be:88:3b:c6:a5:75:bc:7e:60:c8:87:61:
18:08:2b:52:c2:0c:fc:7c:cc:9d:88:4c:8a:bd:c8:
67:7e:41:81:9e:54:c4:ee:16:ec:50:7d:94:01:87:
80:24:7a:61:36:73:fc:ba:eb:94:5a:59:eb:4b:4f:
4f:f7:62:b8:22:f9:aa:41:d4:75:bb:a7:c0:bc:b3:
a1:cb:b8:01:34:bb:d8:9a:20:1d:fd:ed:de:a1:a9:
1b:37:49:ec:1c:c2:1a:1b:c9:52:af:0c:57:87:73:
60:a0:94:06:e9:5b:82:c9:f1:75:ee:8e:99:87:50:
1b:67:2f:a2:a3:8c:fe:ab:9d:99:f4:c3:50:cd:18:
fa:79:7c:60:15:cb:57:f7:dd:7e:59:ca:77:0a:4c:
11:bf:e0:18:45:27:b0:17:ab:32:65:68:f9:db:66:
8b:59:1b:0c:7c:e8:c6:30:ce:e4:6c:4d:ba:60:87:
1a:34:56:7f:95:6a:0e:b7:af:22:34:a6:2b:ec:5b:
73:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:38:45:E5:95:01:91:A4:B0:7D:01:39:21:7C:9B:66:6B:7E:7C:C7
X509v3 Authority Key Identifier:
keyid:86:A4:95:AE:68:74:1E:79:D5:8E:38:86:BE:2A:A8:78:C4:8C:13:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqSVrmh0HnnVjjiGviqoeMSME7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9d:03:32:cd:cb:97:16:4a:c0:30:ad:2b:4c:70:4c:f4:1a:
fd:b6:10:b1:cd:28:7c:54:18:ed:1a:67:1a:1a:f7:96:05:41:
5d:c7:cd:b4:46:d4:d9:bf:dd:83:8f:21:fa:a7:7e:2d:b6:48:
79:ba:f1:1b:bd:da:21:7c:37:fe:1a:a3:9c:9b:7a:91:80:e7:
2c:76:be:65:44:8d:4e:98:7a:9c:11:b6:ec:af:90:bd:a5:f0:
16:e0:fb:45:b5:20:4e:9a:64:0b:14:38:01:a6:29:44:4d:79:
78:90:af:9a:1b:ef:13:98:59:a0:00:a3:72:93:27:cd:7d:bd:
6e:0e:2a:63:b4:3c:b1:58:ba:9e:bf:ff:44:32:06:d8:9f:df:
8b:61:a1:0b:f0:55:eb:bb:86:3e:54:5f:38:5e:ff:52:97:05:
e7:04:9b:7a:25:5f:73:2e:da:ed:22:ec:c0:dd:dd:34:a5:58:
51:89:31:dd:a9:ab:d7:ad:44:b4:e9:b2:a2:43:ef:84:de:3e:
f3:ba:f1:b3:73:81:bd:b0:98:2c:01:f0:b2:68:0c:b2:64:ec:
4b:a3:40:53:b8:16:b7:e4:76:ea:47:d5:e2:d9:c0:dc:6b:4b:
13:71:41:fc:e9:7f:41:e8:2d:ee:73:94:2c:1e:6f:25:ce:37:
e8:41:b4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:53:28 2026 by rpki-client