Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
File: hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft (raw, json)
Hash identifier: 86ysVLFxwMBBf6ah14bWCGe+bJ5ZzH4dIJ1C+Tag0II=
Subject key identifier: A7:6A:C2:4C:0B:3A:7C:B8:C9:BF:59:43:DD:D6:8C:DA:59:75:5F:04
Authority key identifier: 86:9A:B3:30:46:86:2A:B5:84:05:E5:E9:27:DD:F4:12:72:DF:C7:14
Certificate issuer: /CN=869ab33046862ab58405e5e927ddf41272dfc714
Certificate serial: 019CAC1036F83F21F89B39A8FA3CCCE5BA84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
Manifest number: 0638
Signing time: Mon 02 Mar 2026 01:01:09 +0000
Manifest this update: Mon 02 Mar 2026 01:01:09 +0000
Manifest next update: Tue 03 Mar 2026 01:01:09 +0000
Files and hashes: 1: 1-7HFtUN3vZHJP99F9s_042HCi_o.roa (hash: v3oy8qKtaxYoYTFlbLGcHquGHI0mpb7e1cJJAPr+1KI=)
2: hpqzMEaGKrWEBeXpJ930EnLfxxQ.crl (hash: NcS671JOIhQbDW1mAPBYo7Z9MxZI0oUeiA6zrNTmCMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:36:f8:3f:21:f8:9b:39:a8:fa:3c:cc:e5:ba:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869ab33046862ab58405e5e927ddf41272dfc714
Validity
Not Before: Mar 2 01:01:09 2026 GMT
Not After : Mar 3 01:01:09 2026 GMT
Subject: CN=a76ac24c0b3a7cb8c9bf5943ddd68cda59755f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:af:f7:a5:42:5e:60:45:c4:6b:6a:ab:d9:dd:
20:3e:d2:b4:65:90:4e:c3:bf:91:26:55:7f:da:77:
b8:c5:53:33:c7:a7:40:b2:ae:4c:63:ae:f7:82:4b:
84:2f:7a:93:10:c8:ce:5c:bb:74:ee:6d:8d:5c:61:
28:de:2f:0d:a3:d4:40:c6:d9:cd:a5:6a:db:b2:82:
d3:75:6a:4a:65:c2:82:90:fe:00:16:21:b8:c0:5d:
d0:b3:57:55:d5:68:c8:89:41:3f:3b:de:e8:58:58:
af:be:2c:5b:c8:84:79:0b:2c:92:5e:86:cd:e6:4f:
ba:df:9a:5b:a8:c5:43:f0:f5:43:7b:02:8c:40:87:
5d:a5:4f:84:a3:87:89:f9:38:0d:49:bd:e2:38:cf:
6f:fc:92:b8:bd:63:84:e4:1a:fc:60:9f:a1:44:65:
53:a2:c8:fc:1c:2d:a0:e2:74:f8:f7:ca:4b:46:58:
84:b9:43:df:42:68:64:52:53:c3:a1:d8:d3:3d:3d:
dd:72:9a:52:ac:e6:81:18:94:9a:09:f7:a9:a2:f4:
da:d9:d9:5d:ac:26:af:f1:16:02:f5:32:b5:4f:7f:
aa:62:10:fa:14:49:6e:44:40:d0:c5:c4:7d:49:30:
6d:ef:84:24:4c:af:ce:a5:51:1f:9c:61:bb:1a:4a:
6e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6A:C2:4C:0B:3A:7C:B8:C9:BF:59:43:DD:D6:8C:DA:59:75:5F:04
X509v3 Authority Key Identifier:
keyid:86:9A:B3:30:46:86:2A:B5:84:05:E5:E9:27:DD:F4:12:72:DF:C7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:06:23:e5:e7:f5:ea:99:56:28:a5:3d:2d:cf:9d:d9:e9:82:
c4:a5:28:bd:0a:31:5a:0a:67:96:f8:0e:98:e0:a0:46:b4:7d:
88:71:30:1f:98:ab:e4:f5:cb:6d:bb:a4:9c:4e:96:be:d3:0f:
7c:32:2d:81:f2:cb:8b:81:fe:db:a5:16:0b:4b:e4:44:49:8f:
bd:cb:83:e3:f3:59:2c:48:56:50:f5:29:b9:a2:b7:6b:64:f3:
45:e8:c8:98:95:8c:f4:a2:f8:f0:b7:3b:bb:8d:e9:46:24:89:
45:5e:b2:8f:36:72:46:5f:6f:de:2f:6c:95:8d:dc:97:91:ab:
3b:35:ec:48:b7:b6:3a:e7:e6:d3:6d:e0:d9:63:02:6c:af:a1:
2c:69:5a:ae:78:23:18:70:ae:9a:d6:56:7b:ad:63:43:72:90:
77:2c:ee:89:03:9e:09:5c:d6:db:2d:1a:18:15:6a:fe:b2:05:
4d:e2:9d:57:0a:36:99:0e:38:ef:5e:33:49:80:70:02:25:44:
a2:ee:a0:a5:a7:21:7d:f0:b5:1e:09:af:e7:c4:ca:9c:2d:ba:
1e:eb:45:66:26:08:f1:9a:85:bf:df:8f:55:84:3d:10:f9:fe:
4b:37:a3:5e:7e:ad:1f:6e:f1:9e:f2:10:97:b0:73:e2:36:13:
ed:64:a8:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEDb4PyH4mzmo+jzM5bqEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OWFiMzMwNDY4NjJhYjU4NDA1ZTVlOTI3ZGRmNDEyNzJk
ZmM3MTQwHhcNMjYwMzAyMDEwMTA5WhcNMjYwMzAzMDEwMTA5WjAzMTEwLwYDVQQD
EyhhNzZhYzI0YzBiM2E3Y2I4YzliZjU5NDNkZGQ2OGNkYTU5NzU1ZjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK/3pUJeYEXEa2qr2d0gPtK0ZZBO
w7+RJlV/2ne4xVMzx6dAsq5MY673gkuEL3qTEMjOXLt07m2NXGEo3i8No9RAxtnN
pWrbsoLTdWpKZcKCkP4AFiG4wF3Qs1dV1WjIiUE/O97oWFivvixbyIR5CyySXobN
5k+635pbqMVD8PVDewKMQIddpU+Eo4eJ+TgNSb3iOM9v/JK4vWOE5Br8YJ+hRGVT
osj8HC2g4nT498pLRliEuUPfQmhkUlPDodjTPT3dcppSrOaBGJSaCfepovTa2dld
rCav8RYC9TK1T3+qYhD6FEluREDQxcR9STBt74QkTK/OpVEfnGG7GkpuZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdqwkwLOny4yb9ZQ93WjNpZdV8EMB8GA1UdIwQY
MBaAFIaaszBGhiq1hAXl6Sfd9BJy38cUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHBxek1FYUdLcldFQmVYcEo5MzBFbkxmeHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mOGU4ZTUtNjkyYi00MGE5LWIzMmYt
Mzk0YzQ3ZmY0NWFlLzEvaHBxek1FYUdLcldFQmVYcEo5MzBFbkxmeHhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9mOGU4ZTUtNjkyYi00MGE5LWIzMmYtMzk0YzQ3ZmY0NWFl
LzEvaHBxek1FYUdLcldFQmVYcEo5MzBFbkxmeHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAYj5ef1
6plWKKU9Lc+d2emCxKUovQoxWgpnlvgOmOCgRrR9iHEwH5ir5PXLbbuknE6WvtMP
fDItgfLLi4H+26UWC0vkREmPvcuD4/NZLEhWUPUpuaK3a2TzRejImJWM9KL48Lc7
u43pRiSJRV6yjzZyRl9v3i9slY3cl5GrOzXsSLe2Oufm023g2WMCbK+hLGlarngj
GHCumtZWe61jQ3KQdyzuiQOeCVzW2y0aGBVq/rIFTeKdVwo2mQ44714zSYBwAiVE
ou6gpachffC1Hgmv58TKnC26HutFZiYI8ZqFv9+PVYQ9EPn+SzejXn6tH27xnvIQ
l7Bz4jYT7WSoUA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:58 2026 by rpki-client