Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
File: HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft (raw, json)
Hash identifier: HhbqMIoNCT2x4q8+f6QnqvSl6bUmr2LdU4vvt2zUoBk=
Subject key identifier: 64:97:EF:E2:4B:2C:4E:EB:99:4C:D7:58:8A:8C:16:1A:93:8F:17:61
Authority key identifier: 1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
Certificate issuer: /CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Certificate serial: 019CAD227F2BABEE89140B91F600905CBC1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 06:00:44 +0000
Manifest this update: Mon 02 Mar 2026 06:00:44 +0000
Manifest next update: Tue 03 Mar 2026 06:00:44 +0000
Files and hashes: 1: HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl (hash: i+GUmotgOLNGjRPUJPJKLEvYo62EHL1/gp8ZLWWShoo=)
2: oIEkw3PCXr1UYdRnKr9q4Q6XWcs.roa (hash: v1OkVWqraYOFjsEZ3LFnKjFEiGungWJLb2B2UAHBg6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:7f:2b:ab:ee:89:14:0b:91:f6:00:90:5c:bc:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Validity
Not Before: Mar 2 06:00:44 2026 GMT
Not After : Mar 3 06:00:44 2026 GMT
Subject: CN=6497efe24b2c4eeb994cd7588a8c161a938f1761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:ca:63:86:ba:33:23:59:3f:ee:e2:95:b2:
dc:a0:2d:e0:7b:0e:78:88:6e:a4:ea:83:d7:d0:5e:
04:c2:07:96:0e:6a:b6:ea:cc:2a:0c:02:b2:8e:f9:
25:90:c3:8e:82:c3:e5:49:61:be:f0:8f:cf:72:ce:
2d:95:64:01:bc:89:34:37:f2:54:2a:c3:3a:dd:85:
a5:f9:c1:88:5e:54:79:cd:9a:12:b9:ce:c0:68:d5:
dd:55:c4:34:2c:d9:4c:b0:0e:d9:63:0d:10:65:eb:
f0:5e:a2:1f:9f:7d:95:3c:41:2d:ea:a2:5e:e1:e6:
aa:b6:93:0d:00:c5:be:a7:c7:42:67:df:a9:92:ca:
70:6a:8e:9d:fd:d1:9b:34:b3:a3:ea:c6:51:a5:05:
e7:2c:70:0c:24:f5:d8:85:8d:bc:b3:96:d2:48:04:
e2:33:33:6d:c5:0a:c8:ca:ab:5c:24:df:f3:44:c4:
1b:61:67:b4:15:7e:b3:ae:82:88:91:84:a7:1a:4f:
71:7f:37:65:12:aa:31:7e:9e:6f:44:00:b7:9b:29:
ba:30:24:1f:1c:26:38:f7:b4:39:b6:e6:e8:63:97:
50:25:fa:1b:ba:84:5e:1c:05:40:55:39:81:ba:f4:
ef:4b:ed:b5:0d:2b:07:cb:0b:c9:4c:eb:cf:4e:17:
b3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:97:EF:E2:4B:2C:4E:EB:99:4C:D7:58:8A:8C:16:1A:93:8F:17:61
X509v3 Authority Key Identifier:
keyid:1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:8d:7e:be:a0:1c:8d:2e:9b:80:39:90:b3:97:25:ad:af:00:
1b:c2:79:dc:78:89:83:31:87:15:84:d7:4d:e1:66:95:78:db:
38:b8:98:be:e4:f4:ef:18:59:7c:df:71:80:72:3e:22:8a:ad:
3c:fd:56:31:35:24:20:44:08:00:e9:e8:84:da:e3:97:21:39:
f5:ba:3f:e2:e4:d9:27:10:6f:02:6b:e7:b6:e6:f0:cc:ff:98:
45:a1:15:b3:9d:33:59:97:f6:d1:a2:77:18:d7:54:10:ec:4b:
12:f9:96:4a:d7:46:6c:66:94:25:7a:c8:d7:e3:e1:24:e0:37:
bb:1f:f8:15:48:53:30:1b:4c:39:a2:08:df:52:2a:74:44:29:
5f:ae:14:24:62:23:4d:eb:3b:d7:1f:70:c2:fc:07:d9:9a:25:
91:e9:6a:f1:4d:7c:e4:dc:26:61:37:07:41:72:26:a0:08:cb:
3b:0c:b1:76:9c:b6:4d:ba:4a:e7:16:8f:ac:e3:c5:36:20:ba:
3d:65:49:df:62:b8:01:fb:08:dd:bb:df:72:45:b3:d8:e8:2c:
2a:79:41:93:9d:86:d5:30:c7:fe:7e:21:eb:94:28:72:d3:d6:
0b:67:59:f5:3a:8c:d6:44:f2:05:dd:75:a7:69:4e:5a:42:54:
4b:f0:b1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:35 2026 by rpki-client