Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft (raw, json)
Hash identifier: gZZeeTNk4yS9rQET+KYh+trzPArQCl4lUEaW5/ZLlno=
Subject key identifier: C2:E3:C2:DC:A6:83:F3:FC:5A:0B:9C:BD:DD:6D:B9:79:DF:D5:9A:25
Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Certificate serial: 019CABA1E4851E6D890EE2CBBEBB0F8B3F43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 23:00:39 +0000
Manifest this update: Sun 01 Mar 2026 23:00:39 +0000
Manifest next update: Mon 02 Mar 2026 23:00:39 +0000
Files and hashes: 1: hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl (hash: Ng4j/k2nSyA6OAIzqPJzROFzjxaYOLHJ8XK/IHDzUp8=)
2: vFI_szTdwGut2KUofHDh3zwoi1k.roa (hash: MxrZSZTPx1kjzcHF3plautdDk7QOfOy+oz7wimPfgjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:e4:85:1e:6d:89:0e:e2:cb:be:bb:0f:8b:3f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Validity
Not Before: Mar 1 23:00:39 2026 GMT
Not After : Mar 2 23:00:39 2026 GMT
Subject: CN=c2e3c2dca683f3fc5a0b9cbddd6db979dfd59a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5e:7d:93:a9:a4:d5:66:92:8b:41:5c:3b:ce:
79:69:41:29:b4:38:79:20:5c:8a:76:38:ef:82:50:
d9:43:1e:db:17:25:ed:8c:14:32:78:5b:c5:5d:4b:
5f:a1:09:c9:af:21:d4:20:ac:8c:9d:be:f2:84:a6:
c6:89:f7:41:a9:16:07:94:cc:10:97:1a:13:21:42:
35:48:b9:6f:fa:c0:8a:ab:35:a2:d5:53:4f:00:3e:
61:29:1e:a2:8e:e8:6c:3a:7a:63:8d:c0:f6:31:7a:
9d:66:35:37:e9:bc:cf:5f:50:1e:7e:e9:9a:cd:28:
8e:ed:70:65:97:aa:bc:17:06:f6:77:b9:37:40:bc:
e1:29:41:7f:19:29:8d:5e:4c:78:8b:7a:0a:b0:1b:
51:c4:da:ba:fd:f4:36:b3:03:7e:a6:20:96:bc:ab:
ff:7f:a6:aa:fc:06:a5:8a:20:73:07:9c:db:59:ca:
84:42:6e:b1:2f:1c:2d:39:f8:d9:fd:38:97:10:8b:
77:67:72:a6:ed:d7:dd:24:bd:a4:19:7b:f7:6d:28:
5e:3b:94:4f:56:9b:88:67:01:4f:f7:41:11:6d:c3:
22:82:bb:56:f5:de:b8:6a:9c:23:ff:9f:3d:9b:75:
a4:a4:f6:16:70:28:2a:66:2f:fe:ab:39:96:b1:13:
d9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E3:C2:DC:A6:83:F3:FC:5A:0B:9C:BD:DD:6D:B9:79:DF:D5:9A:25
X509v3 Authority Key Identifier:
keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:85:c1:6f:ae:1d:01:81:4a:34:f8:b5:c5:1d:3e:f5:cd:65:
95:c5:00:55:61:23:71:6a:63:4f:ee:47:79:4a:f9:a2:63:84:
93:04:24:b4:6b:40:85:de:1e:7b:27:d6:9a:23:b3:0f:fd:64:
93:c9:93:0a:e7:0d:57:f0:e2:be:81:6a:30:5d:b9:5c:ca:3b:
43:78:cb:bf:2d:7b:83:a8:5f:d5:b5:1e:41:3d:3e:5d:aa:25:
c8:dc:96:07:a6:9b:24:48:99:1b:88:a2:85:f4:f1:af:50:ab:
81:fa:2d:d1:42:17:b0:fa:a3:ae:e0:c6:90:e8:84:ff:8a:e9:
e3:cf:3d:d5:8f:35:d7:1c:03:60:27:46:70:c8:1b:80:23:bd:
ec:93:d7:5b:9e:cb:d5:31:eb:24:23:c0:df:f7:75:eb:5d:51:
ca:6f:90:17:77:ff:4c:5f:29:79:13:41:97:2d:e4:00:ab:3e:
32:58:2b:6e:37:09:df:00:09:7b:5c:45:cd:06:6a:ea:bb:fa:
46:cd:05:3d:22:76:03:28:bd:64:35:ce:ae:43:9a:82:67:90:
dc:8f:02:8a:12:7a:a9:88:b2:a2:55:b4:41:1e:ae:3c:39:94:
d7:b7:04:56:1f:3e:0c:c7:3c:83:bb:82:15:dd:fa:41:3c:0c:
74:06:a3:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroeSFHm2JDuLLvrsPiz9DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MDRlYmY5ZGIxNzEwYTQ3YmFlNDUwOGNkYWY4MTMxZTE2
NzRhNTQwHhcNMjYwMzAxMjMwMDM5WhcNMjYwMzAyMjMwMDM5WjAzMTEwLwYDVQQD
EyhjMmUzYzJkY2E2ODNmM2ZjNWEwYjljYmRkZDZkYjk3OWRmZDU5YTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0159k6mk1WaSi0FcO855aUEptDh5
IFyKdjjvglDZQx7bFyXtjBQyeFvFXUtfoQnJryHUIKyMnb7yhKbGifdBqRYHlMwQ
lxoTIUI1SLlv+sCKqzWi1VNPAD5hKR6ijuhsOnpjjcD2MXqdZjU36bzPX1Aefuma
zSiO7XBll6q8Fwb2d7k3QLzhKUF/GSmNXkx4i3oKsBtRxNq6/fQ2swN+piCWvKv/
f6aq/AaliiBzB5zbWcqEQm6xLxwtOfjZ/TiXEIt3Z3Km7dfdJL2kGXv3bSheO5RP
VpuIZwFP90ERbcMigrtW9d64apwj/589m3WkpPYWcCgqZi/+qzmWsRPZKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLjwtymg/P8Wgucvd1tuXnf1ZolMB8GA1UdIwQY
MBaAFIUE6/nbFxCke65FCM2vgTHhZ0pUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83ZWZlMDEtZWM3NC00MGFjLWEyMzgt
YTliMWRmNDRjZTJmLzEvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi83ZWZlMDEtZWM3NC00MGFjLWEyMzgtYTliMWRmNDRjZTJm
LzEvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALIXBb64d
AYFKNPi1xR0+9c1llcUAVWEjcWpjT+5HeUr5omOEkwQktGtAhd4eeyfWmiOzD/1k
k8mTCucNV/DivoFqMF25XMo7Q3jLvy17g6hf1bUeQT0+XaolyNyWB6abJEiZG4ii
hfTxr1Crgfot0UIXsPqjruDGkOiE/4rp48891Y811xwDYCdGcMgbgCO97JPXW57L
1THrJCPA3/d1611Rym+QF3f/TF8peRNBly3kAKs+MlgrbjcJ3wAJe1xFzQZq6rv6
Rs0FPSJ2Ayi9ZDXOrkOagmeQ3I8CihJ6qYiyolW0QR6uPDmU17cEVh8+DMc8g7uC
Fd36QTwMdAajvg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:26 2026 by rpki-client