Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
File: HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json)
Hash identifier: j+qXAkhtlCqqE4Iu90W8EtRmAQoRYdp7ZzAaAKuOO7w=
Subject key identifier: 5E:37:BB:64:09:D7:6A:93:5D:E5:B0:96:17:36:14:FA:9F:41:AA:CF
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 019CACEB90B1CFA71AC2E6654F2ACD27C7D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
Manifest number: 0F09
Signing time: Mon 02 Mar 2026 05:00:44 +0000
Manifest this update: Mon 02 Mar 2026 05:00:44 +0000
Manifest next update: Tue 03 Mar 2026 05:00:44 +0000
Files and hashes: 1: A_5oAx6RTX4seU-tsf_hsJM1QfM.roa (hash: v9Bgj8QT90sJo8g5+vI6AXOfjQ2Zxqu0x7TfHuAGD6g=)
2: CIwlYwnQgY17UeavMkm13EVL2n8.roa (hash: r4bZKQmC1Ctifqf/+GSiUbszN3swZZeF7mrqnTsUuQ8=)
3: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: y5bntj8lsVEvg5fB+qZ/SCSt60pJNcDeLEGSPvuIG1g=)
4: IzAZsf_Qc2A8pMxdGG-nBxB2gRw.roa (hash: 4TJbYmdeXG/rQN3FAOOPwKLfkTdziJof+SKAImG/iP0=)
5: liurjQr2aFUZ4RN7sB5e2xaGm1M.roa (hash: YNt6MjSDV5Wvd3Oc5pFyN0vEC7cDDHJYrDTH0YBIpGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:90:b1:cf:a7:1a:c2:e6:65:4f:2a:cd:27:c7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Mar 2 05:00:44 2026 GMT
Not After : Mar 3 05:00:44 2026 GMT
Subject: CN=5e37bb6409d76a935de5b096173614fa9f41aacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:23:76:97:79:56:2e:45:59:60:e9:b6:4e:52:
a4:15:d0:bd:9b:ab:63:24:ad:d7:e1:a7:dc:a8:1e:
f0:50:f1:cb:c7:5f:ae:72:99:56:39:d7:df:8a:9d:
42:af:85:83:dd:32:a2:1d:c0:f9:b7:03:a6:0e:9c:
4d:c0:ca:a8:16:09:66:f0:dc:a3:26:78:2a:aa:77:
81:87:33:dd:84:e4:f4:32:38:55:f5:c8:73:8f:5b:
f2:95:f6:a1:1f:09:36:89:21:33:37:8f:0d:cc:27:
29:39:21:ff:68:bf:57:09:61:44:a5:fa:49:72:bd:
5f:a8:85:84:c3:7c:53:3d:bc:19:39:d8:07:ce:36:
5a:27:42:cf:14:8a:c4:27:8d:de:f5:56:cb:a8:d6:
fe:a3:c6:13:ec:87:c7:21:f6:20:a5:15:50:e8:a7:
71:f9:3a:ed:4a:1a:cb:db:58:ce:b1:39:df:63:44:
37:25:7e:0d:24:7e:64:81:06:81:10:e7:98:b7:73:
11:f4:7c:55:79:7a:e4:ed:c6:52:99:b0:5e:5f:29:
a1:04:e8:89:e4:22:73:6f:4e:a1:21:25:d7:be:cc:
8b:e1:4d:b9:d4:7e:6c:7f:88:5d:b2:49:d1:37:e8:
e3:39:c1:88:aa:2f:75:44:b6:c8:db:3c:2f:75:a5:
42:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:37:BB:64:09:D7:6A:93:5D:E5:B0:96:17:36:14:FA:9F:41:AA:CF
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:52:52:b6:e5:dc:a5:da:9d:e1:25:fd:fb:21:d0:06:0d:e9:
40:aa:37:24:77:e9:aa:0e:8b:9a:51:8c:75:73:10:0f:48:ca:
f2:55:bb:3c:bb:83:e1:7c:de:80:ab:50:2a:6b:6d:13:86:46:
2f:b8:fb:02:92:07:91:e0:b6:66:a9:5f:2e:b0:bc:11:58:91:
7c:b9:30:18:aa:7f:3b:1e:9c:c4:ea:6b:68:36:7b:21:d9:0e:
85:cd:71:71:82:ea:10:ad:03:98:aa:a9:ff:00:51:ee:6c:ea:
8c:ad:fe:5c:39:82:2f:e2:23:d4:2b:60:79:6e:9f:79:68:3f:
18:e2:17:8b:08:98:e9:28:eb:26:99:15:82:ed:a0:f0:2b:40:
7c:dc:41:fc:b2:f0:db:be:52:36:7e:d5:8b:c9:53:2a:4e:30:
2b:b3:82:29:09:84:9a:7e:ea:84:fc:89:3d:27:26:5e:8b:32:
39:5e:1f:7d:41:58:27:9e:7d:dd:7d:98:dc:96:b0:52:e4:81:
14:20:83:10:3c:d3:5a:08:2d:3f:10:bc:af:62:13:3a:3d:e6:
c0:fc:3b:d4:b0:bc:1a:42:e4:31:76:23:db:50:eb:c4:32:d8:
a0:e7:e8:c3:41:48:b8:d3:c9:4a:64:4a:ba:4b:9a:36:9f:91:
84:f2:dc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:39 2026 by rpki-client