Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
File: HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json)
Hash identifier: 5ZBBvhWMpRjFDNV2n6S65b3SBeLfP0t2fV/6fjpbuJA=
Subject key identifier: 22:4E:F7:50:1F:C1:E6:D6:08:CD:DF:79:3B:7F:7F:53:B0:63:3E:95
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 019D98863EB3B5EA4004D77E76A0D323AC78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
Manifest number: 0F83
Signing time: Thu 16 Apr 2026 23:00:27 +0000
Manifest this update: Thu 16 Apr 2026 23:00:27 +0000
Manifest next update: Fri 17 Apr 2026 23:00:27 +0000
Files and hashes: 1: A_5oAx6RTX4seU-tsf_hsJM1QfM.roa (hash: v9Bgj8QT90sJo8g5+vI6AXOfjQ2Zxqu0x7TfHuAGD6g=)
2: CIwlYwnQgY17UeavMkm13EVL2n8.roa (hash: r4bZKQmC1Ctifqf/+GSiUbszN3swZZeF7mrqnTsUuQ8=)
3: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: 2fzthGjEhW9o0TBai9JyKokbA0HsLW3uTHxO96qoNWI=)
4: IzAZsf_Qc2A8pMxdGG-nBxB2gRw.roa (hash: 4TJbYmdeXG/rQN3FAOOPwKLfkTdziJof+SKAImG/iP0=)
5: liurjQr2aFUZ4RN7sB5e2xaGm1M.roa (hash: YNt6MjSDV5Wvd3Oc5pFyN0vEC7cDDHJYrDTH0YBIpGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:3e:b3:b5:ea:40:04:d7:7e:76:a0:d3:23:ac:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Apr 16 23:00:27 2026 GMT
Not After : Apr 17 23:00:27 2026 GMT
Subject: CN=224ef7501fc1e6d608cddf793b7f7f53b0633e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d1:94:bf:6d:f5:2d:a3:f8:31:51:c0:27:15:
08:bf:74:38:95:67:18:18:90:15:9c:6c:af:25:5c:
16:ba:60:15:2f:a0:ad:85:7b:11:06:93:96:a9:75:
37:10:75:91:40:1b:03:75:ae:cf:00:c7:24:a3:66:
0a:49:05:ca:25:76:c8:e3:6a:46:e0:06:4f:b1:73:
8c:1b:dd:5c:dc:7d:b7:60:cd:16:1c:33:13:81:7c:
35:10:af:94:6d:fe:7e:8c:2f:4c:14:b8:98:3e:52:
c7:41:67:75:a9:3a:34:70:94:dc:f3:36:dd:14:3f:
e4:84:06:d0:75:3e:64:2a:20:9d:d1:27:34:d4:e7:
59:54:c2:65:a5:b6:48:79:e2:34:7a:30:43:a3:aa:
9a:cc:a0:e6:19:43:f9:f3:a5:69:bc:98:ef:c7:4f:
8c:5e:97:6c:ec:09:1f:67:39:0a:03:09:a2:e6:98:
c3:0f:33:7d:e4:55:c2:09:59:61:31:7e:af:94:5b:
02:15:4e:08:0a:bb:0f:c2:4d:f6:94:87:e8:d9:e9:
91:4c:bf:ff:ee:af:18:f7:cf:2b:a2:27:e0:22:96:
fd:ed:65:d5:1f:6c:70:9e:ca:4d:44:82:67:7a:75:
1a:3c:db:b9:b0:1f:0b:28:30:3d:5f:29:75:2c:66:
c6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4E:F7:50:1F:C1:E6:D6:08:CD:DF:79:3B:7F:7F:53:B0:63:3E:95
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:58:98:39:3c:d6:a4:6f:c2:f8:dc:25:e8:49:5b:5e:6a:d5:
89:6b:be:96:b6:ad:8b:23:0a:e0:dd:3c:2c:47:4e:27:bb:3c:
39:bf:15:b0:5d:86:dd:0b:4b:00:5b:a0:e7:bf:57:f7:63:0c:
a0:d5:84:1b:d5:1f:46:7f:a6:59:77:83:f4:88:f5:99:ee:41:
3e:7b:79:32:b2:41:b3:8f:04:ad:fc:ba:7c:ab:de:5b:97:c2:
63:67:71:57:4c:bc:f5:ad:4f:e0:81:54:59:54:a4:e2:18:b5:
2a:6b:5c:3e:87:09:68:54:aa:91:f2:e0:f1:f0:99:d9:d4:97:
a5:3f:aa:45:ee:fd:c7:14:f7:f7:22:18:3e:36:ce:9a:82:ec:
95:d1:ca:af:4b:80:d8:00:f1:80:b4:07:28:fc:cd:6d:55:8f:
e6:dc:a3:a9:9c:2e:5f:76:83:5d:78:7a:9f:0c:84:05:77:0e:
89:82:9a:18:89:e7:ea:2f:c5:7f:9c:25:81:1a:6c:1d:83:ec:
ef:52:2b:63:a2:34:df:65:b2:3f:6a:f6:08:ac:20:c9:4f:bd:
6a:2a:b3:cb:16:e9:e9:5c:ab:0b:b6:c6:af:5a:fd:28:be:53:
20:83:d0:be:f0:53:01:5c:b2:70:1e:b0:71:73:75:4b:7a:96:
68:fc:89:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yhj6ztepABNd+dqDTI6x4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTBhOWViNDdkODI0YjUxZjE1NDQ0MjQ4MWEyNTcxNjgz
OTQ1NTEwHhcNMjYwNDE2MjMwMDI3WhcNMjYwNDE3MjMwMDI3WjAzMTEwLwYDVQQD
EygyMjRlZjc1MDFmYzFlNmQ2MDhjZGRmNzkzYjdmN2Y1M2IwNjMzZTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtGUv231LaP4MVHAJxUIv3Q4lWcY
GJAVnGyvJVwWumAVL6CthXsRBpOWqXU3EHWRQBsDda7PAMcko2YKSQXKJXbI42pG
4AZPsXOMG91c3H23YM0WHDMTgXw1EK+Ubf5+jC9MFLiYPlLHQWd1qTo0cJTc8zbd
FD/khAbQdT5kKiCd0Sc01OdZVMJlpbZIeeI0ejBDo6qazKDmGUP586VpvJjvx0+M
Xpds7AkfZzkKAwmi5pjDDzN95FXCCVlhMX6vlFsCFU4ICrsPwk32lIfo2emRTL//
7q8Y988roifgIpb97WXVH2xwnspNRIJnenUaPNu5sB8LKDA9Xyl1LGbGiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJO91AfwebWCM3feTt/f1OwYz6VMB8GA1UdIwQY
MBaAFB6gqetH2CS1HxVEQkgaJXFoOUVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFDcDYwZllKTFVmRlVSQ1NCb2xjV2c1UlZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8zMDMzYzYtY2NlOC00NTBkLWEwYzkt
ODQxOGE5NmY2Nzk1LzEvSHFDcDYwZllKTFVmRlVSQ1NCb2xjV2c1UlZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8zMDMzYzYtY2NlOC00NTBkLWEwYzktODQxOGE5NmY2Nzk1
LzEvSHFDcDYwZllKTFVmRlVSQ1NCb2xjV2c1UlZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfliYOTzW
pG/C+Nwl6ElbXmrViWu+lratiyMK4N08LEdOJ7s8Ob8VsF2G3QtLAFug579X92MM
oNWEG9UfRn+mWXeD9Ij1me5BPnt5MrJBs48Erfy6fKveW5fCY2dxV0y89a1P4IFU
WVSk4hi1KmtcPocJaFSqkfLg8fCZ2dSXpT+qRe79xxT39yIYPjbOmoLsldHKr0uA
2ADxgLQHKPzNbVWP5tyjqZwuX3aDXXh6nwyEBXcOiYKaGInn6i/Ff5wlgRpsHYPs
71IrY6I032WyP2r2CKwgyU+9aiqzyxbp6VyrC7bGr1r9KL5TIIPQvvBTAVyycB6w
cXN1S3qWaPyJUA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:58:17 2026 by rpki-client