Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
File: HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json)
Hash identifier: gZEFQ48qgYzlXGgkpHVqqI8BchX8lKtcApEORfi6NwU=
Subject key identifier: 4E:50:A2:AC:FB:33:88:38:CF:93:90:FD:0D:71:52:80:B0:DD:39:AB
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 019FACAD1CCF7C12E3518C0A36FDE61C2904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
Manifest number: 1097
Signing time: Wed 29 Jul 2026 07:00:53 +0000
Manifest this update: Wed 29 Jul 2026 07:00:53 +0000
Manifest next update: Thu 30 Jul 2026 07:00:53 +0000
Files and hashes: 1: A_5oAx6RTX4seU-tsf_hsJM1QfM.roa (hash: v9Bgj8QT90sJo8g5+vI6AXOfjQ2Zxqu0x7TfHuAGD6g=)
2: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: Tq+XGMTczLAGUoz63t0JNSTkW9EC6hO1QN2ZkIhjBh4=)
3: IzAZsf_Qc2A8pMxdGG-nBxB2gRw.roa (hash: 4TJbYmdeXG/rQN3FAOOPwKLfkTdziJof+SKAImG/iP0=)
4: UMrtA1CGXOz9XaTkZnypaeWfgfc.roa (hash: fVCMIXsbAOrWuXeDoUAcmRm+Ggqxi1Y+KIZIzOxGefE=)
5: liurjQr2aFUZ4RN7sB5e2xaGm1M.roa (hash: YNt6MjSDV5Wvd3Oc5pFyN0vEC7cDDHJYrDTH0YBIpGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:1c:cf:7c:12:e3:51:8c:0a:36:fd:e6:1c:29:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Jul 29 07:00:53 2026 GMT
Not After : Jul 30 07:00:53 2026 GMT
Subject: CN=4e50a2acfb338838cf9390fd0d715280b0dd39ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:74:47:a4:b7:07:ed:ca:23:a9:ad:28:58:
73:a4:9c:76:dd:2d:95:2f:ac:1f:a5:d0:ea:e3:c7:
6f:f6:5f:e4:db:4f:ac:d8:26:42:f1:01:4b:83:55:
4e:2c:33:7d:cd:32:58:4c:ee:18:34:fb:74:6a:d7:
ea:49:2e:94:4c:ac:5f:fd:a8:c5:48:69:61:af:6c:
be:d9:08:2f:1e:10:62:cd:cd:b6:1e:3f:64:e0:9d:
9d:e8:60:36:83:63:2d:14:03:7c:7c:71:80:ec:11:
43:da:8a:05:9e:fb:b8:1c:6a:c6:47:24:e7:47:43:
64:10:39:75:f1:d1:d6:01:7c:5e:7f:26:7f:1d:1a:
d7:c5:5b:0d:e9:4d:60:57:7f:f3:45:5d:f0:be:25:
f4:8d:04:a1:17:a3:09:73:f2:be:19:5b:43:81:d8:
74:1b:fb:89:06:a9:a3:27:6c:08:5f:c5:36:cf:cb:
9a:80:35:56:ed:1b:c9:c3:cd:94:18:15:ed:98:c9:
c6:0d:f3:39:c8:b1:11:ea:f9:32:48:2d:39:9c:57:
18:c6:68:9a:71:3b:89:90:5a:2b:0f:18:60:64:0a:
cd:a2:de:c8:51:3f:49:f5:41:67:f9:01:4d:f1:bb:
5c:28:0d:74:5e:70:bf:18:a6:3b:54:5d:fd:eb:0f:
67:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:50:A2:AC:FB:33:88:38:CF:93:90:FD:0D:71:52:80:B0:DD:39:AB
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:38:e5:b4:a4:21:19:4b:5c:5a:6f:72:a1:55:df:8b:31:34:
09:5b:dc:f9:e2:52:8b:5c:da:49:01:41:8f:9a:2a:91:39:f6:
d5:07:90:8c:33:06:24:f1:e7:c7:75:90:c8:87:b8:ff:38:75:
68:b4:5b:c7:7c:52:fb:fa:3c:ef:bd:e7:70:5f:67:ea:d0:bb:
9b:2f:7d:e0:23:30:f1:7a:06:44:b1:69:96:82:4e:08:e6:de:
da:39:59:85:e2:89:d4:06:78:3c:4c:8a:ee:e9:cc:96:31:36:
94:32:66:b4:47:f9:6a:2c:e7:e0:7c:d3:c5:f2:3b:61:28:20:
ed:32:55:98:f0:d4:17:a9:f5:9c:be:05:03:d9:7b:5e:47:84:
7f:a2:de:64:57:d7:96:ed:65:79:6e:77:1c:d5:6e:e5:b2:5b:
c1:58:a5:c0:1d:53:ce:b5:f8:ca:04:48:3c:41:b3:85:31:1d:
fc:9e:f3:6e:e7:fe:78:09:22:0d:05:7b:21:97:47:12:b8:e9:
49:d1:e0:5c:cf:ee:2f:19:68:ff:07:97:c8:45:17:ce:a0:44:
3b:a0:4b:97:70:c9:0f:38:f8:4b:38:10:dd:8c:cb:50:f8:65:
5b:9f:51:73:78:08:c9:85:88:9a:55:d8:13:c9:b6:d2:4d:36:
3b:86:a4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:08:10 2026 by rpki-client