Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
File: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json)
Hash identifier: Y4V8cvlpGZuPOFNB4HK3R6IfMYwoAGkYurpRipGdyuU=
Subject key identifier: 87:06:61:62:21:3B:92:50:5A:C7:82:D4:63:81:00:64:C4:24:E4:E8
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial: 019CACB510C34BB34BC537AE2308E2DC4711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
Manifest number: 1154
Signing time: Mon 02 Mar 2026 04:01:13 +0000
Manifest this update: Mon 02 Mar 2026 04:01:13 +0000
Manifest next update: Tue 03 Mar 2026 04:01:13 +0000
Files and hashes: 1: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: WowR79dTRlJouj/TM+dczA9bud2hk9J8m+Pbwq69Yr8=)
2: w8zdjiM74u9Xh40wPO9DxI7URjQ.roa (hash: 4uuYGCMFbM+HLfTWP9pgKKq5F64rrg4484o4ZoBFc1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:10:c3:4b:b3:4b:c5:37:ae:23:08:e2:dc:47:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Validity
Not Before: Mar 2 04:01:13 2026 GMT
Not After : Mar 3 04:01:13 2026 GMT
Subject: CN=87066162213b92505ac782d463810064c424e4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:92:85:7f:29:bc:ff:47:77:6a:69:d3:05:
88:b0:cd:1c:c2:43:7c:3b:61:23:3a:a8:0e:82:ce:
56:5f:1f:e2:85:54:59:2d:50:65:ed:03:bb:d5:2f:
2a:aa:e3:53:af:a0:ab:17:89:12:63:c6:f8:78:b3:
f2:ca:11:36:ab:38:43:cf:2a:7d:2c:33:ea:b4:d2:
2a:2e:92:e6:3c:ae:e8:bf:84:64:e1:9a:4c:c0:81:
ca:99:f2:cd:0e:cd:b2:77:37:ae:b1:86:72:16:2c:
da:1e:80:9e:b4:9e:63:41:39:4d:45:23:0c:27:1a:
96:be:2f:3e:cd:35:e9:d2:0a:08:3e:13:10:5c:72:
c5:e0:26:b4:77:66:94:71:75:42:c3:bc:02:79:76:
67:f6:54:a4:5d:fc:9a:65:82:38:c4:40:82:aa:78:
74:63:4b:86:58:12:cf:cd:c9:2c:b2:c2:78:a1:77:
d8:b9:41:92:5d:f6:a8:e3:cf:33:39:03:b2:8f:12:
e1:08:94:f5:64:88:13:d0:1b:95:53:dd:af:07:43:
8a:c2:2e:c2:a3:9c:d9:9e:45:83:49:c3:f8:df:de:
d0:f7:3a:fe:47:68:09:29:fa:4c:4c:a6:b5:57:c6:
d5:25:be:ec:8b:df:b0:ef:47:fe:56:ab:ab:6f:a4:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:06:61:62:21:3B:92:50:5A:C7:82:D4:63:81:00:64:C4:24:E4:E8
X509v3 Authority Key Identifier:
keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d5:b6:58:2f:09:90:b1:12:d5:3e:f7:71:81:18:c1:65:60:
e7:44:29:3f:84:f8:2d:25:0f:20:a7:05:59:c2:8c:b1:e3:94:
37:f6:ac:7c:f4:12:41:b4:a8:32:83:4d:07:2b:b9:d2:2f:03:
5e:4b:e6:05:4f:ba:3b:5f:4e:cb:eb:fb:1c:6d:17:6f:6a:c0:
c2:82:f5:5e:01:a8:21:48:65:2b:25:f5:62:87:35:fa:d6:1f:
89:23:25:8a:b3:93:19:b6:b6:23:b9:85:37:e0:67:56:bd:fb:
a4:1c:81:85:78:0e:c0:55:53:c5:a7:35:d9:8f:73:2c:c2:df:
f9:0e:eb:72:54:68:e6:c8:a4:8d:dc:d7:74:81:c2:4e:8b:d1:
de:c4:77:68:b1:da:f0:d8:7b:17:01:e4:b1:72:a4:d2:0d:05:
97:87:1d:b9:66:b5:16:e9:d7:b3:6b:cf:2e:d7:d9:f6:af:e2:
20:63:db:bf:5f:f8:b9:14:03:cd:55:24:62:2a:88:0b:6a:58:
5f:93:df:3a:1d:d8:4b:c7:61:30:ef:c1:06:24:1a:f4:79:98:
2f:d6:d4:e3:13:f5:24:bd:6d:08:a0:5d:d9:2e:76:1a:82:f9:
5d:4b:1e:fc:88:3c:8a:5b:3a:0b:b1:c7:30:cd:ac:82:04:d2:
9d:69:74:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:14 2026 by rpki-client