Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
File: HqVZ2L9qwtho0GZa1X0sasFHIZM.mft (raw, json)
Hash identifier: Iylfhw/4EBGF+NpmzpFo2jS71zRd6jQf/BFqltJQasM=
Subject key identifier: A0:BB:A1:BB:2E:C8:27:71:22:2C:BF:A1:A1:C9:1A:13:95:7A:9C:CA
Authority key identifier: 1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
Certificate issuer: /CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Certificate serial: 019CAA8F8AE2D6BB12341AA874E3622CC9F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
Manifest number: 17D7
Signing time: Sun 01 Mar 2026 18:00:59 +0000
Manifest this update: Sun 01 Mar 2026 18:00:59 +0000
Manifest next update: Mon 02 Mar 2026 18:00:59 +0000
Files and hashes: 1: HqVZ2L9qwtho0GZa1X0sasFHIZM.crl (hash: K0DPEnC84ERnl6maV69OYvyTnCH7oXeDrc6uDdtQ3GU=)
2: h2Pj0fup6PmGgboIXfm183EEF9c.roa (hash: eferMGwRa6YXz1Q8h3PiGClbC5vOEBn3msIVlW/jo08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:8a:e2:d6:bb:12:34:1a:a8:74:e3:62:2c:c9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Validity
Not Before: Mar 1 18:00:59 2026 GMT
Not After : Mar 2 18:00:59 2026 GMT
Subject: CN=a0bba1bb2ec82771222cbfa1a1c91a13957a9cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:45:97:67:78:63:ca:b7:9f:79:f3:db:e6:
f4:d8:40:41:84:db:db:a9:f5:c0:01:3b:64:86:eb:
6c:9e:26:d7:41:7c:42:60:2c:fd:4c:df:aa:53:84:
52:fd:84:69:8b:09:d9:01:22:43:70:ef:f0:c6:0a:
28:b8:7a:06:96:eb:fd:dc:7e:3c:46:75:0d:fb:02:
28:ae:20:55:ce:ec:8c:77:c3:be:b9:bc:da:65:65:
0d:b4:d5:95:c8:d5:20:67:11:d7:31:11:91:89:e3:
52:cb:a2:8e:43:3a:2a:c9:28:e0:18:9c:29:23:84:
07:81:ee:8d:8d:1c:96:7d:b5:1c:6e:31:54:6f:f1:
f1:96:a0:1e:ba:58:e0:cb:56:c2:a9:88:25:2d:1c:
3c:2c:9a:21:c2:1d:39:d5:b1:93:b2:7c:5f:ee:45:
fd:0e:94:49:5b:cc:28:db:4b:57:5a:93:24:37:e9:
10:da:33:98:a4:d7:68:f4:9f:41:c5:16:2b:b4:3d:
76:e0:86:e7:18:eb:e9:70:95:17:47:17:b4:b3:d4:
21:68:3c:16:a6:b1:d1:1a:4a:ff:ba:b4:69:ae:86:
d1:ff:57:ef:83:33:fe:c6:e3:04:b3:c8:c0:c8:79:
86:81:ea:66:57:5a:4d:3b:15:71:94:66:90:4a:3f:
f5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BB:A1:BB:2E:C8:27:71:22:2C:BF:A1:A1:C9:1A:13:95:7A:9C:CA
X509v3 Authority Key Identifier:
keyid:1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:48:fd:34:ac:05:5e:78:7e:2e:da:d8:cc:92:0a:f1:31:ea:
21:16:2e:24:26:b3:cc:79:c1:5d:e4:53:cc:c2:a7:6e:5d:51:
4e:8f:38:9e:b6:fa:c3:be:42:b1:13:86:13:0e:79:78:24:f3:
9d:fc:2e:b8:42:a1:2e:0c:b1:0b:02:bd:c5:39:79:de:4b:df:
d7:06:89:0d:c4:b8:f4:f1:15:5e:1a:05:94:eb:c9:b1:49:43:
3f:46:c7:bb:7b:da:b8:3a:d7:41:d4:e2:80:42:e7:4d:10:78:
eb:b3:fa:c7:92:d9:cf:8e:36:b0:c2:1e:bd:b9:c3:f7:01:51:
d1:a0:aa:b8:44:00:48:ee:62:5a:4f:a5:94:de:b2:0d:ae:0b:
58:35:3a:44:43:45:94:97:f5:b7:cf:3f:57:6d:0a:47:05:2e:
8e:8c:2a:1d:fe:11:73:70:32:63:d4:f3:7b:d8:58:62:ec:65:
d6:ac:d4:8d:65:6e:14:9c:61:05:a5:c4:c5:43:37:e8:70:e6:
20:f6:3a:c4:b5:c4:12:55:f5:e4:32:46:bc:bb:28:7c:d7:63:
88:9e:54:67:53:3e:f8:95:56:9f:aa:d8:a8:df:dc:64:b4:bc:
aa:7e:cf:6e:34:07:5b:73:c7:a0:21:73:e1:82:9b:01:55:72:
59:0a:c3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:40 2026 by rpki-client