Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
File: HQHtI2TsgiZcaIaf5yvnVzGaMes.mft (raw, json)
Hash identifier: F7PzBcuWCUIzYBpKlHu0Lk4Ome63h8IgADL3TS5UoWI=
Subject key identifier: 6E:A5:31:C9:87:95:0A:E1:3D:F3:6A:4C:15:37:59:3F:74:D0:16:D9
Authority key identifier: 1D:01:ED:23:64:EC:82:26:5C:68:86:9F:E7:2B:E7:57:31:9A:31:EB
Certificate issuer: /CN=1d01ed2364ec82265c68869fe72be757319a31eb
Certificate serial: 019CAAFD36287277FF8ED00B7A0AB6A0DD9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
Manifest number: 1668
Signing time: Sun 01 Mar 2026 20:00:46 +0000
Manifest this update: Sun 01 Mar 2026 20:00:46 +0000
Manifest next update: Mon 02 Mar 2026 20:00:46 +0000
Files and hashes: 1: HQHtI2TsgiZcaIaf5yvnVzGaMes.crl (hash: lygVp/LUBhgMMRzMoxMlkHoUNvZ7cAprQPjWcV/MSBY=)
2: vBEDZky1DrDyLEUWSCcKSfFchsA.roa (hash: K1r/2AFcY8elhH0ckxTVORnjb/4FnfMG0iSbfTKXjq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:36:28:72:77:ff:8e:d0:0b:7a:0a:b6:a0:dd:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01ed2364ec82265c68869fe72be757319a31eb
Validity
Not Before: Mar 1 20:00:46 2026 GMT
Not After : Mar 2 20:00:46 2026 GMT
Subject: CN=6ea531c987950ae13df36a4c1537593f74d016d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cc:9f:11:a4:9a:f8:ab:9c:85:1d:b3:7c:51:
de:31:db:91:c6:a2:ed:9a:2b:d8:84:8b:ae:2d:9d:
f8:c4:dc:2f:18:6b:29:19:08:f9:61:95:8f:ec:cf:
97:7b:72:c4:3e:55:ae:c0:16:d9:04:31:22:0d:2d:
b6:a8:10:8c:d0:34:57:b0:f1:03:b7:6e:c8:03:81:
c5:6b:94:68:ef:4a:5e:80:f9:35:24:ff:14:8f:6e:
f8:41:72:52:2e:b0:49:81:2b:f9:d6:0c:76:f0:2f:
91:16:05:78:75:a5:4a:df:3c:7f:2d:90:aa:b9:d8:
ff:bd:d6:8a:31:be:46:1a:13:52:b0:8d:f1:dc:86:
2c:73:5c:99:e6:1c:e5:e9:ab:39:c8:9a:15:e3:51:
59:1b:69:6d:51:86:76:dc:3b:cd:4a:ac:92:74:06:
b0:c5:84:51:4b:6f:e9:28:1c:d8:5d:bb:65:45:49:
dc:ba:ab:8b:d0:59:12:b3:79:03:4e:ca:fb:5e:07:
25:71:67:e5:ab:b1:3a:21:66:98:19:a6:c6:68:16:
5f:00:fc:f7:3d:27:23:39:84:97:55:d4:b0:1c:cf:
f0:f9:7f:b3:ba:45:7f:b8:8f:73:33:c8:07:d5:d5:
77:4b:d4:b6:37:15:f5:f7:fd:31:77:70:a9:1b:56:
71:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A5:31:C9:87:95:0A:E1:3D:F3:6A:4C:15:37:59:3F:74:D0:16:D9
X509v3 Authority Key Identifier:
keyid:1D:01:ED:23:64:EC:82:26:5C:68:86:9F:E7:2B:E7:57:31:9A:31:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ac:c2:d2:d1:7e:7c:ad:6a:fb:d6:4c:f0:88:51:11:1c:0c:
60:a7:57:d5:69:3d:47:cb:d3:11:11:b8:36:d8:17:8d:0e:bd:
14:f8:84:78:a7:70:af:5d:e9:c6:a7:76:e1:47:73:47:c1:d3:
46:66:e1:12:63:ed:29:6b:b6:f7:ea:97:a1:2e:da:7a:cc:50:
19:4a:81:01:5e:91:58:60:57:7b:fb:3a:68:86:22:6b:d0:dc:
ab:0a:a1:36:5f:e7:c8:9b:77:87:f4:65:ad:15:90:bd:68:e8:
2f:5e:5e:81:b4:f0:19:a8:b6:ab:e2:77:1d:26:9f:a9:28:7d:
ce:80:54:c3:62:93:83:4d:6d:43:57:01:e1:28:d3:af:cd:e7:
4a:76:09:ef:cb:8c:e8:d4:c8:80:28:60:84:f4:56:a6:29:33:
d7:7e:12:fc:4d:9d:ce:14:81:45:ae:4f:fc:3b:78:07:ac:bc:
cb:e4:b5:82:50:c6:0b:fc:15:d3:fb:e4:4f:30:32:3d:8f:40:
9d:78:b6:63:0d:8d:7a:96:c3:05:7f:b9:d3:44:8d:ea:b4:f0:
55:46:fc:65:ad:00:83:5e:e4:ff:39:4f:65:71:f0:90:5d:e7:
23:4b:c6:c0:6f:11:f0:8b:b2:66:5e:ff:88:4b:d3:23:a9:4d:
76:b1:8f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:31 2026 by rpki-client