Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
File: HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft (raw, json)
Hash identifier: 2TmLnkuNcv2tEMdcQUF5+rpj/6U8r2kyGgbUYOu9Trw=
Subject key identifier: 0E:90:BB:70:6D:63:97:E3:83:EE:7C:45:55:D4:17:79:63:74:9B:45
Authority key identifier: 1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
Certificate issuer: /CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Certificate serial: 019CAB346F179E4C8D94EB7556ABB3204011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
Manifest number: 0D7D
Signing time: Sun 01 Mar 2026 21:01:06 +0000
Manifest this update: Sun 01 Mar 2026 21:01:06 +0000
Manifest next update: Mon 02 Mar 2026 21:01:06 +0000
Files and hashes: 1: HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl (hash: IeTToeacFYJPU/8+e40vxSANx5Jb4hgVf8uP7aw85nU=)
2: gusOyZenv7586RqtEWmnhh7N0MA.roa (hash: 2ylZF1yMijEe2k4/d611VBCjiq1WUabPgeneyDm3vsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:6f:17:9e:4c:8d:94:eb:75:56:ab:b3:20:40:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Validity
Not Before: Mar 1 21:01:06 2026 GMT
Not After : Mar 2 21:01:06 2026 GMT
Subject: CN=0e90bb706d6397e383ee7c4555d4177963749b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:50:c3:db:87:1f:44:79:e2:24:a5:94:0f:
95:12:2d:d5:e1:60:3e:06:5f:76:5e:99:cd:1b:76:
fb:70:28:6b:7a:a0:fb:98:13:4a:fe:e1:94:c4:4d:
d5:ae:11:20:88:d4:f5:aa:44:9b:58:b1:c4:db:d6:
50:05:85:98:52:61:f6:77:c2:db:ab:61:11:71:bb:
e9:b9:7c:0a:3d:41:49:6b:ff:f5:d3:6e:c0:eb:6f:
97:64:70:e9:a9:ec:f8:5e:e2:96:0a:77:c3:cb:21:
46:06:8c:4e:f4:f1:9d:61:2e:b8:77:17:ab:83:fe:
29:14:6c:40:cb:8b:32:72:f3:ac:2e:b3:d2:63:e3:
26:f4:60:f4:15:8b:2b:20:30:65:1d:09:42:96:ed:
4f:2d:f4:04:c4:40:66:29:6c:40:cf:fd:c9:ff:9e:
83:bc:38:22:96:48:84:b8:a9:6a:62:c1:2b:38:14:
6a:0c:09:25:f3:9f:68:23:61:db:15:0b:f3:91:a9:
26:bf:89:0b:1f:b8:cd:0b:b8:60:ff:8b:8c:3c:b0:
38:d7:cf:64:7f:e5:87:37:fd:b2:18:47:16:ff:4f:
79:71:ab:45:5d:73:d2:29:9b:3b:8f:7a:aa:04:3a:
2e:9f:9b:62:eb:e6:d2:48:e5:53:b5:5c:13:f9:74:
e4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:90:BB:70:6D:63:97:E3:83:EE:7C:45:55:D4:17:79:63:74:9B:45
X509v3 Authority Key Identifier:
keyid:1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:dd:47:4d:65:f5:4d:3b:81:52:5d:1c:ed:42:05:83:18:49:
a7:b6:8e:72:57:95:5a:2e:da:7e:82:31:b8:00:92:85:d3:78:
82:97:7f:a5:d8:75:d9:b9:14:43:79:2e:59:7e:5a:71:b6:d8:
19:e6:e1:c0:28:d9:14:d8:e1:a4:fb:e3:7b:52:7c:9f:22:d9:
e6:8e:18:be:d8:b5:57:ca:10:76:1a:80:df:31:a1:91:ed:03:
f1:5b:20:6c:62:de:d4:b2:ad:77:e5:f7:ea:65:a6:9f:63:a0:
c2:31:6f:38:66:d2:11:62:00:8f:91:72:f6:e5:45:b1:19:f2:
9b:0f:c0:2d:c2:4f:c1:ab:f8:43:18:16:5a:a7:e5:1b:6f:6e:
cf:e4:60:c8:37:4a:82:4f:ff:9b:23:09:c1:78:70:e8:87:7d:
1e:f0:b3:54:99:41:08:f6:6f:15:9e:1c:6d:42:fb:f8:33:20:
d9:55:ed:f0:ba:2d:39:42:a4:77:24:3b:0e:52:ca:2b:aa:dd:
e2:45:f0:3d:87:63:b7:52:93:90:47:d3:00:c4:a1:69:a9:9d:
f5:3e:42:79:90:40:70:7c:53:4f:22:b2:ae:78:0a:de:a4:e8:
b1:9a:00:94:d0:3c:6f:19:12:50:c8:52:63:6a:2d:f6:a0:2d:
5b:b2:79:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:47 2026 by rpki-client