Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
File: HQhx_C6ZiS6hEVowITjh0ypiGCw.mft (raw, json)
Hash identifier: 8joBDUhUGvqRdJD9uecTYqxU3ft8AS9UASR+0OQutqE=
Subject key identifier: 99:1B:CB:DF:FB:90:4A:EC:AC:F2:ED:C4:D1:7B:60:17:2B:3F:67:90
Authority key identifier: 1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
Certificate issuer: /CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Certificate serial: 019CAA593D30072EA68C925AFA3B8FF2AA4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 17:01:40 +0000
Manifest this update: Sun 01 Mar 2026 17:01:40 +0000
Manifest next update: Mon 02 Mar 2026 17:01:40 +0000
Files and hashes: 1: CWhgnMt-ss9B8-btHZoqc3CLkvE.roa (hash: E3kIV5fo174JAQ+/2CA5CLbdIf038voHzxoXiPQe6Z8=)
2: HQhx_C6ZiS6hEVowITjh0ypiGCw.crl (hash: kkm2YqQXE/TXEiAhHvpnsXzMt6udmDpLpY5tazN4Z6I=)
3: RS-DcQuebpqY8Culr_rM9_XKltU.roa (hash: D72/49kWrpo5EEjDXndBWXIkpecf2+TgHDpJLb07DlU=)
4: mgGVP9w-ya_7zv7yO1xWTM7sa_0.roa (hash: CNgDgTCH1ZO1+h/LC5uHK3Xji2RJx/Y7qygtDyi4V4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:3d:30:07:2e:a6:8c:92:5a:fa:3b:8f:f2:aa:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Validity
Not Before: Mar 1 17:01:40 2026 GMT
Not After : Mar 2 17:01:40 2026 GMT
Subject: CN=991bcbdffb904aecacf2edc4d17b60172b3f6790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:aa:8d:a0:c1:70:96:6d:bd:47:56:34:1e:a9:
83:7a:04:d2:4c:f1:9f:a5:4c:7b:86:94:22:c6:96:
bc:f2:7e:02:c8:f2:73:b0:32:ed:68:a7:27:b7:23:
7f:13:27:a5:14:59:28:cf:3a:c8:91:80:d7:8f:c4:
6f:29:3a:bd:56:3d:82:7c:60:7d:50:23:2b:76:89:
39:63:87:70:be:37:c5:88:c1:70:8c:51:89:c2:a1:
d0:55:95:49:01:fc:02:f5:05:4b:ee:53:c5:3b:2c:
8e:f9:06:2d:b5:55:69:d6:98:21:28:68:4c:3f:78:
03:13:76:45:64:b1:5e:eb:5e:83:df:21:60:63:58:
5e:f9:75:82:46:9d:82:ed:87:2b:75:bf:48:95:04:
08:cb:d7:a6:b4:22:84:26:9a:84:8d:25:2c:d3:83:
df:86:0f:b9:f6:93:f2:8a:ed:e9:16:f1:16:ff:37:
a4:4b:b5:c6:97:48:b9:97:26:32:de:ab:74:d0:a2:
48:97:2a:d0:51:ff:a0:e7:c1:bb:30:91:c1:8d:e1:
35:78:c7:41:df:e4:b6:ae:ea:1a:c1:78:57:ef:52:
44:9d:3c:93:3e:d8:6b:27:9b:0a:86:ac:5d:4e:19:
69:1b:ff:cf:99:89:75:c1:0c:c1:93:5d:08:77:cf:
e9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1B:CB:DF:FB:90:4A:EC:AC:F2:ED:C4:D1:7B:60:17:2B:3F:67:90
X509v3 Authority Key Identifier:
keyid:1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:c2:23:2b:af:bd:16:e7:c0:e1:31:12:8e:60:67:fa:7c:46:
95:c2:d0:af:32:72:4e:01:e0:3d:41:e9:b0:9a:35:d6:2b:4c:
ea:58:54:0b:71:8f:8d:76:bb:78:6d:79:c3:32:30:f9:fe:00:
4f:39:07:1b:b2:d4:8f:75:7b:ef:64:11:7d:b8:e3:ec:b7:45:
a8:89:eb:90:a4:e6:26:47:4e:c7:88:14:11:e5:e5:be:62:21:
13:97:49:0d:81:8a:7a:94:1e:a5:e0:db:e6:fe:ea:fa:f1:a4:
d3:11:90:d0:0e:29:71:3a:75:66:b6:7d:45:4e:04:65:b2:d7:
f4:57:21:50:17:70:ff:95:8f:0f:1d:0a:3b:c8:17:18:54:50:
dc:08:4b:f2:cd:0a:d9:00:7e:80:0a:ce:8c:bd:f8:0a:f2:63:
06:24:46:97:f5:d2:82:79:e9:7c:09:15:4f:12:97:06:6e:12:
82:90:81:39:da:04:fb:e7:d4:bd:54:21:a9:07:e9:0e:f2:51:
20:9a:9b:37:dd:cf:2f:51:59:5b:61:c6:04:c2:7d:9c:44:70:
95:65:e8:83:43:97:35:d3:c1:dc:7a:2b:3b:b7:24:34:ca:7b:
11:ca:2e:db:14:73:9f:7b:09:94:51:e1:f1:24:36:82:ae:06:
27:1f:ab:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWT0wBy6mjJJa+juP8qpMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMDg3MWZjMmU5OTg5MmVhMTExNWEzMDIxMzhlMWQzMmE2
MjE4MmMwHhcNMjYwMzAxMTcwMTQwWhcNMjYwMzAyMTcwMTQwWjAzMTEwLwYDVQQD
Eyg5OTFiY2JkZmZiOTA0YWVjYWNmMmVkYzRkMTdiNjAxNzJiM2Y2NzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaqNoMFwlm29R1Y0HqmDegTSTPGf
pUx7hpQixpa88n4CyPJzsDLtaKcntyN/EyelFFkozzrIkYDXj8RvKTq9Vj2CfGB9
UCMrdok5Y4dwvjfFiMFwjFGJwqHQVZVJAfwC9QVL7lPFOyyO+QYttVVp1pghKGhM
P3gDE3ZFZLFe616D3yFgY1he+XWCRp2C7Ycrdb9IlQQIy9emtCKEJpqEjSUs04Pf
hg+59pPyiu3pFvEW/zekS7XGl0i5lyYy3qt00KJIlyrQUf+g58G7MJHBjeE1eMdB
3+S2ruoawXhX71JEnTyTPthrJ5sKhqxdThlpG//PmYl1wQzBk10Id8/pvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkby9/7kErsrPLtxNF7YBcrP2eQMB8GA1UdIwQY
MBaAFB0IcfwumYkuoRFaMCE44dMqYhgsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yMDUyNzUtMmNlZC00YTRlLWI5MDAt
NGYzZTViMmUwYzU2LzEvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8yMDUyNzUtMmNlZC00YTRlLWI5MDAtNGYzZTViMmUwYzU2
LzEvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAucIjK6+9
FufA4TESjmBn+nxGlcLQrzJyTgHgPUHpsJo11itM6lhUC3GPjXa7eG15wzIw+f4A
TzkHG7LUj3V772QRfbjj7LdFqInrkKTmJkdOx4gUEeXlvmIhE5dJDYGKepQepeDb
5v7q+vGk0xGQ0A4pcTp1ZrZ9RU4EZbLX9FchUBdw/5WPDx0KO8gXGFRQ3AhL8s0K
2QB+gArOjL34CvJjBiRGl/XSgnnpfAkVTxKXBm4SgpCBOdoE++fUvVQhqQfpDvJR
IJqbN93PL1FZW2HGBMJ9nERwlWXog0OXNdPB3HorO7ckNMp7Ecou2xRzn3sJlFHh
8SQ2gq4GJx+rLw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:57 2026 by rpki-client