Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
File: HQH03_1vumbN-MN0ybDwR1UnBd0.mft (raw, json)
Hash identifier: LEqi+Yesq8shd16LiqyZLmbNOhPgCIdT7M4v98BeDJU=
Subject key identifier: CF:F3:1E:51:3E:44:88:61:CB:8E:06:9F:28:4B:07:EE:D8:11:FA:57
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial: 019D9AABCE97E5F6532EB220460BEAABCB9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
Manifest number: 190D
Signing time: Fri 17 Apr 2026 09:00:43 +0000
Manifest this update: Fri 17 Apr 2026 09:00:43 +0000
Manifest next update: Sat 18 Apr 2026 09:00:43 +0000
Files and hashes: 1: HQH03_1vumbN-MN0ybDwR1UnBd0.crl (hash: YleQz6UevdAjba3GFlUuLyvIUVvlXdwKq00YoIZrynU=)
2: gSeQdDXn3ygO_8pxNsOKtvz--Sw.roa (hash: a6EzKVma5/2ncxKjHy/KGoWOM1fh0VyLYME9lKewGmk=)
3: iX4GSDAKgDO8XApKKPZNl8rlRpM.roa (hash: R6eZBAlVK/N/5iGCZRyVlBAXsKn4rccdhUvB5Vtct50=)
4: jnambI_i1Pq9WfSXzTyJxwNqXTw.roa (hash: AT3Vk6O1Rxzzj5x8tTjuoggjZ3puukVm8amtuMG/2yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:ce:97:e5:f6:53:2e:b2:20:46:0b:ea:ab:cb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Validity
Not Before: Apr 17 09:00:43 2026 GMT
Not After : Apr 18 09:00:43 2026 GMT
Subject: CN=cff31e513e448861cb8e069f284b07eed811fa57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:be:31:48:54:27:57:47:49:ca:7e:86:c3:
03:e9:85:54:f1:3e:9f:71:7d:c1:60:d3:b4:6b:20:
8d:23:79:83:4e:ba:23:52:6a:fb:a1:4e:2d:6e:8e:
45:08:81:9d:97:45:b0:2d:27:a3:68:49:10:6e:61:
d1:64:46:df:d1:8b:38:6d:d1:ba:fc:3d:f4:52:22:
ef:12:20:f9:ab:ac:ae:0b:b7:62:7b:f2:4f:1c:b9:
a8:9a:5b:e5:de:66:8e:09:8d:25:66:63:5b:e4:eb:
33:25:25:f4:84:ef:2b:f1:9c:2b:7d:3c:11:ef:9c:
b9:74:20:d5:03:a6:c1:a2:f3:e4:00:ff:b4:68:1b:
c0:f0:17:c6:ea:75:42:62:2a:08:8d:61:61:a2:51:
1d:1c:1f:1e:ad:91:10:bf:d1:8d:ab:88:76:0c:87:
0a:7a:43:5f:b4:6a:0f:51:8d:16:54:55:af:21:6f:
86:71:ba:10:8e:59:dc:ef:c3:ce:ba:44:a1:c8:1f:
88:a8:ca:c8:6d:d5:52:01:6e:99:29:a8:8c:7d:5d:
27:e8:5c:d1:c7:ee:0c:6c:e2:30:46:04:bf:41:e2:
3a:ca:bf:c6:18:bc:e6:08:5e:a3:b9:77:9b:03:08:
c1:10:af:a0:6b:a5:26:cb:0d:94:ec:e8:aa:a1:29:
be:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F3:1E:51:3E:44:88:61:CB:8E:06:9F:28:4B:07:EE:D8:11:FA:57
X509v3 Authority Key Identifier:
keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5d:c6:01:d7:a4:0e:3e:88:13:3c:82:0b:76:9e:56:4d:66:
74:f9:36:1b:42:c0:35:9e:55:44:cf:b9:1c:e1:fa:5e:3b:e1:
e8:f4:17:ec:ef:c0:bd:b6:4f:ce:63:51:db:73:3b:37:0e:8d:
03:5b:c9:06:2f:ff:c7:24:9b:f5:26:0e:e4:ba:c2:6b:ec:8a:
34:6f:46:3f:f0:01:5b:a9:70:10:32:0e:d8:19:85:b5:1f:43:
3d:46:2f:0e:fe:e7:f5:ba:fc:6c:f1:35:f9:52:f1:c2:ae:0a:
52:39:a0:93:ee:2b:0d:64:ef:1a:51:48:ad:0d:ff:12:f1:18:
29:f5:c6:99:cb:1b:1a:54:ba:42:eb:8b:9e:b2:3a:af:f5:3c:
d0:86:5f:08:3c:8c:9c:37:84:1b:03:21:fa:b7:38:0e:f9:5f:
c5:5f:bf:4e:b2:c9:b4:46:03:9d:9b:3a:f6:bd:3f:23:66:d0:
31:5e:ea:76:60:56:4a:4d:68:57:e3:40:48:7d:93:87:c3:5e:
93:5f:02:72:f0:51:0e:59:7b:e7:8e:c4:43:02:2f:eb:55:0b:
a4:ce:6a:fc:0e:5e:30:3c:a5:3c:ee:cb:00:39:f6:72:67:87:
ec:63:73:da:fb:a4:ac:5b:71:2f:20:1d:cb:cf:31:1d:c2:87:
a7:31:11:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:17 2026 by rpki-client