Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
File: HQH03_1vumbN-MN0ybDwR1UnBd0.mft (raw, json)
Hash identifier: A/EZXr1tGl/qFIise63i1AFSQV5OczC4aYptkm6f0Dk=
Subject key identifier: 94:1C:D5:AB:A0:9B:33:5B:52:7A:78:04:67:7B:06:4B:EC:AD:7F:2F
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial: 019CAB344868493DE5C871CF93CE0A403615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
Manifest number: 1891
Signing time: Sun 01 Mar 2026 21:00:56 +0000
Manifest this update: Sun 01 Mar 2026 21:00:56 +0000
Manifest next update: Mon 02 Mar 2026 21:00:56 +0000
Files and hashes: 1: HQH03_1vumbN-MN0ybDwR1UnBd0.crl (hash: o8jLENyT8Udart1e3fOmuwHasQ3ammeLmmUHOIgIgt4=)
2: gSeQdDXn3ygO_8pxNsOKtvz--Sw.roa (hash: a6EzKVma5/2ncxKjHy/KGoWOM1fh0VyLYME9lKewGmk=)
3: iX4GSDAKgDO8XApKKPZNl8rlRpM.roa (hash: R6eZBAlVK/N/5iGCZRyVlBAXsKn4rccdhUvB5Vtct50=)
4: jnambI_i1Pq9WfSXzTyJxwNqXTw.roa (hash: AT3Vk6O1Rxzzj5x8tTjuoggjZ3puukVm8amtuMG/2yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:48:68:49:3d:e5:c8:71:cf:93:ce:0a:40:36:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Validity
Not Before: Mar 1 21:00:56 2026 GMT
Not After : Mar 2 21:00:56 2026 GMT
Subject: CN=941cd5aba09b335b527a7804677b064becad7f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:e0:81:d3:4f:08:35:9e:10:ba:f8:c9:51:
61:e9:0c:ba:4f:53:0c:56:13:25:b4:02:b5:c7:54:
4e:1a:12:39:42:6a:a0:85:65:2d:74:a9:61:eb:d2:
04:87:05:be:ae:01:8e:9a:36:8f:9b:f4:d5:d8:06:
a6:b7:f2:a1:5a:dc:32:ad:21:3a:bb:75:bf:8e:ba:
4a:2a:ba:ad:36:f1:80:5e:2b:b5:26:67:b5:76:7f:
05:26:82:a4:28:07:81:d4:42:a4:ea:c1:8b:63:ad:
88:00:6e:8a:43:c8:14:3c:e8:72:9f:bd:d7:c4:ba:
e1:29:0c:d1:5e:1e:a4:56:d1:c0:3c:01:e2:12:66:
35:80:23:23:f4:a4:54:da:ce:ea:1b:98:9d:64:86:
2d:0a:ac:6e:44:30:f0:a3:dc:3f:30:fa:39:8e:3f:
4a:6d:2c:1a:61:e1:c6:ab:7e:d7:e1:b0:e2:62:ee:
9a:fc:84:20:62:36:7f:be:88:22:4b:1d:ab:11:23:
f0:73:dc:35:68:ae:0a:92:a3:ce:93:a0:64:cc:1a:
da:a5:4d:58:cd:e5:e6:75:e1:6b:f5:dd:73:a2:4a:
0b:83:75:36:70:8d:e1:cd:9f:39:11:d0:37:c7:f9:
54:46:d4:58:bc:90:3a:6c:90:27:95:73:1e:85:76:
04:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1C:D5:AB:A0:9B:33:5B:52:7A:78:04:67:7B:06:4B:EC:AD:7F:2F
X509v3 Authority Key Identifier:
keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d8:91:70:05:e7:25:4e:aa:5f:0a:ed:a8:89:12:4e:c2:5e:
1c:4e:f2:65:d3:cd:e4:0e:f1:46:71:f4:5a:33:1d:12:65:19:
c0:d5:6b:85:bd:37:c8:0b:1c:61:bd:a5:79:42:17:7e:23:bd:
e2:66:45:23:a2:48:fe:e8:03:86:2a:7b:bb:aa:37:3c:be:49:
37:ef:74:4f:39:7e:0d:bc:d9:68:85:34:d6:e4:92:2c:c9:6c:
6e:5f:c3:7e:71:57:32:b9:21:90:66:51:ba:5b:52:b7:46:f9:
a3:07:88:22:4c:b9:d0:c2:8f:10:8d:d5:35:b2:c2:fe:26:f6:
87:b7:de:c7:b1:08:e9:4f:20:44:34:bb:73:2c:2e:28:07:53:
c9:04:2f:50:db:9c:08:a4:a8:0f:1a:9b:ec:6f:cc:fa:24:7c:
f7:90:20:64:f1:b6:f1:b8:29:28:8c:48:eb:35:30:85:61:36:
f6:67:f5:10:d3:21:fa:b2:73:de:7b:43:64:76:43:fe:cb:f7:
8b:0d:9f:ce:54:9e:a1:44:08:ed:87:13:79:30:d3:ad:2a:df:
97:93:03:03:15:e7:7a:1b:da:54:3b:bb:b5:cf:ec:3d:67:d6:
1f:00:8b:72:b5:3b:09:e8:5e:67:51:64:ae:d2:91:95:98:12:
71:b2:e5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:50 2026 by rpki-client