
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
File: HQrO6hf1PecI-ac6vAyHFk0gfQg.mft (raw, json)
Hash identifier: y8Q/evsgmDJ+w72w5Oru07TI6xVxsOxkxyPfQRAIFLU=
Subject key identifier: 36:A4:53:7E:55:FF:24:78:3C:C4:BD:DE:DB:C1:1D:58:54:EA:85:BF
Authority key identifier: 1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
Certificate issuer: /CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Certificate serial: 019E2024438D201E52EF9532CFE179CBE55B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
Manifest number: 162B
Signing time: Wed 13 May 2026 07:01:47 +0000
Manifest this update: Wed 13 May 2026 07:01:47 +0000
Manifest next update: Thu 14 May 2026 07:01:47 +0000
Files and hashes: 1: HQrO6hf1PecI-ac6vAyHFk0gfQg.crl (hash: YiAIBnzttlN/VaDl6C2jBxvJzYDli1D7UJUs6Jx5UkM=)
2: jYlsueQe6bTuxJo3Pao6U7_lbjM.roa (hash: xljjWi7Hj8DkN9QHcryj+ylFV/KQmtfdUgA8aZcK8mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:43:8d:20:1e:52:ef:95:32:cf:e1:79:cb:e5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Validity
Not Before: May 13 07:01:47 2026 GMT
Not After : May 14 07:01:47 2026 GMT
Subject: CN=36a4537e55ff24783cc4bddedbc11d5854ea85bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:bc:7f:2b:fa:af:16:7e:22:d9:5b:5c:cd:
0f:ad:b6:f8:e2:31:85:bd:0e:0f:72:44:cb:f9:92:
b9:ef:0b:f0:d8:8c:4b:38:62:23:bb:e1:73:a8:9d:
fc:b2:84:76:b3:04:bf:e0:25:61:cf:81:08:fc:1b:
fd:ec:d8:08:af:d7:af:bd:41:89:f8:9f:00:d9:2b:
74:0c:74:5b:09:d3:05:4b:1f:5e:cd:c7:7b:31:9a:
14:19:49:8a:15:5c:0e:b8:c1:5b:f9:16:fd:d6:fa:
85:63:74:81:59:95:27:8d:2a:70:64:5c:9d:93:bb:
6c:f8:b2:0c:50:78:a9:0a:a3:7c:4f:82:f2:26:24:
05:e7:31:7b:de:72:e5:2c:5e:1b:eb:79:65:ea:15:
1d:f5:6f:eb:e2:96:20:35:9d:ef:bf:a1:60:9a:49:
0f:da:00:d0:fd:95:77:3f:8b:e9:77:c8:d1:b1:57:
1e:09:53:8d:dc:c1:78:c5:fe:72:8f:87:df:e6:a3:
70:0a:8a:56:28:01:50:2d:87:27:6f:91:e4:d2:b0:
ee:45:07:22:c3:b0:30:29:ee:3e:6f:97:b4:60:54:
e9:ca:4c:ab:53:84:ef:e2:93:e8:bd:70:25:08:9f:
3f:85:30:2e:8d:89:68:41:0e:37:13:ca:56:70:fd:
43:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A4:53:7E:55:FF:24:78:3C:C4:BD:DE:DB:C1:1D:58:54:EA:85:BF
X509v3 Authority Key Identifier:
keyid:1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:88:bc:8c:1a:9a:11:cd:99:eb:16:0a:c1:74:21:47:f3:62:
48:ea:b2:2a:af:f2:43:64:fa:2a:58:d7:11:21:e4:e7:a6:58:
ce:a1:54:bf:3e:d1:8d:dc:6b:84:ce:ed:67:d4:1f:b7:e8:c8:
a3:24:c1:79:28:da:5f:66:f6:dd:39:2d:f5:cb:6d:de:5e:9d:
a0:7a:ca:95:05:1a:d0:6c:86:16:9a:91:74:c4:1a:a8:19:fb:
48:fe:e7:c5:5c:9e:e7:59:c0:2b:d1:61:c6:29:d8:03:ca:4a:
28:5a:4f:3d:93:b2:ae:8e:3f:00:d6:92:9c:59:45:3a:f5:74:
f3:a8:b5:9b:47:58:d6:3d:4f:15:7c:26:b4:ac:8c:18:cb:8e:
9f:91:68:c3:6a:ec:c1:e1:f3:c4:2c:00:ae:93:83:13:e6:f2:
e3:8d:6e:5a:54:d6:20:37:f2:e3:38:76:ef:04:af:32:b6:80:
ef:64:2f:82:c1:af:2a:c9:06:c2:56:4d:1a:ed:62:17:1d:cf:
4b:e9:75:4b:e3:4e:5c:16:09:ff:cd:88:1f:07:e4:be:dd:8c:
39:5f:c1:9f:c3:db:ea:b9:38:81:7b:7f:b9:05:09:f7:43:cc:
2c:94:e1:7e:9b:fb:28:93:de:e5:6b:96:9b:94:cf:91:52:d6:
b4:6a:1a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:20:41 2026 by rpki-client