Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
File: HqsBKTydvRqdatyGGCtSDNF2wAc.mft (raw, json)
Hash identifier: IO4OQiihl6wCGHy7w4ARI5PqLDaV/bopWbey3p481EA=
Subject key identifier: 0B:32:96:67:5D:FD:F4:A3:00:37:B8:5B:72:AC:34:FE:32:12:3F:AB
Authority key identifier: 1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
Certificate issuer: /CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Certificate serial: 019E1CB4C8DB679DBBCCCA5AAA0F1964FFFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
Manifest number: 16B8
Signing time: Tue 12 May 2026 15:01:10 +0000
Manifest this update: Tue 12 May 2026 15:01:10 +0000
Manifest next update: Wed 13 May 2026 15:01:10 +0000
Files and hashes: 1: FD1D3tD8Wgemy0D_hjVkHNyyffA.asa (hash: dC2+srWHZQSVqWN4gNxQ5m+5yJw+nSPbHERxoSOT3g8=)
2: HqsBKTydvRqdatyGGCtSDNF2wAc.crl (hash: 3wZ8WbITp2bRoOHzH5LpNaQ9uPesIZh8aPsW0+gXlFg=)
3: Ygz8nv_cil4CTr3aZUug7yPj4v8.roa (hash: PHkNGvc8VFiKuUZOzOtLVzJuZVZBuOD5WdBuF+PV+G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:c8:db:67:9d:bb:cc:ca:5a:aa:0f:19:64:ff:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Validity
Not Before: May 12 15:01:10 2026 GMT
Not After : May 13 15:01:10 2026 GMT
Subject: CN=0b3296675dfdf4a30037b85b72ac34fe32123fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:52:f5:48:e2:c0:11:a2:90:2e:04:c5:98:6e:
b0:ce:27:5e:7e:5d:a6:64:2c:93:6f:53:f3:9d:0a:
17:74:6c:cd:b8:d3:3d:28:10:52:ac:76:5b:7d:ea:
af:88:48:4e:36:6b:15:52:b7:21:f3:11:18:10:82:
26:fe:88:69:cf:c5:6c:36:10:5c:c5:12:f8:11:14:
63:f1:b3:b3:94:77:0b:fd:71:5c:66:3e:58:2c:b7:
bc:ec:08:ac:4b:42:b2:f1:e1:a0:5e:c8:79:fd:bc:
8c:fa:1d:d2:88:92:ba:f1:5c:22:0c:f1:a6:d9:a5:
67:38:78:d3:c9:81:8b:3d:58:47:29:37:da:db:f4:
08:66:ca:5b:0b:b6:16:cd:e4:68:e8:1a:eb:35:41:
b7:af:b1:b8:b7:98:47:fc:4b:36:1b:95:eb:5d:0d:
73:a3:be:b3:b2:ff:84:0a:27:fb:4c:c7:db:95:ad:
17:e5:fe:f2:12:ec:9e:4d:55:c9:8e:2d:cc:80:72:
86:3b:ff:4e:17:0b:88:4a:4f:0a:f2:80:c8:55:bd:
ba:ad:13:45:de:99:7d:7e:02:55:39:03:a1:4e:35:
a9:68:a9:40:07:4b:be:1e:1c:fe:ee:e3:9c:50:b4:
47:72:43:73:ba:64:45:17:89:ed:e0:9b:3c:5f:fe:
64:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:32:96:67:5D:FD:F4:A3:00:37:B8:5B:72:AC:34:FE:32:12:3F:AB
X509v3 Authority Key Identifier:
keyid:1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:4d:7b:aa:e4:55:15:10:d7:96:2d:32:54:0a:d9:cb:3c:5a:
27:25:b1:f7:35:9a:70:cf:dd:ce:30:0e:96:0e:bd:48:df:85:
a3:47:44:f5:91:92:8d:59:06:82:3d:8e:6c:94:2e:f4:45:59:
18:5a:73:f6:8a:8a:b3:d8:e0:95:d2:ff:50:69:d3:11:61:7e:
29:a0:ce:55:e6:44:4c:9e:65:db:e9:dd:81:98:f3:ac:f0:f1:
71:54:d0:cd:bd:c4:0a:4b:e5:70:9e:dc:f1:02:8d:1e:e1:f4:
c4:7d:1a:08:2d:c9:23:3f:3b:e8:67:fe:00:41:21:47:56:c9:
23:3f:d0:ad:24:14:e5:54:55:70:9f:b5:ea:c2:d1:72:38:29:
e9:b4:c2:a5:70:0f:4e:3b:95:ec:d2:4d:24:08:b7:24:09:fa:
5b:0d:83:70:33:aa:51:b2:d9:4e:6e:16:2a:ff:54:25:02:b3:
37:2c:5b:70:d1:30:42:eb:94:db:fb:70:7d:db:4f:57:20:6f:
89:1b:e3:a5:1c:ee:49:c7:13:33:ea:ae:27:85:25:b9:fd:e0:
ef:df:db:4b:17:50:b6:a8:e2:d6:50:79:7e:42:d1:2c:d1:c7:
d8:07:b5:fc:72:03:d2:3b:95:cb:93:1e:aa:f9:60:01:67:c1:
b3:de:56:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctMjbZ527zMpaqg8ZZP/9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYWIwMTI5M2M5ZGJkMWE5ZDZhZGM4NjE4MmI1MjBjZDE3
NmMwMDcwHhcNMjYwNTEyMTUwMTEwWhcNMjYwNTEzMTUwMTEwWjAzMTEwLwYDVQQD
EygwYjMyOTY2NzVkZmRmNGEzMDAzN2I4NWI3MmFjMzRmZTMyMTIzZmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVL1SOLAEaKQLgTFmG6wzidefl2m
ZCyTb1PznQoXdGzNuNM9KBBSrHZbfeqviEhONmsVUrch8xEYEIIm/ohpz8VsNhBc
xRL4ERRj8bOzlHcL/XFcZj5YLLe87AisS0Ky8eGgXsh5/byM+h3SiJK68VwiDPGm
2aVnOHjTyYGLPVhHKTfa2/QIZspbC7YWzeRo6BrrNUG3r7G4t5hH/Es2G5XrXQ1z
o76zsv+ECif7TMfbla0X5f7yEuyeTVXJji3MgHKGO/9OFwuISk8K8oDIVb26rRNF
3pl9fgJVOQOhTjWpaKlAB0u+Hhz+7uOcULRHckNzumRFF4nt4Js8X/5kswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsylmdd/fSjADe4W3KsNP4yEj+rMB8GA1UdIwQY
MBaAFB6rASk8nb0anWrchhgrUgzRdsAHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMDBjMTMtNzkxYS00ZTE1LWJhZjct
ZTAzYWM1ODlhMDNmLzEvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9jMDBjMTMtNzkxYS00ZTE1LWJhZjctZTAzYWM1ODlhMDNm
LzEvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnU17quRV
FRDXli0yVArZyzxaJyWx9zWacM/dzjAOlg69SN+Fo0dE9ZGSjVkGgj2ObJQu9EVZ
GFpz9oqKs9jgldL/UGnTEWF+KaDOVeZETJ5l2+ndgZjzrPDxcVTQzb3ECkvlcJ7c
8QKNHuH0xH0aCC3JIz876Gf+AEEhR1bJIz/QrSQU5VRVcJ+16sLRcjgp6bTCpXAP
TjuV7NJNJAi3JAn6Ww2DcDOqUbLZTm4WKv9UJQKzNyxbcNEwQuuU2/twfdtPVyBv
iRvjpRzuSccTM+quJ4Uluf3g79/bSxdQtqji1lB5fkLRLNHH2Ae1/HID0juVy5Me
qvlgAWfBs95WZg==
-----END CERTIFICATE-----
Generated at Wed May 13 00:40:54 2026 by rpki-client