Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
File: HqsBKTydvRqdatyGGCtSDNF2wAc.mft (raw, json)
Hash identifier: gsOgF6gjNNa+q+MAsDgW6Rr8dBWC7La8zvorG80sShI=
Subject key identifier: F6:27:ED:C4:3B:83:91:2E:D7:BF:CA:E9:EB:7E:67:0A:AF:A3:B7:A1
Authority key identifier: 1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
Certificate issuer: /CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Certificate serial: 019D258438772FD0E2B5D1912A2C099B2C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
Manifest number: 1638
Signing time: Wed 25 Mar 2026 15:01:55 +0000
Manifest this update: Wed 25 Mar 2026 15:01:55 +0000
Manifest next update: Thu 26 Mar 2026 15:01:55 +0000
Files and hashes: 1: FD1D3tD8Wgemy0D_hjVkHNyyffA.asa (hash: dC2+srWHZQSVqWN4gNxQ5m+5yJw+nSPbHERxoSOT3g8=)
2: HqsBKTydvRqdatyGGCtSDNF2wAc.crl (hash: /A+2D+z1J75x9unPQqCCf6zh8z2ceHvI288WzJQ02LU=)
3: Ygz8nv_cil4CTr3aZUug7yPj4v8.roa (hash: PHkNGvc8VFiKuUZOzOtLVzJuZVZBuOD5WdBuF+PV+G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:38:77:2f:d0:e2:b5:d1:91:2a:2c:09:9b:2c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Validity
Not Before: Mar 25 15:01:55 2026 GMT
Not After : Mar 26 15:01:55 2026 GMT
Subject: CN=f627edc43b83912ed7bfcae9eb7e670aafa3b7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:c2:dc:8d:6e:4d:09:75:cc:a1:42:ac:20:
2b:71:08:d7:1d:7e:f2:05:29:98:72:eb:83:91:96:
6e:40:d5:4b:00:dd:f7:44:bd:c9:69:79:9d:af:0e:
87:03:06:23:cd:70:99:b2:a0:e0:f0:76:9d:96:84:
52:54:1b:63:a1:1a:37:f4:2c:90:bf:d3:3d:f6:10:
50:e6:16:41:b0:e2:a0:64:15:b5:2e:08:ba:06:9c:
44:15:f2:ee:36:07:fb:99:43:87:a3:21:ed:ae:85:
93:50:74:f9:93:db:98:53:50:f3:28:47:73:42:19:
0c:ae:4f:1d:86:1a:57:9f:59:57:51:c0:3b:5a:4d:
d9:b1:91:95:e1:f1:49:44:4d:89:77:c5:9b:ae:ba:
a4:10:82:4e:ef:b1:6c:b9:77:e9:91:66:a2:26:d3:
3b:00:5f:bd:f7:d2:51:db:db:a5:e3:11:79:f3:41:
3a:8e:14:d8:8d:5a:c1:86:12:2f:23:6f:67:2c:dd:
d8:d0:bb:97:b1:55:46:09:06:dd:78:90:c1:77:ff:
5a:a8:3f:7a:71:93:ab:6a:15:88:22:33:15:d2:85:
e4:bc:64:ef:0a:f9:42:51:6c:aa:90:68:2e:8d:e9:
dc:f5:ad:68:80:7e:79:cc:ea:de:dd:72:61:e6:0b:
c0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:27:ED:C4:3B:83:91:2E:D7:BF:CA:E9:EB:7E:67:0A:AF:A3:B7:A1
X509v3 Authority Key Identifier:
keyid:1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7f:bf:82:81:2f:70:f1:30:c4:80:89:fd:dc:06:75:37:e3:
4a:60:64:99:c5:e5:35:47:df:a7:6c:f0:a7:77:a1:23:63:2b:
46:43:2a:2e:29:b0:65:39:4e:08:81:02:f7:2f:69:59:c2:86:
0c:41:95:33:79:4c:79:42:e3:3f:db:86:b2:c7:d2:c9:48:0f:
95:f7:44:fe:c3:3c:7e:64:8d:14:25:94:ae:0d:01:c0:93:78:
5a:a3:a6:40:70:31:20:85:79:5c:26:cb:19:26:07:29:0a:a8:
e7:09:e7:98:ef:41:9b:15:bd:c9:52:03:f3:96:47:61:0c:38:
46:2b:c4:97:00:6b:6f:0c:eb:95:7b:3a:89:f1:ae:ff:e2:10:
56:6d:39:e7:22:0c:b8:ca:e6:1e:5f:e9:40:35:4a:9a:c9:e9:
4d:f6:2b:2a:0e:d3:95:43:1a:48:6d:6b:0c:1b:a6:9c:98:db:
29:1f:97:1d:98:ba:e9:ee:d8:08:19:6d:7e:85:78:df:cc:94:
74:51:9f:97:b0:00:17:9b:b7:3e:dc:b5:67:3e:b1:bd:80:54:
c0:ce:78:60:b4:7e:aa:a5:97:e3:b7:40:99:e6:a0:02:a9:32:
87:bf:aa:48:e2:70:0c:3b:a8:db:a2:05:eb:0d:e0:b3:df:44:
42:24:0f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:06:58 2026 by rpki-client