Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
File: HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft (raw, json)
Hash identifier: kh7DBm0tPpLZTQztBNWVy1+62HKd9rhDeeS1dN9vr/k=
Subject key identifier: 3A:50:77:2E:4B:E4:52:D5:E6:4D:41:37:04:9F:A7:E9:5D:EE:AB:0F
Authority key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
Certificate issuer: /CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Certificate serial: 019F94DC5BC84AFC2A33D32D74EF8CBE955C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
Manifest number: 085C
Signing time: Fri 24 Jul 2026 16:01:36 +0000
Manifest this update: Fri 24 Jul 2026 16:01:36 +0000
Manifest next update: Sat 25 Jul 2026 16:01:36 +0000
Files and hashes: 1: HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl (hash: Ltr+a2O36GuX4Jed1vslJ+wGXwYi/xUKmhdRfxVDts8=)
2: m8GmWxaGzhbyfzeA3jXtYZtS49c.roa (hash: ufyYBYKdtvNPQKTZ7RHmH34YskTQ9OHfZWJp++dRaZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:5b:c8:4a:fc:2a:33:d3:2d:74:ef:8c:be:95:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Validity
Not Before: Jul 24 16:01:36 2026 GMT
Not After : Jul 25 16:01:36 2026 GMT
Subject: CN=3a50772e4be452d5e64d4137049fa7e95deeab0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:e9:e3:69:75:6a:c9:f7:8e:00:4e:0d:28:
61:39:61:ac:87:3f:73:2a:d2:47:91:5a:35:8f:7b:
25:98:5a:7a:a7:af:03:ff:47:e1:14:bf:6b:a8:9f:
73:5a:26:69:ee:76:5b:90:98:52:17:36:6f:1a:db:
1a:dd:55:fe:cf:1b:10:d1:6c:8b:c5:3d:84:2c:ff:
75:15:77:7c:be:70:26:6f:39:ca:e4:f5:fd:5a:42:
8b:eb:93:b6:e8:95:00:31:d9:2d:c1:23:04:3b:57:
b6:5e:7b:a1:b1:7b:4c:4a:70:ec:08:25:68:5d:45:
d7:7a:12:0b:5e:d1:df:82:a2:2d:6a:28:d2:f5:d0:
81:8f:65:58:02:90:8e:dc:90:8c:b8:d2:f4:88:89:
92:fd:34:ae:b8:b4:17:43:c2:e1:cb:4d:30:b9:a2:
fb:ca:ee:90:ea:a2:b0:8a:76:a9:08:56:c4:75:a0:
8b:2e:dc:8a:9f:b1:02:f1:79:09:0e:e7:1d:91:b5:
03:73:4d:46:51:08:a9:78:cc:b5:32:0e:74:94:3a:
27:01:25:9b:56:38:b0:40:36:0d:03:4f:f0:57:41:
f4:f9:03:02:41:2a:c4:e6:a0:f9:33:a7:10:c6:20:
2d:02:dd:7f:35:80:65:53:27:91:3c:49:26:5f:9a:
dc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:50:77:2E:4B:E4:52:D5:E6:4D:41:37:04:9F:A7:E9:5D:EE:AB:0F
X509v3 Authority Key Identifier:
keyid:1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:de:19:65:3c:76:5f:58:af:2f:23:9e:dc:33:da:f6:f2:90:
fc:fa:63:d2:46:7a:91:9e:62:cf:70:4a:ab:41:44:fd:32:fa:
de:34:dd:7d:b5:69:0d:43:ac:3c:46:bc:81:60:73:db:96:ca:
8f:5b:b2:6f:b4:2b:96:2e:19:38:64:45:3e:3e:c8:20:4f:e7:
da:b8:8d:8b:04:32:23:bc:d8:95:5a:b6:78:28:fd:22:9b:f8:
14:40:f7:58:40:e9:7b:7b:fd:22:02:af:bd:17:2f:55:4c:4b:
51:14:d6:c5:4e:ab:b3:0a:a4:8c:29:77:3a:6a:47:54:3a:d7:
72:74:e1:5e:63:19:a5:b9:96:dd:9c:07:ff:e9:1a:b7:4a:26:
c2:b5:3e:9c:d1:9e:41:19:f7:cf:57:80:d0:50:f1:c2:db:c8:
5f:cb:52:d1:d2:84:5a:e1:23:03:cd:65:82:64:c7:12:c1:8b:
ec:4b:e0:15:f2:3d:4e:cf:b0:8b:da:73:e1:f9:cf:c7:dc:36:
1a:f6:04:72:63:eb:f7:e2:9c:e0:04:86:c0:d9:66:46:73:a2:
e9:3a:92:e4:a1:26:9f:9d:7a:ea:4f:ab:cd:8a:b6:2c:bd:02:
fc:af:25:04:61:76:bf:56:91:b3:b2:be:2d:74:fa:c4:6b:9c:
c1:c7:d0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:15 2026 by rpki-client