Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
File: HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft (raw, json)
Hash identifier: fHmwoWD+iT8ICmUx2Z3QM2JnThMGPAAVCUNAGrHiJW4=
Subject key identifier: F4:1F:F3:CF:90:02:D3:54:CD:A8:62:9B:AB:75:B9:B0:68:BE:1D:F2
Authority key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
Certificate issuer: /CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Certificate serial: 019D28F26B5ABB22A09B0456103CA4060BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
Manifest number: 071B
Signing time: Thu 26 Mar 2026 07:01:08 +0000
Manifest this update: Thu 26 Mar 2026 07:01:08 +0000
Manifest next update: Fri 27 Mar 2026 07:01:08 +0000
Files and hashes: 1: HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl (hash: dOrEKx/bixy78p8T0hOIbdXCIPwSbODLnpOgjsufY3o=)
2: m8GmWxaGzhbyfzeA3jXtYZtS49c.roa (hash: ufyYBYKdtvNPQKTZ7RHmH34YskTQ9OHfZWJp++dRaZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:6b:5a:bb:22:a0:9b:04:56:10:3c:a4:06:0b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Validity
Not Before: Mar 26 07:01:08 2026 GMT
Not After : Mar 27 07:01:08 2026 GMT
Subject: CN=f41ff3cf9002d354cda8629bab75b9b068be1df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:51:44:25:cf:bc:7d:53:8d:2c:c6:1c:ea:2c:
76:0a:5b:f3:f6:0b:b7:06:9f:09:f4:29:e3:0b:82:
70:ba:3c:f1:33:f9:12:7f:73:95:82:0a:63:92:9f:
4c:92:42:d7:6b:be:13:ee:af:36:6a:5f:ae:f8:f2:
69:e9:68:e9:f9:7f:52:8a:3f:c7:37:8e:15:d3:ba:
f7:21:7d:1d:77:24:30:1d:bc:76:49:99:37:5c:b4:
b9:3d:f8:e2:ea:a1:b3:fe:7d:6c:6a:a6:88:60:1b:
9c:3c:0b:29:2b:42:d0:8d:8e:f1:49:a7:73:b0:2b:
ec:61:e6:ae:d7:eb:ec:38:7f:72:76:4d:b6:c8:10:
ae:be:4d:96:20:30:94:95:2e:a6:f5:b7:de:43:3d:
0c:21:ca:12:46:65:fc:1a:7c:62:61:d0:fc:d7:42:
16:ae:e1:62:55:3e:03:6a:2a:a4:69:7c:c7:8b:17:
9c:4d:0a:18:e9:31:62:dd:fd:63:7f:8d:19:be:c5:
41:59:51:72:a9:d0:97:8b:9d:e3:0f:94:f5:59:f6:
b8:71:7e:69:ce:38:9e:22:14:90:0b:7b:f5:e6:60:
e9:fc:3d:1a:a0:95:05:e3:d2:ac:79:f4:58:92:54:
a2:37:89:ad:43:3f:3b:65:d8:96:ce:f7:b0:e1:e4:
51:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1F:F3:CF:90:02:D3:54:CD:A8:62:9B:AB:75:B9:B0:68:BE:1D:F2
X509v3 Authority Key Identifier:
keyid:1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:cc:ac:13:e4:85:3f:5b:c1:69:59:93:48:d5:77:85:86:bb:
91:4d:20:6d:7c:1c:96:f7:4a:1e:fa:1d:51:2e:0d:fe:b9:cf:
71:cf:a3:53:a7:27:b1:26:7a:fd:18:81:d7:67:fe:22:fc:d2:
00:4f:a2:48:f0:05:72:b5:15:c4:e4:cb:3b:29:cb:83:e6:c7:
a1:9d:e6:61:72:b4:6a:27:2f:d1:22:fe:4e:b3:e9:bc:7c:3d:
9a:f1:a7:66:d8:5b:39:e9:c7:ab:7f:71:90:06:58:c3:69:a8:
d7:53:d2:0f:5d:d7:1d:76:b8:d3:ef:9f:85:12:3b:ef:fd:5d:
ef:71:66:b2:d5:6e:62:47:8a:1b:2e:52:ec:a3:78:45:8d:40:
1d:99:66:d2:83:45:f5:d3:dc:1e:1e:8c:f3:81:c2:71:32:5e:
5d:37:77:e0:f9:7d:42:7c:1a:e4:ae:7f:de:35:c8:0a:53:6a:
eb:f6:af:e6:dc:ef:9d:61:ac:57:35:10:a6:e9:92:99:58:89:
3f:6c:1d:44:2f:33:e9:42:16:c9:0a:23:53:12:ee:c4:e4:3e:
ce:5b:74:e7:19:e4:9c:4d:72:57:bf:cb:52:06:05:cc:e8:d2:
29:93:02:73:d3:00:8e:2c:a4:2a:d0:a0:2a:05:66:91:d2:4a:
e7:60:85:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8mtauyKgmwRWEDykBgu0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjY2FhYjBiMGRlZmM5M2MzMmY4MGM0NGIwODJmYjI5MDVm
MjNjNjIwHhcNMjYwMzI2MDcwMTA4WhcNMjYwMzI3MDcwMTA4WjAzMTEwLwYDVQQD
EyhmNDFmZjNjZjkwMDJkMzU0Y2RhODYyOWJhYjc1YjliMDY4YmUxZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFFEJc+8fVONLMYc6ix2Clvz9gu3
Bp8J9CnjC4JwujzxM/kSf3OVggpjkp9MkkLXa74T7q82al+u+PJp6Wjp+X9Sij/H
N44V07r3IX0ddyQwHbx2SZk3XLS5Pfji6qGz/n1saqaIYBucPAspK0LQjY7xSadz
sCvsYeau1+vsOH9ydk22yBCuvk2WIDCUlS6m9bfeQz0MIcoSRmX8GnxiYdD810IW
ruFiVT4DaiqkaXzHixecTQoY6TFi3f1jf40ZvsVBWVFyqdCXi53jD5T1Wfa4cX5p
zjieIhSQC3v15mDp/D0aoJUF49KsefRYklSiN4mtQz87ZdiWzvew4eRRlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQf88+QAtNUzahim6t1ubBovh3yMB8GA1UdIwQY
MBaAFBzKqwsN78k8MvgMRLCC+ykF8jxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83ODdhYWUtMTEzMS00ZDljLTg1OTQt
Njk0N2YwMmFjNmFmLzEvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy83ODdhYWUtMTEzMS00ZDljLTg1OTQtNjk0N2YwMmFjNmFm
LzEvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzsysE+SF
P1vBaVmTSNV3hYa7kU0gbXwclvdKHvodUS4N/rnPcc+jU6cnsSZ6/RiB12f+IvzS
AE+iSPAFcrUVxOTLOynLg+bHoZ3mYXK0aicv0SL+TrPpvHw9mvGnZthbOenHq39x
kAZYw2mo11PSD13XHXa40++fhRI77/1d73FmstVuYkeKGy5S7KN4RY1AHZlm0oNF
9dPcHh6M84HCcTJeXTd34Pl9Qnwa5K5/3jXIClNq6/av5tzvnWGsVzUQpumSmViJ
P2wdRC8z6UIWyQojUxLuxOQ+zlt05xnknE1yV7/LUgYFzOjSKZMCc9MAjiykKtCg
KgVmkdJK52CFwg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:06:56 2026 by rpki-client