Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
File: HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft (raw, json)
Hash identifier: mewR2GyYUV+XBZpYKHwesyGVBViKie+MfzhiZcG4pCQ=
Subject key identifier: 88:65:53:64:2D:43:80:BD:FE:A8:A0:38:7E:BE:AA:B6:28:0A:3F:6C
Authority key identifier: 1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B
Certificate issuer: /CN=1d0260406e837ae38380fcc8d992b93d0de1a83b
Certificate serial: 019D29609231D16966EBBE1CB1C24A4DB8BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
Manifest number: 0DA9
Signing time: Thu 26 Mar 2026 09:01:27 +0000
Manifest this update: Thu 26 Mar 2026 09:01:27 +0000
Manifest next update: Fri 27 Mar 2026 09:01:27 +0000
Files and hashes: 1: HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl (hash: cEHn26BSav7WOdleRLrlel8S2X0G5EahPkhZ2U8qMhw=)
2: bdOQfAWdL7wiwVEQoYOuUBY_f9o.roa (hash: nNRgBnyPBnuWyk/W/uELLwEd7uoijhFF49TNbx1XS78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:92:31:d1:69:66:eb:be:1c:b1:c2:4a:4d:b8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0260406e837ae38380fcc8d992b93d0de1a83b
Validity
Not Before: Mar 26 09:01:27 2026 GMT
Not After : Mar 27 09:01:27 2026 GMT
Subject: CN=886553642d4380bdfea8a0387ebeaab6280a3f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:36:79:2e:91:68:04:f8:94:47:f3:b5:42:
af:e2:46:bd:5a:b3:f7:09:f1:3b:e2:eb:1e:3f:4d:
41:ad:88:62:b4:bd:76:1d:20:a9:db:f3:42:16:19:
ae:23:2a:29:ea:c6:27:0b:c7:77:91:cf:f6:63:2c:
4a:29:6f:cd:7d:a9:d6:c4:b9:f9:db:2f:fa:b0:35:
45:00:52:4c:86:5e:d5:69:9a:b1:46:62:0d:db:e6:
17:4b:0e:1c:43:ee:37:d8:ec:db:72:80:04:47:68:
3b:0a:63:c0:32:9b:51:36:32:ad:96:13:4a:78:81:
7a:7d:d6:0b:89:4e:4f:fd:32:6a:71:ac:f3:1a:a8:
3f:60:0d:56:d3:5f:a5:6d:99:4e:45:b1:d0:cb:cd:
8b:e1:4e:f2:64:3e:4f:7a:e7:f7:2b:6b:0f:39:f9:
6c:7a:5f:cc:ac:0b:be:1e:90:c3:42:66:ae:17:ab:
4e:7c:b5:fa:c9:1a:f3:92:cb:44:bb:bd:b3:d1:ed:
79:74:1e:80:66:21:b7:c2:e5:ab:b4:d5:23:66:f3:
b3:ca:c0:42:36:ea:68:2d:cc:e0:11:34:6a:55:f2:
05:18:ab:6b:67:73:49:9a:c3:84:f7:e7:6d:e2:8b:
07:c6:67:40:65:0f:00:5f:04:fa:c8:b0:bc:2c:62:
cd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:65:53:64:2D:43:80:BD:FE:A8:A0:38:7E:BE:AA:B6:28:0A:3F:6C
X509v3 Authority Key Identifier:
keyid:1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b7:fc:50:6f:a3:78:96:35:bd:3a:36:76:fe:ec:2f:9f:f4:
0c:57:51:dc:2f:fd:70:88:00:3c:75:9a:73:1b:5e:84:09:5c:
ce:e3:33:90:a0:84:95:88:00:b9:ef:f0:58:74:75:17:51:88:
19:2d:9f:70:60:92:e9:71:35:6f:8a:10:5a:54:02:05:bd:97:
a8:20:83:b5:ee:73:38:4a:11:9c:ca:8e:74:42:1b:04:d1:c8:
9b:c8:fc:c7:dd:2c:ac:7d:a8:04:26:50:ad:d1:dd:2a:77:f8:
60:e9:e5:16:77:2b:5c:f7:5a:3e:cb:68:e6:6a:d6:52:71:00:
a2:62:f9:d1:4c:2d:2d:c6:ca:46:1b:48:01:4d:fc:4f:81:48:
70:8c:ac:34:7d:95:d0:0e:4d:94:fd:48:90:44:86:d0:e3:c2:
e9:34:03:34:35:2c:36:8e:60:e7:c2:78:0e:05:0c:12:32:1f:
77:8d:30:17:d5:b0:28:0e:0c:ce:1f:c5:cd:6b:c4:f1:0e:19:
30:c9:b1:ea:17:7d:a9:b2:f6:5b:e7:b3:99:b4:fa:e2:8b:d2:
87:2e:7a:0a:56:21:e2:f5:cf:13:28:2a:4e:e6:33:f7:95:18:
f1:05:39:b1:12:38:e1:ba:d1:94:5c:e5:ef:ed:f3:2b:cf:50:
72:4a:b5:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYJIx0Wlm674cscJKTbi8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMDI2MDQwNmU4MzdhZTM4MzgwZmNjOGQ5OTJiOTNkMGRl
MWE4M2IwHhcNMjYwMzI2MDkwMTI3WhcNMjYwMzI3MDkwMTI3WjAzMTEwLwYDVQQD
Eyg4ODY1NTM2NDJkNDM4MGJkZmVhOGEwMzg3ZWJlYWFiNjI4MGEzZjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuII2eS6RaAT4lEfztUKv4ka9WrP3
CfE74useP01BrYhitL12HSCp2/NCFhmuIyop6sYnC8d3kc/2YyxKKW/NfanWxLn5
2y/6sDVFAFJMhl7VaZqxRmIN2+YXSw4cQ+432OzbcoAER2g7CmPAMptRNjKtlhNK
eIF6fdYLiU5P/TJqcazzGqg/YA1W01+lbZlORbHQy82L4U7yZD5Peuf3K2sPOfls
el/MrAu+HpDDQmauF6tOfLX6yRrzkstEu72z0e15dB6AZiG3wuWrtNUjZvOzysBC
NupoLczgETRqVfIFGKtrZ3NJmsOE9+dt4osHxmdAZQ8AXwT6yLC8LGLNSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhlU2QtQ4C9/qigOH6+qrYoCj9sMB8GA1UdIwQY
MBaAFB0CYEBug3rjg4D8yNmSuT0N4ag7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFKZ1FHNkRldU9EZ1B6STJaSzVQUTNocURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zNDAwMzEtMzY1Yi00ZmQyLTg3MzIt
OGMwZmFjYTNjYmQ4LzEvSFFKZ1FHNkRldU9EZ1B6STJaSzVQUTNocURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8zNDAwMzEtMzY1Yi00ZmQyLTg3MzItOGMwZmFjYTNjYmQ4
LzEvSFFKZ1FHNkRldU9EZ1B6STJaSzVQUTNocURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7f8UG+j
eJY1vTo2dv7sL5/0DFdR3C/9cIgAPHWacxtehAlczuMzkKCElYgAue/wWHR1F1GI
GS2fcGCS6XE1b4oQWlQCBb2XqCCDte5zOEoRnMqOdEIbBNHIm8j8x90srH2oBCZQ
rdHdKnf4YOnlFncrXPdaPsto5mrWUnEAomL50UwtLcbKRhtIAU38T4FIcIysNH2V
0A5NlP1IkESG0OPC6TQDNDUsNo5g58J4DgUMEjIfd40wF9WwKA4Mzh/FzWvE8Q4Z
MMmx6hd9qbL2W+ezmbT64ovShy56ClYh4vXPEygqTuYz95UY8QU5sRI44brRlFzl
7+3zK89Qckq12w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:29:39 2026 by rpki-client