Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.mft
File: HqzGEKc4PxkkhnIDC9mkR80JQck.mft (raw, json)
Hash identifier: x5572poFjnPlqKvsaDcb9xwAu/nwg7nTjMDa3w5Wbxw=
Subject key identifier: E3:8C:FC:60:C4:B7:68:61:6B:90:B3:66:FD:77:6E:AF:E6:CA:E1:D6
Authority key identifier: 1E:AC:C6:10:A7:38:3F:19:24:86:72:03:0B:D9:A4:47:CD:09:41:C9
Certificate issuer: /CN=1eacc610a7383f19248672030bd9a447cd0941c9
Certificate serial: 019D273AFE442523EF6C0251C49AD6C62D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqzGEKc4PxkkhnIDC9mkR80JQck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.mft
Manifest number: 01AC
Signing time: Wed 25 Mar 2026 23:01:10 +0000
Manifest this update: Wed 25 Mar 2026 23:01:10 +0000
Manifest next update: Thu 26 Mar 2026 23:01:10 +0000
Files and hashes: 1: HqzGEKc4PxkkhnIDC9mkR80JQck.crl (hash: +sinqu/4yKVc2uVqh4qPZyj6aCgjHQj9XL5umdEaMrY=)
2: w5DFMmGugpC2zayHbrP3eIF5NMk.roa (hash: w1SpHPQ303joyUlwp38GwAgUdaYGdvz45URhf02GNpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqzGEKc4PxkkhnIDC9mkR80JQck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:fe:44:25:23:ef:6c:02:51:c4:9a:d6:c6:2d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eacc610a7383f19248672030bd9a447cd0941c9
Validity
Not Before: Mar 25 23:01:10 2026 GMT
Not After : Mar 26 23:01:10 2026 GMT
Subject: CN=e38cfc60c4b768616b90b366fd776eafe6cae1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:8b:78:27:3d:b4:17:c1:15:e3:e0:c9:f4:
0e:9b:9e:f1:d1:14:69:01:ca:01:fa:1d:1e:89:1e:
81:6b:2b:22:e3:ed:33:5a:04:97:87:61:ee:4d:06:
99:1a:d2:ec:f8:1e:c8:5e:4b:19:49:82:23:3a:e0:
16:da:38:a6:0a:1e:6b:44:46:77:7b:72:da:fc:65:
c7:4e:84:b5:db:93:06:88:50:14:20:a8:27:fb:63:
4b:a6:ee:46:25:37:6b:45:0f:80:88:a7:9e:50:0c:
cc:37:1f:73:e1:45:e9:df:53:66:43:6e:03:ad:00:
ab:d7:3e:f9:67:36:b0:88:6b:21:41:30:9e:72:23:
da:39:67:e9:07:48:ad:51:67:7c:3f:0b:64:0e:50:
a6:bc:e6:95:f4:de:b2:05:b3:01:21:c6:5c:05:fe:
75:2e:03:7d:5f:94:08:a0:1f:34:8d:c2:ab:bf:e6:
1a:46:75:21:26:25:35:9b:4d:3b:88:fd:33:c7:04:
38:0e:9f:a4:83:a0:5e:72:cf:e5:e1:33:83:57:a1:
ed:6f:f3:44:5a:d5:78:31:a4:ee:76:41:eb:d0:ca:
af:0c:f4:fd:c4:e5:cd:51:13:81:0b:e7:b3:52:d2:
27:f0:f6:ee:2f:9d:b9:e2:36:25:ef:c0:b9:33:30:
d4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8C:FC:60:C4:B7:68:61:6B:90:B3:66:FD:77:6E:AF:E6:CA:E1:D6
X509v3 Authority Key Identifier:
keyid:1E:AC:C6:10:A7:38:3F:19:24:86:72:03:0B:D9:A4:47:CD:09:41:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqzGEKc4PxkkhnIDC9mkR80JQck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1a:1c:bf:5e:26:ac:7b:e9:a8:5d:96:19:f4:0c:8f:03:50:
ac:c3:9f:08:14:fe:42:cb:58:16:62:81:58:b8:8c:20:0b:dc:
0a:88:02:3e:02:0d:71:bc:81:cf:af:bf:a3:3a:8c:cf:8c:e9:
dc:cc:ba:ae:3d:c5:c9:a6:4e:04:87:a2:f4:68:94:a0:f1:4f:
b9:8b:4e:d2:c6:02:06:90:12:e4:43:46:dd:cd:ec:8a:8e:f5:
42:a0:06:be:63:ee:61:a9:f5:31:cc:c7:1e:c1:8c:b2:f9:2d:
31:40:7e:d1:f5:53:b6:6b:7f:66:a0:14:b9:66:58:29:8b:0e:
01:0c:74:c4:fa:5d:ad:71:b5:9c:65:24:5e:5c:3b:f0:38:54:
f7:9a:1a:07:7d:29:0f:75:30:6a:e6:f5:41:f9:ef:d1:75:c2:
1e:81:0d:5d:d8:70:8d:0a:76:82:a3:68:69:0d:03:75:e9:01:
9f:2f:58:0e:9d:b8:12:ef:27:a5:07:ed:c2:68:70:30:35:b2:
26:6c:fe:cc:bf:f5:f0:9f:69:33:07:c2:a2:e4:36:7d:bc:7a:
29:34:60:73:12:96:b1:ff:11:f3:fe:c6:84:36:ed:69:96:8a:
74:ff:0e:0c:56:43:7c:64:0d:e2:3c:9d:51:d5:a3:cd:66:77:
a1:4f:e7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:08 2026 by rpki-client