Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
File: Hqemr7IbsUh0L2FV0aOa_I_H55w.mft (raw, json)
Hash identifier: Huof6fXvlPq0QMIm38v8R+olVZoj2mEUo4O+leQxgBk=
Subject key identifier: 89:CC:4A:37:4B:10:FE:DC:16:8C:C4:69:37:77:23:03:B6:D0:4E:B8
Authority key identifier: 1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
Certificate issuer: /CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Certificate serial: 019D26CD6C2CE413F0C099B70A9618F82F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
Manifest number: 11CA
Signing time: Wed 25 Mar 2026 21:01:29 +0000
Manifest this update: Wed 25 Mar 2026 21:01:29 +0000
Manifest next update: Thu 26 Mar 2026 21:01:29 +0000
Files and hashes: 1: Hqemr7IbsUh0L2FV0aOa_I_H55w.crl (hash: ZIkSARF0qvb0HsUAkgi6T6SNxUdTh8l7wkEjamSoKPw=)
2: fSE8Q3BHF-37hTlX0eyFzGv4iBc.roa (hash: pVD8HGH2rJXCl52itQj8YwGZtz7maygncTTWGAdWmOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:6c:2c:e4:13:f0:c0:99:b7:0a:96:18:f8:2f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Validity
Not Before: Mar 25 21:01:29 2026 GMT
Not After : Mar 26 21:01:29 2026 GMT
Subject: CN=89cc4a374b10fedc168cc46937772303b6d04eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:e6:5f:c2:4e:73:f6:f1:42:b5:85:76:4e:
ae:19:fc:34:b2:1f:2e:4d:74:07:5e:27:24:61:c2:
52:1e:bf:f6:a8:ea:44:b9:f1:aa:3b:73:3a:0d:6b:
65:6d:29:63:1f:26:34:8b:ea:95:fe:ac:2e:ee:56:
0f:b4:87:99:cf:b2:a7:cc:e6:69:1d:45:ef:d6:aa:
0a:c8:73:d2:36:c2:9d:8b:72:1d:bf:31:26:97:a9:
61:8c:8d:57:e1:86:8c:fd:a9:14:1c:4e:c7:36:c9:
dc:0b:d8:a1:c8:5d:1c:16:f2:de:9e:df:f4:a1:86:
39:22:1a:f4:94:5d:cd:08:36:14:5f:7b:f4:1c:6d:
09:df:e1:0a:7e:6d:e4:35:e6:f7:2a:30:9c:81:43:
b4:23:64:c4:07:e0:19:8c:c5:82:5b:12:33:5f:7e:
39:71:1b:42:c0:e6:ba:9b:c1:60:3e:fe:53:90:5a:
e8:50:f3:18:56:1d:ad:e3:77:57:32:f2:bb:05:91:
c5:56:cc:6d:a1:ea:db:54:20:5b:b0:d0:e1:52:22:
e5:f6:66:c6:1c:78:fa:75:22:64:ff:55:40:d1:90:
1c:2e:c9:51:53:19:8c:26:86:32:7c:fb:54:8d:6d:
9b:b3:a2:01:b2:fd:79:59:59:45:e8:dc:54:7e:85:
37:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CC:4A:37:4B:10:FE:DC:16:8C:C4:69:37:77:23:03:B6:D0:4E:B8
X509v3 Authority Key Identifier:
keyid:1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4a:22:7c:56:de:77:2a:a8:fb:35:4a:ce:df:1a:ef:68:c3:
c2:63:7f:d1:5e:eb:10:6d:04:81:da:5c:ac:26:0f:8d:cf:00:
98:c6:7e:d1:d3:c9:2e:ec:5e:03:67:38:a9:89:20:e7:66:0d:
4b:b4:ea:91:80:36:5c:d1:75:c4:c3:96:94:fc:8d:d8:76:e9:
2b:59:23:e0:18:d5:aa:c7:df:56:1b:e6:c7:40:da:5d:7f:32:
0a:9f:e5:72:8f:aa:4c:db:e3:9e:4a:0f:95:9d:2d:94:77:62:
8e:04:26:75:dc:5a:e8:b1:a5:4d:77:68:4a:69:3d:17:6e:b9:
94:1e:ae:bc:3c:51:19:70:f4:63:1d:4c:60:f1:da:db:8d:df:
e0:e5:a6:30:9f:b1:a2:48:80:be:ea:42:bb:f1:9b:0a:3f:f0:
e1:9f:72:53:a8:4d:dc:f9:01:51:9a:e7:f5:0e:9a:dc:33:a7:
bd:ec:8c:2f:f0:d5:5d:df:62:0b:21:90:e3:61:3f:af:c4:bb:
f7:0d:6b:d9:f0:cb:79:87:61:50:2f:e1:85:f8:3e:d3:0b:81:
7e:a9:7b:ed:d0:74:91:ef:f9:03:2b:31:fd:85:0d:23:1e:f9:
a4:de:c0:bd:7e:6a:94:8b:33:f1:28:b3:28:d4:8e:4b:fe:f3:
42:01:c1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:28 2026 by rpki-client