Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
File: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft (raw, json)
Hash identifier: nlbgB5d5ZPTTU1LK7qt81Pna9cTVOoeskr9zRJmPt6A=
Subject key identifier: A6:2E:6E:29:8E:FC:50:85:AE:22:D5:CA:58:2E:D8:BA:9D:62:D1:CF
Authority key identifier: 86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
Certificate issuer: /CN=86c4112efc9bed84761d3678b87c483948d2a72f
Certificate serial: 019D28165855176008CC5E47C503B141A9B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
Manifest number: 15BD
Signing time: Thu 26 Mar 2026 03:00:46 +0000
Manifest this update: Thu 26 Mar 2026 03:00:46 +0000
Manifest next update: Fri 27 Mar 2026 03:00:46 +0000
Files and hashes: 1: ZLAxEh4litD4nIq8JP6jHqrQBEI.roa (hash: wOnTcEEXKGcVn5w5YtBIgaG5tAO0klLqAJlQ/7xmzWI=)
2: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl (hash: 7YNmljNaQ9numMy0RPzxg5ACwFyuzhn9E4MsJkSUWp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:58:55:17:60:08:cc:5e:47:c5:03:b1:41:a9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86c4112efc9bed84761d3678b87c483948d2a72f
Validity
Not Before: Mar 26 03:00:46 2026 GMT
Not After : Mar 27 03:00:46 2026 GMT
Subject: CN=a62e6e298efc5085ae22d5ca582ed8ba9d62d1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:e9:61:72:2b:c2:96:d1:a4:51:82:75:af:
6b:ba:7b:0c:58:7d:bd:a1:1b:9d:63:4a:82:0f:b0:
ff:1f:ed:47:bb:f4:95:19:ce:e4:05:ac:54:75:99:
a2:27:b4:95:00:a2:ea:fc:3e:fe:e1:e6:10:b9:bf:
0b:07:4b:ce:76:ce:a5:56:4a:18:db:04:21:4a:b8:
a9:e8:66:41:f8:9d:59:52:33:de:3a:e7:24:c2:4e:
bc:42:69:73:bd:84:02:ea:75:ef:7c:4c:da:ca:80:
d5:73:33:cf:6f:f1:f5:9f:ac:91:2a:03:b8:eb:3b:
a5:6a:a4:a2:3a:82:6f:fb:1b:63:87:f7:60:3b:61:
12:46:c2:2d:fa:e6:ab:e0:b3:6a:47:e7:06:65:a7:
ec:24:8c:f5:a0:3c:e2:eb:30:f9:1f:be:13:00:ad:
85:7e:49:e5:d6:df:f3:e9:e4:3f:5a:36:8e:66:56:
3d:b3:51:14:f1:16:68:2b:1e:8a:c1:03:8a:8a:d8:
86:e8:b8:9b:65:e1:d4:fe:21:99:e5:54:02:d4:4d:
5b:7d:25:d8:6e:d4:89:6f:a0:bd:a5:90:36:96:b6:
b0:61:5d:38:36:60:95:8f:dc:da:66:64:7f:ea:74:
91:cb:61:08:76:1e:e7:87:03:83:f5:e4:5d:6c:51:
8e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2E:6E:29:8E:FC:50:85:AE:22:D5:CA:58:2E:D8:BA:9D:62:D1:CF
X509v3 Authority Key Identifier:
keyid:86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:16:bb:94:e5:a3:57:a6:aa:49:84:42:78:2a:25:4f:69:4f:
52:37:d0:9e:b1:d7:75:19:8c:53:83:a9:9a:f3:70:da:5b:52:
3e:ac:ae:a9:13:bf:96:ec:09:56:6b:51:3a:c7:0f:b1:a3:07:
76:29:e3:74:a4:44:e6:ee:44:94:a6:37:52:cd:5e:13:54:a3:
46:41:29:de:e1:b7:bb:b9:e6:45:e7:ed:a3:6b:6b:78:0b:17:
31:e0:5c:9e:3a:8b:b2:83:b2:15:89:e7:c0:49:44:20:55:b3:
75:d4:56:5b:99:ce:a6:8c:1f:82:82:f9:d6:e5:a6:b8:c0:72:
db:90:a1:80:fa:0a:67:3e:22:65:70:15:fa:13:00:07:7a:7b:
9a:03:21:0e:8d:88:b2:af:f4:d1:54:9f:6a:44:30:1a:f9:a6:
6b:32:c4:79:94:e9:fc:bc:0d:2b:25:a8:aa:8d:8f:c0:41:7f:
42:89:c3:e5:47:80:a5:8d:a0:f7:15:42:92:88:ed:39:39:1a:
66:dc:55:d2:1a:1b:f2:34:d1:c2:e5:f3:f0:a7:b8:c8:16:48:
f3:3f:69:9b:55:2a:be:5d:86:aa:0d:f6:58:62:09:f1:8f:1d:
16:e2:ad:82:af:68:8b:1b:62:32:b6:6f:86:83:d1:8b:90:5a:
6f:df:57:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:24:08 2026 by rpki-client