Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
File: HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft (raw, json)
Hash identifier: llWkFBbCKwlGjPX9rzn0iO85ZkgV6j5peFm0GykuLD8=
Subject key identifier: 28:96:F7:D4:AB:81:12:6F:68:A2:F6:9E:FB:A7:9C:DF:66:6C:89:10
Authority key identifier: 1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93
Certificate issuer: /CN=1eaa87c6f8e320c93da9162250dac558c871dc93
Certificate serial: 019D28BB44D9318B227A573F80CC60D27091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 06:00:54 +0000
Manifest this update: Thu 26 Mar 2026 06:00:54 +0000
Manifest next update: Fri 27 Mar 2026 06:00:54 +0000
Files and hashes: 1: HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl (hash: 0PirfORYEsgneHvqPXZj8Hhc6qVjz9SPqX4LZ2XrHcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:44:d9:31:8b:22:7a:57:3f:80:cc:60:d2:70:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaa87c6f8e320c93da9162250dac558c871dc93
Validity
Not Before: Mar 26 06:00:54 2026 GMT
Not After : Mar 27 06:00:54 2026 GMT
Subject: CN=2896f7d4ab81126f68a2f69efba79cdf666c8910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:2b:25:e9:f5:d2:a8:c4:3b:10:44:d8:a2:
a9:f5:27:ad:d0:df:43:d4:3b:18:44:cc:f0:36:0b:
fc:eb:af:4e:e8:8e:fd:7a:66:c8:cc:0f:d2:25:4e:
95:39:f1:17:eb:98:03:d7:c0:ea:94:e4:2e:30:bf:
63:81:68:18:ac:67:be:dc:a0:53:b9:4f:d9:78:bc:
cc:17:ba:ab:fc:e6:bd:1d:c7:d8:67:09:7d:07:84:
72:8e:8a:69:6a:30:a3:40:fb:51:de:61:22:d9:95:
80:b3:9d:53:65:21:d7:64:2c:de:da:24:32:ae:7b:
87:e5:12:38:a9:51:0e:39:50:24:89:f6:dc:0a:bf:
a7:0d:68:ee:08:ff:6d:a7:6a:80:c0:ad:4b:aa:af:
4e:81:6c:3c:c0:39:97:b4:78:6c:5e:fe:50:70:52:
ed:06:3f:9d:5e:eb:5d:c1:af:1a:18:67:f5:b6:c9:
da:34:d1:28:33:b2:19:44:ab:aa:d5:26:e7:12:d6:
9f:26:b5:26:5c:90:34:8a:2f:4b:ab:28:87:e1:91:
34:e2:c1:d6:60:4b:5b:c3:da:07:6c:35:14:f8:7f:
6e:fc:1a:d4:5f:18:1e:88:cf:7e:4c:70:84:11:19:
f1:ae:9f:23:40:97:0f:9c:f9:84:65:84:ea:14:54:
ee:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:96:F7:D4:AB:81:12:6F:68:A2:F6:9E:FB:A7:9C:DF:66:6C:89:10
X509v3 Authority Key Identifier:
keyid:1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:1b:ac:71:9b:4e:e3:db:4b:17:c0:78:3a:fd:ae:f6:19:e0:
f5:9b:04:1e:00:0a:c2:fe:22:14:df:da:0d:87:09:e2:0c:ab:
ce:c3:07:10:64:01:49:a9:5c:43:d3:8a:03:37:20:dd:9c:de:
82:a9:a4:73:38:49:35:9b:ac:8a:b8:79:88:f9:4e:52:06:7d:
3b:01:aa:c1:f5:72:6e:f7:cb:00:9b:1a:cf:db:4a:f9:35:25:
f5:61:b8:f2:c5:85:cd:a8:f0:cd:4f:fc:8f:70:d5:01:d3:3e:
e7:33:8d:5a:f0:ae:ab:b3:22:81:16:0f:d2:f3:9a:3d:bf:2e:
6a:df:f2:4f:d0:be:c9:93:a9:20:06:4c:6f:0a:f4:62:b5:0a:
5a:43:bb:f3:a6:12:9e:22:f7:92:31:d1:38:9b:18:f2:7c:98:
ca:73:96:13:63:f4:ec:58:98:3d:56:ba:af:51:1d:1d:64:0e:
3f:6f:bf:d6:0b:c4:7c:e5:80:d1:26:e4:1b:3f:65:18:47:cf:
da:e4:59:0d:09:79:f0:62:da:79:de:2b:14:64:74:2a:05:94:
de:a2:44:3b:54:8f:05:08:f0:1a:0d:74:75:59:70:f2:74:61:
e2:a7:08:bd:f9:1a:11:b9:cc:18:1c:c1:90:95:35:5c:75:52:
7a:b3:e9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:57 2026 by rpki-client