Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.mft
File: HQXcdA9vS7W8SwM4fptHUwhQdDw.mft (raw, json)
Hash identifier: H+FQ+dTP/RpuOHj5e9xfLRICvgcUP9tYhP72fHPRatA=
Subject key identifier: 46:E7:A0:CE:A5:D9:FD:4A:F0:D6:5D:48:83:61:87:D9:DB:19:73:40
Authority key identifier: 1D:05:DC:74:0F:6F:4B:B5:BC:4B:03:38:7E:9B:47:53:08:50:74:3C
Certificate issuer: /CN=1d05dc740f6f4bb5bc4b03387e9b47530850743c
Certificate serial: 019D2884813BC2873605197352C18360BFFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.mft
Manifest number: 0137
Signing time: Thu 26 Mar 2026 05:01:05 +0000
Manifest this update: Thu 26 Mar 2026 05:01:05 +0000
Manifest next update: Fri 27 Mar 2026 05:01:05 +0000
Files and hashes: 1: EACCpkJUe6xsP4_nCRlj7NVGBLc.roa (hash: cbbyB5SvosFwqsVBAsWwnY8rZFf7hG0lJZ2R8+Yzr20=)
2: H3pYhN3aP-4mmqKhhpci3ig1tCA.roa (hash: 4vAvKOvcUAX6c1K5Wxm9Dj65zDW/pqpYSeloWgjaCn4=)
3: HQXcdA9vS7W8SwM4fptHUwhQdDw.crl (hash: imKJIeWTGTvN/aO2/hKcOI/PquI6U09A7mqoUXeDjaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:81:3b:c2:87:36:05:19:73:52:c1:83:60:bf:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d05dc740f6f4bb5bc4b03387e9b47530850743c
Validity
Not Before: Mar 26 05:01:05 2026 GMT
Not After : Mar 27 05:01:05 2026 GMT
Subject: CN=46e7a0cea5d9fd4af0d65d48836187d9db197340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:ff:f5:fd:ad:db:fb:b2:8c:8a:0d:7a:98:
df:3a:00:fa:98:da:05:70:c4:6b:1c:04:40:ce:b9:
6b:94:9f:9b:26:1d:63:de:9f:27:dd:05:83:cd:9f:
42:c3:e6:2e:2e:79:ee:59:85:75:fd:da:1a:56:f3:
eb:8e:e5:5a:41:e1:a3:ee:c3:dd:e5:94:87:2a:8b:
48:d5:35:59:cc:d9:a4:c9:c0:0f:e9:86:69:50:02:
57:b4:25:60:da:36:02:04:ca:46:4a:db:e8:7e:0d:
63:9e:df:4d:42:95:91:a3:9a:6b:a0:ed:6a:d3:1a:
71:d4:24:c5:5e:fe:14:a0:78:41:6a:db:2c:d6:e6:
c2:b8:71:7c:72:e7:fe:b1:66:b2:57:eb:87:06:b7:
28:22:64:b3:ac:52:7c:e4:2e:55:ce:94:89:b3:2e:
56:c4:0c:06:bf:5a:88:96:e9:08:f5:52:1f:f6:c1:
a0:78:11:da:37:c5:4e:93:80:17:83:ad:a6:37:50:
a6:21:0b:24:d7:14:93:47:24:ce:e0:4a:13:aa:fe:
4e:14:51:83:b1:ad:a9:49:89:6a:36:4b:6d:f5:86:
eb:5f:0b:23:02:db:c2:b7:59:12:06:65:ef:11:b5:
02:e6:eb:99:f4:5f:cb:b2:3e:00:a6:92:46:2d:f9:
43:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E7:A0:CE:A5:D9:FD:4A:F0:D6:5D:48:83:61:87:D9:DB:19:73:40
X509v3 Authority Key Identifier:
keyid:1D:05:DC:74:0F:6F:4B:B5:BC:4B:03:38:7E:9B:47:53:08:50:74:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:81:26:80:37:5f:3f:ae:01:15:e0:2d:2d:b4:72:4d:ba:c8:
e2:5d:99:05:16:48:20:4f:81:10:b5:c5:7c:16:c2:89:01:be:
57:84:0c:05:ed:d7:34:3e:02:9a:3c:fd:80:cc:76:d2:bf:5c:
7b:ae:2c:91:c2:44:ed:87:e7:39:82:75:f6:a7:bf:b3:8e:fc:
f5:0f:4a:97:90:65:5c:ce:ba:c5:98:d1:9c:3c:eb:ae:da:55:
f9:a2:bb:a2:a0:7c:8c:b1:6a:6b:db:b8:6d:d9:3f:d6:bd:1d:
57:d8:55:7e:d5:fe:e7:27:82:48:10:c2:55:18:2e:d0:08:89:
e6:e9:43:d9:17:31:88:d8:95:45:6d:95:07:ec:26:58:92:84:
12:5c:59:ac:2c:f0:5f:cc:27:58:0d:97:dd:cb:74:49:8b:d7:
32:d1:94:e3:96:35:45:c4:f6:d7:14:24:43:ca:c1:7c:e4:d5:
14:f5:72:2b:cb:1c:33:10:27:02:76:23:2f:a2:9c:48:91:8e:
06:a4:70:ae:16:76:43:b0:bf:b5:f9:bb:60:12:5c:86:e7:77:
fc:0c:ab:20:4b:0e:9e:10:2d:a6:6e:f8:17:29:c3:21:1a:cd:
94:d0:fe:9f:88:d6:9a:4b:30:e2:2c:25:b3:0b:13:62:9d:0d:
5b:cd:fe:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:34 2026 by rpki-client