Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
File: HqvXZaBQUv7FmmonPV70v8ekA1o.mft (raw, json)
Hash identifier: exentQuq07kIghccTbKZxwPbQlrNuYoRYDOQEzyw4ro=
Subject key identifier: CE:84:92:B2:7D:3A:1D:9E:B9:DF:F4:3B:03:85:D2:F6:6D:97:99:74
Authority key identifier: 1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A
Certificate issuer: /CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
Certificate serial: 019D288495B57FB62154D798CC028E85AA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 05:01:10 +0000
Manifest this update: Thu 26 Mar 2026 05:01:10 +0000
Manifest next update: Fri 27 Mar 2026 05:01:10 +0000
Files and hashes: 1: HqvXZaBQUv7FmmonPV70v8ekA1o.crl (hash: C+oEixmBj8nmgpeLbkQxlfCf8PXITbMU/YvYG2HC0us=)
2: w0osmDfeySxstGXd2QPz-B9mx_w.roa (hash: 44dvBeQTpGg4qqAvOjd/EibsEADF1B8V+4jebvfoamM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:95:b5:7f:b6:21:54:d7:98:cc:02:8e:85:aa:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
Validity
Not Before: Mar 26 05:01:10 2026 GMT
Not After : Mar 27 05:01:10 2026 GMT
Subject: CN=ce8492b27d3a1d9eb9dff43b0385d2f66d979974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:30:7f:04:29:08:a2:ce:fd:b5:1c:84:ee:25:
16:6b:9c:f7:ec:80:01:b9:72:cd:7a:f4:cf:98:db:
09:70:41:50:60:b2:66:78:74:b7:99:64:3b:5e:7b:
b3:7f:e4:af:33:8e:a6:2c:55:97:a7:c6:b9:41:71:
0f:05:d4:36:d2:dc:ef:9e:3a:b6:6d:13:f9:c9:31:
b8:09:a8:b0:86:fe:2d:c4:1f:cb:26:2f:d0:7a:66:
b9:d9:0c:50:59:65:bc:e8:9e:e3:71:56:3a:7e:2a:
75:27:74:ee:38:66:04:18:e2:1e:53:68:04:85:37:
d3:c0:7a:30:97:b7:4c:3c:52:25:c6:e7:00:fd:4f:
94:63:19:84:84:37:cc:5f:dd:de:34:dc:df:d2:e7:
b8:1b:67:d8:c9:7a:11:73:79:7b:1a:56:d9:a6:52:
47:4f:d6:b8:38:2c:dc:9d:67:38:57:72:40:0d:78:
a5:f2:6c:27:ce:58:29:c9:73:69:fa:1f:64:a2:87:
8f:bd:76:d1:d3:aa:e5:f3:cd:9c:82:a3:71:2a:e4:
b5:43:ec:8f:87:4a:12:02:8a:63:d7:c9:69:1d:27:
d0:bb:a2:3e:2d:32:a8:38:bc:45:86:06:c4:28:09:
9a:6d:df:32:e0:16:77:eb:2f:6d:79:7b:f8:e0:30:
fc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:84:92:B2:7D:3A:1D:9E:B9:DF:F4:3B:03:85:D2:F6:6D:97:99:74
X509v3 Authority Key Identifier:
keyid:1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:7d:98:20:b4:37:8d:92:96:04:af:6f:9f:8f:a8:49:07:3e:
b9:a4:b4:40:0f:da:e7:93:c6:41:7b:57:2c:a4:0f:cd:7f:b1:
6b:2c:ac:d5:68:9d:2d:54:d8:45:d9:7c:f5:43:09:ca:d7:2a:
c7:10:b9:d2:21:11:0d:37:20:9a:42:14:6d:be:a0:a7:d0:27:
3e:2d:ae:8d:2a:b1:e5:fc:7c:51:e3:c6:cb:3c:ed:c2:52:1e:
8b:a4:5a:1d:27:9e:e7:c3:87:a3:05:ee:8c:b8:7f:71:8e:22:
7c:bf:9d:1c:73:8d:87:7d:62:a5:a4:6d:1f:f0:d7:20:8d:27:
cd:8d:0a:82:3c:a0:83:f3:a7:d3:65:f1:23:ca:16:ee:2b:f3:
8f:5d:3d:1a:2c:35:d4:85:ed:cb:a0:9d:55:9a:eb:1d:e6:a1:
6d:38:cf:5f:c9:bd:1e:73:6e:f3:b1:68:1c:20:f0:4a:0e:2e:
82:75:57:a0:c2:9a:55:09:ee:a3:41:d2:7e:7d:2c:62:bc:19:
96:d3:ca:f2:6c:98:ca:1c:25:4f:2f:3e:3b:03:2a:7f:72:fa:
5c:87:c6:d3:af:d0:b4:f0:b1:29:ca:36:13:de:90:06:e7:90:
17:78:81:8c:ad:2f:30:69:94:c7:1d:dd:27:49:1e:14:fb:82:
b7:0a:45:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohJW1f7YhVNeYzAKOhao9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYWJkNzY1YTA1MDUyZmVjNTlhNmEyNzNkNWVmNGJmYzdh
NDAzNWEwHhcNMjYwMzI2MDUwMTEwWhcNMjYwMzI3MDUwMTEwWjAzMTEwLwYDVQQD
EyhjZTg0OTJiMjdkM2ExZDllYjlkZmY0M2IwMzg1ZDJmNjZkOTc5OTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjB/BCkIos79tRyE7iUWa5z37IAB
uXLNevTPmNsJcEFQYLJmeHS3mWQ7Xnuzf+SvM46mLFWXp8a5QXEPBdQ20tzvnjq2
bRP5yTG4Caiwhv4txB/LJi/Qema52QxQWWW86J7jcVY6fip1J3TuOGYEGOIeU2gE
hTfTwHowl7dMPFIlxucA/U+UYxmEhDfMX93eNNzf0ue4G2fYyXoRc3l7GlbZplJH
T9a4OCzcnWc4V3JADXil8mwnzlgpyXNp+h9kooePvXbR06rl882cgqNxKuS1Q+yP
h0oSAopj18lpHSfQu6I+LTKoOLxFhgbEKAmabd8y4BZ36y9teXv44DD8pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6EkrJ9Oh2eud/0OwOF0vZtl5l0MB8GA1UdIwQY
MBaAFB6r12WgUFL+xZpqJz1e9L/HpANaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHF2WFphQlFVdjdGbW1vblBWNzB2OGVrQTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lMTA3MjItZGFiYi00YTQxLTg5MjMt
YjFiNjgyZTIwNjBmLzEvSHF2WFphQlFVdjdGbW1vblBWNzB2OGVrQTFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9lMTA3MjItZGFiYi00YTQxLTg5MjMtYjFiNjgyZTIwNjBm
LzEvSHF2WFphQlFVdjdGbW1vblBWNzB2OGVrQTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3H2YILQ3
jZKWBK9vn4+oSQc+uaS0QA/a55PGQXtXLKQPzX+xayys1WidLVTYRdl89UMJytcq
xxC50iERDTcgmkIUbb6gp9AnPi2ujSqx5fx8UePGyzztwlIei6RaHSee58OHowXu
jLh/cY4ifL+dHHONh31ipaRtH/DXII0nzY0Kgjygg/On02XxI8oW7ivzj109Giw1
1IXty6CdVZrrHeahbTjPX8m9HnNu87FoHCDwSg4ugnVXoMKaVQnuo0HSfn0sYrwZ
ltPK8myYyhwlTy8+OwMqf3L6XIfG06/QtPCxKco2E96QBueQF3iBjK0vMGmUxx3d
J0keFPuCtwpFRA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:50 2026 by rpki-client