Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
File: HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft (raw, json)
Hash identifier: kk+xcZr8zocRCzANee3ADpOcuweD4R7gLqdAPi5qeMQ=
Subject key identifier: F9:1B:51:20:E9:AC:92:EA:56:E9:76:D8:DE:85:7D:15:F1:70:1A:C1
Authority key identifier: 1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
Certificate issuer: /CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Certificate serial: 019E1EDA5E4539AD2C6F31F9203EE4254E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 01:01:27 +0000
Manifest this update: Wed 13 May 2026 01:01:27 +0000
Manifest next update: Thu 14 May 2026 01:01:27 +0000
Files and hashes: 1: 2KPFTLeDrSm9M4_XVjKhQsAeW5w.roa (hash: oiy5/t8+xoYRfuAXJZSTJK9AhNzpLlj1CftKpmctdeM=)
2: HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl (hash: 1hKS2rFneN+eAn7DeFhVJe2fa1LhO/7oxcF/MOJKyVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:5e:45:39:ad:2c:6f:31:f9:20:3e:e4:25:4e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Validity
Not Before: May 13 01:01:27 2026 GMT
Not After : May 14 01:01:27 2026 GMT
Subject: CN=f91b5120e9ac92ea56e976d8de857d15f1701ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f3:ac:03:c8:76:b9:ce:a9:7d:09:70:ef:f0:
1d:db:a8:8c:f1:21:a3:2e:ac:b1:3d:a4:42:d1:e1:
81:de:91:11:f2:77:74:bc:21:79:98:22:d9:2d:dc:
c9:0f:eb:60:4f:1b:9a:ce:6d:dc:75:1a:dd:46:ef:
ba:89:d0:93:74:8e:70:2b:ae:87:c0:07:d8:f4:f3:
6f:3b:f4:c3:4e:32:5c:4e:ae:aa:07:cb:b4:5d:6e:
ea:f9:6f:8c:0a:07:52:68:70:1f:0d:92:1f:c4:75:
55:7d:b9:ff:0c:6f:ec:7e:58:02:87:39:6b:b1:ae:
98:be:36:cc:0b:72:c1:56:f2:c9:0a:5d:b7:ad:b7:
79:c1:ff:25:9f:09:6c:55:b7:91:eb:62:08:83:80:
0a:84:91:cb:7d:5b:dd:9b:42:06:d2:22:85:d8:2f:
fc:86:9f:57:83:21:fc:5e:56:50:ad:40:eb:7d:05:
a5:27:80:d8:c9:3f:c4:13:14:e3:eb:61:8f:cc:f9:
e0:a9:f2:92:9c:dd:23:fc:07:fc:ad:c2:15:de:34:
da:d5:d2:ec:e4:b5:71:e9:94:f7:1a:8e:5f:b7:19:
41:bd:df:72:fa:a2:e8:67:6c:0c:10:e0:96:eb:ff:
8e:ce:a2:e1:75:f8:29:39:5c:31:bb:fe:e8:2d:b9:
62:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1B:51:20:E9:AC:92:EA:56:E9:76:D8:DE:85:7D:15:F1:70:1A:C1
X509v3 Authority Key Identifier:
keyid:1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2b:79:eb:5b:4e:0d:6a:e6:7c:11:61:af:10:78:dd:4c:83:
e6:0b:3d:51:8c:f9:c5:02:2a:7d:95:c3:8c:f0:d1:2d:10:ed:
3f:aa:df:09:f9:e2:5d:9b:86:8f:d2:d3:78:bb:90:50:15:5c:
e7:af:18:87:b0:c0:73:6f:26:fb:a1:b1:2e:17:cb:17:ab:df:
ed:2d:1e:6a:8d:0c:09:ae:b2:75:56:b9:a3:8f:d9:13:58:30:
65:ae:a2:e0:3b:9c:74:6e:35:80:5f:28:c4:e7:ce:0e:d0:cd:
32:31:6e:20:7e:75:44:6c:23:4f:de:72:a1:2e:06:da:e7:3d:
23:cd:27:2f:c1:fb:98:ad:00:08:cf:79:8c:af:ac:51:eb:d4:
21:bf:29:29:11:10:1b:21:86:12:43:f1:19:7d:66:63:4b:b3:
16:dc:45:6b:64:f7:76:78:e5:9c:2e:27:e1:5d:d5:02:8f:e4:
98:85:da:45:cf:53:98:41:e7:98:7a:4f:1a:dc:c8:1f:44:81:
c1:d8:3a:98:b6:e6:3a:a2:e9:89:ff:97:8b:23:aa:11:00:85:
26:a3:a9:7d:a4:ea:ca:6c:b5:13:90:4b:c5:7c:c9:0e:e1:0e:
72:1e:bf:c5:15:8c:35:8d:cf:dc:81:6f:0e:fe:34:4b:b7:b5:
66:27:82:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2l5FOa0sbzH5ID7kJU4CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMDQzNmRkNjk4ZWJhM2VhYjVhOTJkYjFkNjRmMmYzMTRl
ZDMxMTYwHhcNMjYwNTEzMDEwMTI3WhcNMjYwNTE0MDEwMTI3WjAzMTEwLwYDVQQD
EyhmOTFiNTEyMGU5YWM5MmVhNTZlOTc2ZDhkZTg1N2QxNWYxNzAxYWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/OsA8h2uc6pfQlw7/Ad26iM8SGj
LqyxPaRC0eGB3pER8nd0vCF5mCLZLdzJD+tgTxuazm3cdRrdRu+6idCTdI5wK66H
wAfY9PNvO/TDTjJcTq6qB8u0XW7q+W+MCgdSaHAfDZIfxHVVfbn/DG/sflgChzlr
sa6YvjbMC3LBVvLJCl23rbd5wf8lnwlsVbeR62IIg4AKhJHLfVvdm0IG0iKF2C/8
hp9XgyH8XlZQrUDrfQWlJ4DYyT/EExTj62GPzPngqfKSnN0j/Af8rcIV3jTa1dLs
5LVx6ZT3Go5ftxlBvd9y+qLoZ2wMEOCW6/+OzqLhdfgpOVwxu/7oLbliCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkbUSDprJLqVul22N6FfRXxcBrBMB8GA1UdIwQY
MBaAFB4ENt1pjro+q1qS2x1k8vMU7TEWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGdRMjNXbU91ajZyV3BMYkhXVHk4eFR0TVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zY2UwNDctZDg1OC00ZTdmLWEwNzAt
ZDQzMTlkMTNjNzc1LzEvSGdRMjNXbU91ajZyV3BMYkhXVHk4eFR0TVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8zY2UwNDctZDg1OC00ZTdmLWEwNzAtZDQzMTlkMTNjNzc1
LzEvSGdRMjNXbU91ajZyV3BMYkhXVHk4eFR0TVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCt561tO
DWrmfBFhrxB43UyD5gs9UYz5xQIqfZXDjPDRLRDtP6rfCfniXZuGj9LTeLuQUBVc
568Yh7DAc28m+6GxLhfLF6vf7S0eao0MCa6ydVa5o4/ZE1gwZa6i4DucdG41gF8o
xOfODtDNMjFuIH51RGwjT95yoS4G2uc9I80nL8H7mK0ACM95jK+sUevUIb8pKREQ
GyGGEkPxGX1mY0uzFtxFa2T3dnjlnC4n4V3VAo/kmIXaRc9TmEHnmHpPGtzIH0SB
wdg6mLbmOqLpif+XiyOqEQCFJqOpfaTqymy1E5BLxXzJDuEOch6/xRWMNY3P3IFv
Dv40S7e1ZieC1Q==
-----END CERTIFICATE-----
Generated at Wed May 13 05:42:13 2026 by rpki-client