Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
File: HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft (raw, json)
Hash identifier: VJThQ0Le4+Zd843mK252FBGJhpjomzVfcsaNSKISjCk=
Subject key identifier: 62:60:3B:3C:91:50:64:E6:FB:E2:5F:3F:0F:36:E1:0B:EA:35:2E:2B
Authority key identifier: 1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
Certificate issuer: /CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Certificate serial: 019D28BB5DB16DA8C9E25A16B4621C7E0FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 06:01:01 +0000
Manifest this update: Thu 26 Mar 2026 06:01:01 +0000
Manifest next update: Fri 27 Mar 2026 06:01:01 +0000
Files and hashes: 1: HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl (hash: dP7RomQMCKNB4sYFrV5MEoZOTGSLUcW2eWK0MGdBC50=)
2: oIEkw3PCXr1UYdRnKr9q4Q6XWcs.roa (hash: v1OkVWqraYOFjsEZ3LFnKjFEiGungWJLb2B2UAHBg6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:5d:b1:6d:a8:c9:e2:5a:16:b4:62:1c:7e:0f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Validity
Not Before: Mar 26 06:01:01 2026 GMT
Not After : Mar 27 06:01:01 2026 GMT
Subject: CN=62603b3c915064e6fbe25f3f0f36e10bea352e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b6:30:81:30:e8:76:b9:10:c9:31:c9:db:48:
dc:a3:54:9c:bb:ec:bb:e6:1a:32:28:4d:84:6c:50:
50:07:16:e8:0d:71:20:b8:78:48:47:e0:17:9b:2e:
64:1c:5a:c5:1f:c3:08:d4:d7:72:fb:75:65:8e:8d:
02:9a:92:e4:94:1b:55:ca:ce:2f:9e:5f:8a:f2:34:
6b:18:1f:fb:1c:79:27:50:69:8c:2e:0d:27:a4:78:
2c:23:3d:ab:d0:81:a7:53:31:0b:b5:2a:6a:38:fd:
34:11:40:95:70:2f:f7:ff:d3:38:94:f9:0d:9d:4e:
19:ad:36:53:cc:25:6e:dc:4b:03:05:a8:d6:ce:71:
54:e7:69:d0:5a:c9:1e:74:cb:ac:4c:b1:b6:b0:74:
02:c3:0e:e9:de:e2:a5:12:31:67:2b:8b:19:ea:70:
63:73:89:fc:fe:66:5c:01:31:35:df:d9:bb:8a:76:
12:df:5b:6e:03:b1:34:45:cf:e8:00:10:30:ce:d9:
db:ba:f9:6c:4a:55:65:30:1e:5f:73:8d:af:04:4d:
a2:d2:3a:de:5b:65:9c:dd:86:50:50:75:8a:e3:68:
d4:fc:20:66:94:f8:1b:3b:91:aa:ad:4c:bd:08:3f:
af:55:d4:b0:3f:6d:57:89:2d:b2:40:59:ec:64:02:
95:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:60:3B:3C:91:50:64:E6:FB:E2:5F:3F:0F:36:E1:0B:EA:35:2E:2B
X509v3 Authority Key Identifier:
keyid:1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f7:20:3b:ea:d6:c1:55:1f:a7:95:c9:c7:79:7e:79:64:f4:
9b:76:ab:00:d9:e8:e6:85:a1:ca:68:c6:d6:14:6e:72:21:66:
e0:69:55:ca:58:0c:09:76:9c:24:0e:d8:16:bc:7b:45:00:c8:
8c:3d:eb:d9:8e:56:c3:5e:90:7f:11:47:e3:35:79:fe:1e:da:
59:bb:81:17:e1:b2:84:13:95:bd:6c:6e:fe:27:c5:f0:81:3f:
14:0e:30:5e:c7:3f:63:cc:a3:db:93:00:12:41:ef:c6:3c:f6:
1b:1a:d1:3a:01:0a:38:6d:ea:94:03:00:c3:62:c3:c4:59:7b:
4d:fa:72:91:78:df:1d:ad:cf:00:62:08:61:af:7e:17:60:2b:
2c:0c:14:56:b0:0f:b0:2d:15:d5:24:e3:df:f4:84:4b:d1:b4:
5b:96:aa:22:b9:2d:dd:8c:41:0b:57:04:38:a5:cf:9b:10:d5:
79:7f:e8:b5:ee:58:2f:f6:c7:75:89:99:3e:aa:0b:20:da:57:
11:b1:8d:aa:88:e8:4e:d8:91:47:9f:2f:04:8e:6b:23:1c:50:
23:60:cd:61:24:33:3a:61:f5:91:23:9c:ec:8a:f6:fe:9d:8f:
8f:36:bb:39:86:6b:66:9d:d6:1f:41:de:74:3b:c4:1b:90:7e:
46:52:cb:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou12xbajJ4loWtGIcfg/TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTBjODIzYzM2MGI1Zjg2MTQ4OTJkMzViMTAzYzY0Nzc0
ZmQ2NWQwHhcNMjYwMzI2MDYwMTAxWhcNMjYwMzI3MDYwMTAxWjAzMTEwLwYDVQQD
Eyg2MjYwM2IzYzkxNTA2NGU2ZmJlMjVmM2YwZjM2ZTEwYmVhMzUyZTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLYwgTDodrkQyTHJ20jco1Scu+y7
5hoyKE2EbFBQBxboDXEguHhIR+AXmy5kHFrFH8MI1Ndy+3Vljo0CmpLklBtVys4v
nl+K8jRrGB/7HHknUGmMLg0npHgsIz2r0IGnUzELtSpqOP00EUCVcC/3/9M4lPkN
nU4ZrTZTzCVu3EsDBajWznFU52nQWskedMusTLG2sHQCww7p3uKlEjFnK4sZ6nBj
c4n8/mZcATE139m7inYS31tuA7E0Rc/oABAwztnbuvlsSlVlMB5fc42vBE2i0jre
W2Wc3YZQUHWK42jU/CBmlPgbO5GqrUy9CD+vVdSwP21XiS2yQFnsZAKViwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJgOzyRUGTm++JfPw824QvqNS4rMB8GA1UdIwQY
MBaAFB6gyCPDYLX4YUiS01sQPGR3T9ZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFESUk4Tmd0ZmhoU0pMVFd4QThaSGRQMWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80OTI2MTUtODE2Mi00YjM3LWJjYmIt
NWMwZDA1N2VmMmE2LzEvSHFESUk4Tmd0ZmhoU0pMVFd4QThaSGRQMWwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS80OTI2MTUtODE2Mi00YjM3LWJjYmItNWMwZDA1N2VmMmE2
LzEvSHFESUk4Tmd0ZmhoU0pMVFd4QThaSGRQMWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPcgO+rW
wVUfp5XJx3l+eWT0m3arANno5oWhymjG1hRuciFm4GlVylgMCXacJA7YFrx7RQDI
jD3r2Y5Ww16QfxFH4zV5/h7aWbuBF+GyhBOVvWxu/ifF8IE/FA4wXsc/Y8yj25MA
EkHvxjz2GxrROgEKOG3qlAMAw2LDxFl7TfpykXjfHa3PAGIIYa9+F2ArLAwUVrAP
sC0V1STj3/SES9G0W5aqIrkt3YxBC1cEOKXPmxDVeX/ote5YL/bHdYmZPqoLINpX
EbGNqojoTtiRR58vBI5rIxxQI2DNYSQzOmH1kSOc7Ir2/p2Pjza7OYZrZp3WH0He
dDvEG5B+RlLLoQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:06 2026 by rpki-client