Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
File: HkQmt06M9v_e23sGBBgIMqhiXzI.mft (raw, json)
Hash identifier: IQXVbiqfZopAgOO/WU3tCMZQJFlVtCp3sfGf5jXnrMU=
Subject key identifier: 07:B5:91:7F:C0:A5:99:A4:ED:28:FE:9D:45:F2:1B:F8:1D:3A:8D:31
Authority key identifier: 1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32
Certificate issuer: /CN=1e4426b74e8cf6ffdedb7b0604180832a8625f32
Certificate serial: 019D2704941016DBC52F170E59D177A301D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
Manifest number: 0997
Signing time: Wed 25 Mar 2026 22:01:44 +0000
Manifest this update: Wed 25 Mar 2026 22:01:44 +0000
Manifest next update: Thu 26 Mar 2026 22:01:44 +0000
Files and hashes: 1: HkQmt06M9v_e23sGBBgIMqhiXzI.crl (hash: 9KqHi6I+08TLDmMSfGFswjFMtv6ZtMeZ+YDzRVI+Tp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:94:10:16:db:c5:2f:17:0e:59:d1:77:a3:01:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4426b74e8cf6ffdedb7b0604180832a8625f32
Validity
Not Before: Mar 25 22:01:44 2026 GMT
Not After : Mar 26 22:01:44 2026 GMT
Subject: CN=07b5917fc0a599a4ed28fe9d45f21bf81d3a8d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:21:6f:9a:ce:65:c5:ef:ed:c0:fc:bf:2e:74:
a8:9f:f4:9e:25:18:28:04:f6:59:fc:86:db:07:3f:
a4:00:59:54:b6:ee:01:79:29:60:21:06:6c:1c:aa:
34:d7:ae:c8:7d:01:44:7b:5c:64:b6:d9:2d:d3:87:
59:22:ca:d8:ea:d8:6f:4e:a3:91:62:9b:61:f7:95:
fb:87:36:47:72:e2:fd:c6:bf:1c:44:1c:79:43:e9:
6d:16:08:95:76:e8:57:46:f8:14:9e:04:93:7e:95:
e2:23:9c:f6:a5:cc:52:ea:11:9f:ae:a4:8a:20:30:
c8:e8:33:e5:cc:72:92:57:4e:11:de:5f:67:7b:0a:
44:5f:6c:8f:4d:bf:4e:37:3b:73:ca:e0:45:5c:90:
30:dd:08:5f:b5:ae:75:d8:1a:58:ee:32:96:59:79:
64:6e:46:3b:dc:56:3a:5f:1d:f7:d3:91:b8:ef:77:
a3:20:d4:3d:7a:60:62:4b:eb:e3:5b:b6:55:03:3e:
15:61:0e:69:bd:5d:bd:50:58:57:9d:a0:48:e3:ab:
3e:e9:03:a5:3c:82:9a:42:06:48:ac:f2:d0:a2:d8:
34:49:ef:4a:7f:9a:77:89:6e:40:4d:43:f9:9f:61:
87:58:9f:64:8a:70:8f:c5:38:29:2b:25:cd:73:94:
81:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B5:91:7F:C0:A5:99:A4:ED:28:FE:9D:45:F2:1B:F8:1D:3A:8D:31
X509v3 Authority Key Identifier:
keyid:1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a7:4e:08:25:c9:d9:3f:27:77:7d:a9:6c:f3:01:b9:35:df:
ea:0b:29:f3:54:77:24:4b:da:40:38:03:88:4d:88:2c:91:50:
81:98:4b:a5:04:e8:ed:1a:01:fa:2d:77:9a:83:92:73:2c:20:
98:df:79:b2:7e:c4:c7:ee:ee:4d:52:46:c4:01:ea:ec:02:74:
10:4d:f4:de:bb:e4:64:37:99:b4:b7:b2:7a:4d:21:50:b9:d2:
b1:ff:34:11:4f:c7:2c:f1:77:84:63:cc:c6:d7:cc:14:d9:19:
8d:48:0d:ec:1f:79:4a:d8:aa:c2:75:81:8f:0f:fd:5e:60:61:
d6:a1:12:cb:19:e7:e5:c5:33:42:43:bf:9a:f7:e2:51:a8:2b:
62:d2:8d:49:1e:e0:11:44:16:60:8f:fe:e8:80:b1:a3:43:7b:
2c:24:5e:fb:f8:1d:73:68:a5:dc:f1:f7:a1:7d:d3:33:20:ce:
ca:40:9d:08:d7:cd:b0:1d:4d:eb:12:9e:90:37:39:4b:16:d1:
0e:4f:90:c0:45:c7:45:42:88:60:f1:07:bf:ff:31:ae:57:70:
f8:26:34:84:10:22:2f:37:f4:85:7d:33:66:83:99:21:2e:d6:
3f:5c:a1:d5:2f:36:b4:a6:19:36:81:09:6f:c7:76:a3:d5:c3:
58:b3:b2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:27 2026 by rpki-client