
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
File: HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft (raw, json)
Hash identifier: ijjIDPu033ByPQK23lWTOak2kG39nJWjw8OYPJC/GQM=
Subject key identifier: 5B:C7:E8:99:ED:52:5F:1B:52:A9:54:45:D2:BE:DB:15:0D:1C:62:09
Authority key identifier: 1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE
Certificate issuer: /CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
Certificate serial: 01A1DD94EFFDB7223E5B3D1D66C5C4716F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
Manifest number: 03CB
Signing time: Sun 15 Nov 2026 05:01:27 +0000
Manifest this update: Sun 15 Nov 2026 05:01:27 +0000
Manifest next update: Mon 16 Nov 2026 05:01:27 +0000
Files and hashes: 1: HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl (hash: YTTBCTgfIScUmjsKcM8lHSAzv9ngbanOEmdgsYnGAwM=)
2: X01IfSkC0_7ntZbrUIkZ_L-D4vE.asa (hash: aZEncQf/BAdEF1bttJTpzCCc9CG56JQeD1jy67NOedw=)
3: alFC4352ujfylmeJv44dIFDrX8I.roa (hash: EyvWXf/Mudgwkv08n9JwLU88K529FLdo5Jy2xLKZhDY=)
4: qYc1GDRHdMKB8iddli8zkMN3RVY.roa (hash: Raz+vndSPY3IPBLJicVFRGraRf1O/aOAmmwEA/V9D9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:ef:fd:b7:22:3e:5b:3d:1d:66:c5:c4:71:6f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
Validity
Not Before: Nov 15 05:01:27 2026 GMT
Not After : Nov 16 05:01:27 2026 GMT
Subject: CN=5bc7e899ed525f1b52a95445d2bedb150d1c6209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7f:60:af:0f:2f:52:34:2b:ee:b3:7f:c8:ae:
a5:eb:48:f1:cf:95:aa:fd:83:b9:a9:0f:5c:5c:d1:
b6:6d:07:b1:db:53:a6:00:e9:d0:d9:3f:13:b9:fd:
09:6b:7f:f7:9d:2c:11:69:5b:e1:aa:c6:ae:68:d7:
20:f7:cb:7c:e1:44:00:73:c8:46:8e:e0:8c:b6:e7:
b9:86:ca:43:95:b3:6b:a8:f7:1b:ac:73:90:69:51:
70:81:66:75:b6:81:1e:fb:fa:c6:d8:39:58:97:ba:
f3:ff:da:e0:91:e3:99:cc:01:78:34:4f:a4:0a:bb:
07:e8:bb:1d:76:8f:50:34:42:58:c3:28:0d:3a:bb:
4a:6d:cf:7a:f2:7a:2a:48:f8:cf:b6:b9:eb:df:fd:
3a:58:d2:12:2b:1e:c1:e4:2d:fd:a6:f4:b8:a5:60:
c8:fe:b6:c3:c6:bb:c4:0b:56:3c:83:44:65:8f:a6:
7a:ba:11:29:62:66:3b:f1:18:b4:bc:cb:25:bb:d9:
05:f5:36:17:95:3d:86:af:4e:1c:da:d6:4b:10:dd:
ae:94:d1:c8:42:bb:e6:b7:1c:ce:05:f2:a1:19:2d:
40:03:7a:0f:ed:fe:fe:e7:4b:74:b1:87:52:18:c4:
7a:eb:eb:ef:45:22:aa:9f:5e:cb:38:27:96:05:16:
97:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C7:E8:99:ED:52:5F:1B:52:A9:54:45:D2:BE:DB:15:0D:1C:62:09
X509v3 Authority Key Identifier:
keyid:1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:16:54:76:dd:3f:22:54:5e:02:ec:5d:bc:8f:11:8a:b9:bd:
f3:10:3a:a0:40:68:73:9b:5f:c8:4c:d0:6d:6e:c8:d7:5f:9b:
90:d3:3c:63:27:ba:77:eb:83:40:19:5c:48:d8:d7:bf:0b:27:
b2:e0:5f:70:e1:33:f7:ce:1e:68:60:1b:42:0e:45:39:7c:3d:
47:93:6f:82:24:01:98:3d:c4:5e:dd:f0:f0:b4:31:7d:00:dc:
e5:9a:91:0c:00:ab:c8:30:b1:6a:84:94:02:55:cc:51:56:38:
e0:01:4d:3a:4d:92:ec:6c:e2:82:2b:4f:81:8c:45:25:de:82:
45:da:80:1d:ff:e0:e1:68:91:b0:2a:4c:39:78:e2:4b:97:12:
c1:b4:d8:bc:c0:65:9a:17:cb:6d:c2:dd:84:34:42:f5:fe:47:
de:04:b1:f8:6c:c6:b4:ff:66:6b:ae:7c:8a:ec:52:0b:df:c8:
29:60:66:52:82:0d:b1:8b:5b:21:fa:03:44:60:de:66:cc:62:
5f:8a:fe:5d:20:c6:b4:52:f9:5b:10:9d:79:b6:af:b0:1d:f0:
32:66:c1:ad:9a:02:04:6a:09:49:39:30:c3:2c:37:bc:2f:40:
02:82:b3:de:4f:40:c5:c0:c5:18:09:dd:08:6c:2e:e2:97:0b:
e8:be:90:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:17:18 2026 by rpki-client