Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
File: HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft (raw, json)
Hash identifier: wx+1ANQ4cyX9CGqUEl80KG3XGXee22t5Hkoh9h6XqnU=
Subject key identifier: 89:A7:9C:27:BB:94:21:5E:13:16:18:59:2E:3E:D4:EE:0F:08:FE:1F
Authority key identifier: 1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE
Certificate issuer: /CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
Certificate serial: 019D26287C248C1DDAA52C5E5252A05E2B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
Manifest number: 0159
Signing time: Wed 25 Mar 2026 18:01:20 +0000
Manifest this update: Wed 25 Mar 2026 18:01:20 +0000
Manifest next update: Thu 26 Mar 2026 18:01:20 +0000
Files and hashes: 1: HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl (hash: GLGOH63LnEEDsa69BdWyHsNypwjCsasGqXdrEcByFeY=)
2: alFC4352ujfylmeJv44dIFDrX8I.roa (hash: EyvWXf/Mudgwkv08n9JwLU88K529FLdo5Jy2xLKZhDY=)
3: qYc1GDRHdMKB8iddli8zkMN3RVY.roa (hash: Raz+vndSPY3IPBLJicVFRGraRf1O/aOAmmwEA/V9D9U=)
4: vWwiGSVRiuY5G_sGCiMiyC9oZaw.asa (hash: TYWXQ81PwJFaPM/v0IBTjfWfvW7fjHxqu9IT+A6xBqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:7c:24:8c:1d:da:a5:2c:5e:52:52:a0:5e:2b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
Validity
Not Before: Mar 25 18:01:20 2026 GMT
Not After : Mar 26 18:01:20 2026 GMT
Subject: CN=89a79c27bb94215e131618592e3ed4ee0f08fe1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2b:74:46:d5:44:cc:1a:61:91:f0:45:ba:f4:
0b:66:0c:27:2f:63:b9:87:aa:94:4a:7a:ac:19:05:
96:c6:05:b4:07:cc:a4:38:3b:4f:6e:1c:10:4a:cb:
5c:71:19:04:1e:22:b0:59:f4:f8:0c:e5:a0:06:29:
81:ff:da:cf:21:e7:b8:5e:35:55:12:72:95:d0:1a:
c7:4a:29:17:75:06:9a:b5:2d:dc:80:d2:16:86:1b:
5a:fd:81:ff:0a:39:7c:bf:39:cf:ca:60:6c:43:64:
c6:12:a4:50:67:3b:3d:d9:9a:fb:fd:ae:10:40:11:
31:07:c5:ee:62:5d:40:6b:bc:34:f8:f6:b5:84:07:
49:e7:ce:d9:76:ba:8a:e6:16:66:42:57:ac:a8:3f:
f1:2d:c0:95:19:3a:5c:52:fa:18:e0:e3:13:e6:12:
26:24:ca:a7:bd:ab:ca:26:cb:f2:83:ba:d9:73:8c:
69:8f:d7:35:5f:8b:8c:bf:12:71:d5:fe:8f:b2:58:
a1:97:6f:01:34:71:b9:ca:42:5e:a9:13:43:d0:15:
50:4f:e3:a6:98:c5:a0:31:53:50:76:3c:c6:0e:e5:
5d:74:5a:95:05:d2:d9:3b:9c:ef:9e:e5:a9:bd:a2:
da:6c:91:9b:3a:95:4d:2a:d7:17:63:03:0b:e4:bd:
61:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A7:9C:27:BB:94:21:5E:13:16:18:59:2E:3E:D4:EE:0F:08:FE:1F
X509v3 Authority Key Identifier:
keyid:1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:09:99:a4:4e:67:04:b0:33:32:0d:a7:cd:3e:23:5b:0b:b8:
9e:20:c7:61:9e:bf:80:28:a6:ea:1c:07:41:72:47:7d:d6:82:
80:d3:ce:57:ae:d7:5d:66:88:b2:d1:58:ea:2d:c7:54:4b:0c:
05:db:de:ec:c2:97:ab:a4:01:77:9b:e3:3f:4b:8e:2e:04:a8:
8b:70:6d:fa:a3:e3:b8:03:d3:90:57:f7:02:9f:02:2c:88:f3:
ff:f7:89:4c:4e:04:e7:81:4c:78:a3:5b:f8:b8:55:93:0d:f4:
36:21:ce:06:8f:f3:01:34:60:44:30:ea:20:10:97:03:42:98:
cd:65:32:26:57:fb:80:56:33:62:4d:eb:4e:cc:b4:5a:07:eb:
77:db:5f:3c:00:22:4e:3b:e9:c7:ec:7f:2f:da:f8:6d:f7:16:
95:09:92:59:dd:c2:0c:ad:66:8c:2c:85:91:01:71:2b:47:cc:
c2:04:f1:90:08:2d:44:c6:9b:9f:8c:b1:b7:63:d0:2d:98:d8:
97:b4:2d:e6:9e:c7:07:56:e6:97:8b:12:07:29:4b:44:23:c4:
fe:a2:aa:a2:75:c9:81:e5:fd:84:cd:39:04:fb:d1:1f:52:a2:
30:30:e5:98:33:27:9b:20:0a:c5:43:70:7f:a0:bb:65:50:1c:
84:68:70:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:14:55 2026 by rpki-client