Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
File: HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json)
Hash identifier: YCr9W4dl9zBbsvHEzZlszkNECGNQTvx29kYbdujbYKI=
Subject key identifier: 63:B4:C3:87:C4:3A:45:84:22:44:F2:59:1F:E5:EE:0B:3C:66:EA:A9
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 019D292992F6E398C4A973915F02D39DF16E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
Manifest number: 1899
Signing time: Thu 26 Mar 2026 08:01:23 +0000
Manifest this update: Thu 26 Mar 2026 08:01:23 +0000
Manifest next update: Fri 27 Mar 2026 08:01:23 +0000
Files and hashes: 1: 1-zqC4HhQSozydEfSsWMeVRvX4Ag.roa (hash: YCbMIIG2MrUDfBfXlLOUYihuI+nwLwGzroFonhJo9+c=)
2: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: gLwQ6PGQKEEb46ITWihQswv62ZsIgXgYWoG9OWPTiJQ=)
3: eQBqd8VSQ_-EDmCXW9sFFYDeMQk.roa (hash: dEI6v24yV0EpcI35EHdwZC8mHRo0m2mxSHgvKT9A5+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:92:f6:e3:98:c4:a9:73:91:5f:02:d3:9d:f1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Mar 26 08:01:23 2026 GMT
Not After : Mar 27 08:01:23 2026 GMT
Subject: CN=63b4c387c43a45842244f2591fe5ee0b3c66eaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:73:d9:3a:30:8e:33:07:ba:93:8f:e3:31:
f1:7f:c3:10:0e:23:18:a0:2b:c3:ca:5f:f9:49:5e:
55:48:be:68:0b:6f:84:10:ec:4e:ab:68:6a:89:7c:
85:0b:fa:80:02:b0:15:3a:ed:32:21:fc:71:da:cd:
3b:6e:04:23:9e:63:dd:68:26:9b:99:9b:e6:bd:5c:
bd:72:f0:1f:0d:c6:7b:4e:5f:49:01:2e:ae:ad:9b:
c1:62:ad:b4:7a:44:56:67:ca:71:16:ea:96:99:67:
1a:15:0b:9c:c5:75:11:ae:b2:5e:34:c3:40:ff:d2:
2c:e2:bf:16:48:a5:22:e4:8f:9e:17:d1:d9:07:b5:
5b:b9:f5:db:70:85:14:53:d7:ee:f7:79:1f:f6:60:
5d:58:3b:ec:3e:be:77:56:fc:c0:bf:4d:52:76:c4:
82:51:e8:40:9f:de:73:54:f2:6d:7a:3e:4d:04:12:
2d:4e:11:cd:7d:95:8b:93:b7:dc:e7:be:17:c9:b1:
6a:e7:11:77:02:9b:b6:1c:56:e4:cd:51:cd:1b:93:
10:35:0f:e9:f3:4b:2b:e0:06:a1:ea:93:a4:1a:e9:
51:8a:0c:c4:43:01:3b:e0:cf:81:18:5a:29:22:b7:
bf:23:10:2c:43:d2:6a:a1:a1:78:92:75:ae:46:17:
ce:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B4:C3:87:C4:3A:45:84:22:44:F2:59:1F:E5:EE:0B:3C:66:EA:A9
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:12:8e:77:cd:b2:3b:6b:60:6a:b5:3b:c5:c5:5c:73:88:5e:
e5:cd:48:ae:1e:be:e5:f3:1c:b9:76:71:be:ac:86:72:c5:ce:
e8:c8:dc:7c:8c:dd:07:ab:61:45:bf:dd:08:60:42:7d:9e:92:
ca:11:d9:b9:74:b0:b5:3a:4d:07:68:4c:65:7f:24:77:40:d9:
44:48:3f:0f:ea:eb:f6:20:d1:ee:c5:7d:06:04:16:3d:ca:40:
3a:6e:b5:90:14:51:f3:c2:af:8d:07:99:05:8c:19:e4:5c:22:
10:a8:d9:28:8b:60:3c:6c:8c:52:82:09:4a:34:93:a4:38:d9:
3f:7f:91:0a:1c:a2:12:dc:97:18:50:0f:20:8f:b4:fd:28:d1:
c6:6f:c5:1f:82:81:7c:69:37:91:1c:05:44:fc:0d:19:b4:36:
36:b8:47:45:c0:07:e4:98:4e:af:a5:2e:6b:07:07:25:26:e3:
60:03:1c:c6:a4:37:6a:4a:98:55:9e:e1:05:03:37:9f:43:4e:
83:02:8d:e2:a8:2e:9c:c1:d3:12:d6:3f:35:dc:85:84:11:6b:
51:00:60:19:79:92:fb:4c:50:2b:a7:da:17:a8:46:59:80:a6:
bd:6e:4b:3e:b4:5c:b6:c9:55:b6:0d:75:6c:d9:c0:5f:5c:12:
2a:41:fb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:11 2026 by rpki-client