Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft (raw, json)
Hash identifier: 1ReQDfQKNLNMOt3g+4nCBVNyd0jUSRzSH+VlZpUGaTA=
Subject key identifier: 39:7A:7C:EB:84:4E:B5:BD:C3:3E:65:A0:D2:B7:BF:3B:9D:3D:B2:DB
Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Certificate serial: 019D273B4394BA097CB1EDF6031E493B9E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 23:01:28 +0000
Manifest this update: Wed 25 Mar 2026 23:01:28 +0000
Manifest next update: Thu 26 Mar 2026 23:01:28 +0000
Files and hashes: 1: hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl (hash: GBR3Rjztd4iNi//Ap386IHU3kv1c9plZuIhBCUIkElc=)
2: vFI_szTdwGut2KUofHDh3zwoi1k.roa (hash: MxrZSZTPx1kjzcHF3plautdDk7QOfOy+oz7wimPfgjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:43:94:ba:09:7c:b1:ed:f6:03:1e:49:3b:9e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Validity
Not Before: Mar 25 23:01:28 2026 GMT
Not After : Mar 26 23:01:28 2026 GMT
Subject: CN=397a7ceb844eb5bdc33e65a0d2b7bf3b9d3db2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a2:c8:be:9a:71:f7:5e:a7:bd:3a:ad:fb:7a:
9e:e4:8d:f8:52:09:6e:2e:71:86:50:5a:87:4c:d0:
76:25:59:c3:dc:ee:2f:9c:dd:e6:5c:50:b6:5b:1a:
f1:68:ee:ab:82:ef:d4:b5:64:0d:54:79:fd:0d:90:
a8:64:b7:93:5e:12:c4:5c:a6:51:e6:87:4f:6d:ba:
53:5a:33:0c:c6:55:30:31:b9:ea:3d:02:4d:be:e0:
53:ce:a5:a5:a0:84:b2:e3:a2:c8:63:e4:b0:55:99:
24:e9:a6:fb:ab:37:7e:0c:75:30:c4:23:e5:aa:d6:
0f:b0:2b:e3:06:ea:a6:40:ef:92:31:7c:63:86:2e:
2e:8e:7e:1a:e2:b2:b0:15:9f:1c:97:a8:0e:5c:a2:
7b:9d:fe:b6:71:fd:87:2a:7f:b2:56:93:43:88:80:
d4:c4:ea:e6:b8:ec:81:40:07:24:2b:1f:f2:58:a1:
93:f9:62:60:41:1d:3a:a2:2c:9e:c5:d9:b8:7d:a6:
98:9c:d4:2a:a9:64:93:30:67:64:90:9c:a6:93:cf:
b6:87:98:2b:25:10:fd:36:8d:ff:ec:11:52:da:49:
e7:43:6f:f1:e4:b4:28:a3:0e:e3:91:47:04:21:57:
95:3b:f9:6a:18:7d:f3:f9:e9:9f:f6:99:a2:6c:42:
87:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7A:7C:EB:84:4E:B5:BD:C3:3E:65:A0:D2:B7:BF:3B:9D:3D:B2:DB
X509v3 Authority Key Identifier:
keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:3a:c6:84:6d:e6:44:93:f4:dd:05:41:e4:7f:f1:92:cd:56:
2f:cb:dc:16:b7:d9:d5:4e:95:8c:c3:76:7a:c8:f8:47:7d:2c:
33:b8:27:c5:04:5b:6e:4d:a8:82:a6:0e:e3:1f:1a:6f:42:e3:
ed:b8:80:22:95:03:57:65:90:ff:10:5c:b5:c0:bb:0a:37:68:
00:89:78:8b:f7:40:e0:bd:5b:0b:25:f8:74:2f:f9:46:ac:45:
d4:e6:75:de:fd:f5:33:6b:ab:71:7f:83:ae:d8:a4:8f:4f:02:
32:f8:0b:76:db:b3:d4:1a:f6:d7:a6:8b:5d:4d:bd:cf:eb:b1:
4f:6b:fa:58:21:c9:db:2d:2e:67:a4:25:23:cd:a1:71:30:9c:
38:16:fb:6d:a2:6b:18:2e:7e:e9:e5:bc:6d:25:88:05:41:30:
9e:ef:c7:e7:a5:6f:7f:11:62:54:64:6a:73:4b:be:ce:90:4d:
95:c9:01:f6:50:2b:aa:2c:e5:e9:21:4d:a6:6c:58:77:88:97:
7e:7c:13:fa:f6:41:6f:13:41:cd:19:48:5c:51:68:c8:fb:7a:
33:15:58:68:21:40:1b:f4:09:81:b3:a6:af:36:2e:f9:ab:9e:
5b:f6:3e:e9:b2:47:a1:44:e6:d1:d4:9e:df:7b:75:ee:58:9b:
48:cd:d7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:32 2026 by rpki-client