Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
File: HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json)
Hash identifier: 49Q/f+eeqSrKmW7882qSaO0wZDj4/Neg1Jk2D+jmHjE=
Subject key identifier: 1D:06:CC:BA:42:18:F0:57:D6:CD:45:B6:4E:52:CB:AE:E5:80:9F:DF
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 019D2695C61AE705B06183982F95A8AEF36A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
Manifest number: 0F48
Signing time: Wed 25 Mar 2026 20:00:42 +0000
Manifest this update: Wed 25 Mar 2026 20:00:42 +0000
Manifest next update: Thu 26 Mar 2026 20:00:42 +0000
Files and hashes: 1: A_5oAx6RTX4seU-tsf_hsJM1QfM.roa (hash: v9Bgj8QT90sJo8g5+vI6AXOfjQ2Zxqu0x7TfHuAGD6g=)
2: CIwlYwnQgY17UeavMkm13EVL2n8.roa (hash: r4bZKQmC1Ctifqf/+GSiUbszN3swZZeF7mrqnTsUuQ8=)
3: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: qHMcLnZZ7W9eu6ihgymMOp0pbhRFfJU3A7G/N27m84g=)
4: IzAZsf_Qc2A8pMxdGG-nBxB2gRw.roa (hash: 4TJbYmdeXG/rQN3FAOOPwKLfkTdziJof+SKAImG/iP0=)
5: liurjQr2aFUZ4RN7sB5e2xaGm1M.roa (hash: YNt6MjSDV5Wvd3Oc5pFyN0vEC7cDDHJYrDTH0YBIpGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:c6:1a:e7:05:b0:61:83:98:2f:95:a8:ae:f3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Mar 25 20:00:42 2026 GMT
Not After : Mar 26 20:00:42 2026 GMT
Subject: CN=1d06ccba4218f057d6cd45b64e52cbaee5809fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7e:d2:e4:ab:3e:14:f1:19:05:c3:09:77:e0:
f9:ce:f9:57:20:a4:24:d8:ba:84:cd:83:99:c8:cc:
9b:c8:31:d1:c7:59:a1:1e:82:98:14:c1:8f:6a:07:
e7:ba:e4:8a:7a:d9:81:de:9b:4d:6c:fe:53:10:42:
ac:55:b8:ea:6b:15:a3:d3:f9:d8:99:b5:67:44:7c:
bb:3f:39:48:e9:e5:8f:4d:30:1e:a3:6a:07:e5:71:
7c:98:85:14:2a:93:75:ec:e2:7b:b8:f8:9d:c2:af:
21:50:5b:6b:4e:74:40:65:f1:1e:f2:15:65:ff:e3:
8f:d2:18:b5:6f:0a:49:6e:65:ec:96:41:47:2f:4d:
d0:07:d3:43:1e:2c:e6:22:70:4c:54:48:57:66:3f:
e1:9c:8d:b7:d7:a3:7c:91:a8:f4:2e:10:aa:ed:fe:
80:ee:58:a5:b1:e5:56:f7:ce:9e:2e:33:55:c8:23:
b0:78:fb:4b:37:8c:59:cb:d8:0e:a1:cb:cb:9e:67:
c9:cf:1c:53:6b:a1:2d:ab:e3:69:04:4e:b9:7f:aa:
78:82:0e:45:49:e7:c4:2a:69:1e:a3:d5:a4:44:5c:
4c:bc:36:98:82:fe:d4:a2:ff:4b:52:d9:6a:9a:07:
c8:de:23:df:d3:0e:3e:5e:c9:b8:bf:b3:e2:55:f0:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:06:CC:BA:42:18:F0:57:D6:CD:45:B6:4E:52:CB:AE:E5:80:9F:DF
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fb:fc:39:c6:42:de:32:6b:af:59:0c:50:e1:e9:fb:de:3b:
41:aa:84:74:21:68:87:c7:76:e0:ce:b3:92:8d:93:2e:23:3f:
87:e4:ed:7f:e1:59:47:ca:cb:51:82:80:f9:92:b6:a5:26:07:
01:d9:78:1d:76:7b:11:95:b2:40:c4:11:bd:1a:85:c9:63:9d:
1b:28:79:dc:eb:de:95:9d:fa:23:8e:7c:72:1f:f9:fa:85:68:
08:7e:0c:82:96:11:93:0f:9c:6a:1e:d8:e3:00:e2:84:1b:3a:
fd:1f:8d:07:8f:15:2e:92:73:a5:b4:ec:f0:e6:dc:0d:22:fa:
ae:b5:9d:c5:6b:67:14:94:7f:31:e5:3e:8b:73:4d:6b:ec:91:
37:28:a5:f0:23:96:76:4e:9e:5e:91:32:04:42:64:61:c7:cf:
00:85:38:ec:6c:96:27:34:fd:d5:1c:d8:90:17:25:92:fc:9c:
a3:85:b9:3b:39:a0:c1:aa:93:e3:ca:a2:a2:c8:7f:cd:37:ca:
0c:3c:ce:7c:1c:a9:ce:07:e7:4d:f7:d5:3f:22:e5:4b:78:d9:
ed:61:e5:2f:06:8d:fe:be:7d:6c:f3:3d:3c:4e:b9:dc:fd:83:
09:aa:d8:56:c6:f5:61:0d:b2:2a:65:7c:50:94:ec:29:71:6d:
63:54:1c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:52:16 2026 by rpki-client