Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
File: HqVZ2L9qwtho0GZa1X0sasFHIZM.mft (raw, json)
Hash identifier: JmlFivyz9dW0WJYGLa9Pcx/y/BU436nZ+Zb2YT4qq10=
Subject key identifier: AD:1D:0C:EF:8D:40:7E:E1:A1:90:00:ED:FB:D9:9A:0A:B2:B7:EB:76
Authority key identifier: 1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
Certificate issuer: /CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Certificate serial: 019D28167F985D396A7740B08B6959E5DDE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
Manifest number: 1818
Signing time: Thu 26 Mar 2026 03:00:56 +0000
Manifest this update: Thu 26 Mar 2026 03:00:56 +0000
Manifest next update: Fri 27 Mar 2026 03:00:56 +0000
Files and hashes: 1: HqVZ2L9qwtho0GZa1X0sasFHIZM.crl (hash: JDq2L/FeHzHVJXCnpV/eSpPYrBbZq7T4IeTy31YPKRY=)
2: h2Pj0fup6PmGgboIXfm183EEF9c.roa (hash: eferMGwRa6YXz1Q8h3PiGClbC5vOEBn3msIVlW/jo08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:7f:98:5d:39:6a:77:40:b0:8b:69:59:e5:dd:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Validity
Not Before: Mar 26 03:00:56 2026 GMT
Not After : Mar 27 03:00:56 2026 GMT
Subject: CN=ad1d0cef8d407ee1a19000edfbd99a0ab2b7eb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:71:0c:05:b8:1e:7e:8e:e9:4f:77:fc:41:97:
06:66:58:86:aa:c9:dd:51:be:80:b2:d5:f4:e0:22:
ee:45:b4:e7:da:64:e5:87:6b:07:6b:38:92:49:3c:
0b:18:1d:a3:67:fd:a5:4a:46:4c:f3:ea:dc:2c:cc:
33:4c:40:d5:68:5b:30:3d:2d:28:90:5d:95:5d:17:
e8:41:80:4c:8f:d7:36:e7:15:14:6e:c9:5b:dd:d2:
a0:4e:02:48:5a:c4:e2:bb:e3:10:3e:57:1d:9c:5b:
b7:07:3b:7b:9b:8a:47:cf:b7:3a:fb:0e:e7:a2:31:
5d:14:70:ca:cc:c2:2a:c2:c0:50:fc:82:1e:d9:fa:
5d:9f:ce:ce:2c:f4:5d:3e:23:50:96:e3:3b:07:29:
60:03:99:e8:f2:46:33:c7:39:5c:9b:c9:46:ff:02:
a5:63:e0:25:6c:57:83:69:22:7e:cd:95:b5:e7:5a:
fe:6b:fc:db:11:e0:2f:cb:f4:5b:b4:73:05:1b:fe:
6d:e2:ab:f3:17:1c:cd:92:3b:a3:6a:8f:a1:c2:63:
7f:a6:34:55:c8:77:29:39:c2:54:4a:03:cc:89:fd:
d6:19:12:97:3b:82:15:e2:5a:57:3b:ab:59:82:cd:
60:26:fe:e4:52:4f:0b:28:0b:dd:59:04:90:24:38:
9a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1D:0C:EF:8D:40:7E:E1:A1:90:00:ED:FB:D9:9A:0A:B2:B7:EB:76
X509v3 Authority Key Identifier:
keyid:1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5a:27:53:b0:e6:10:2f:1f:56:c2:05:97:47:09:d9:4c:ce:
f7:14:16:a2:7e:b5:c7:96:7d:46:ac:35:8e:a5:ab:61:0f:e8:
7c:91:8b:d6:08:2c:77:50:0b:4f:28:02:95:9e:74:55:27:05:
1d:0c:40:fa:ba:4e:99:4d:d5:7b:a0:a6:ba:fd:de:a4:85:17:
24:44:39:7d:16:d5:71:d3:ed:ba:70:05:55:27:69:67:f8:74:
8f:4e:8b:72:65:96:de:73:76:e5:01:ac:ff:79:ed:89:9c:08:
b0:0a:a0:62:81:a8:96:0d:a2:2c:c9:71:a5:ec:0c:d8:41:71:
1b:3c:b9:ca:10:07:00:db:f3:cc:fd:c1:75:d9:3c:92:6f:20:
8d:73:4a:2a:6b:e0:e1:8c:0b:98:f8:cc:d9:5a:ba:77:ab:33:
60:7b:d5:61:3d:07:56:24:d3:3a:b8:0f:86:a6:c1:f6:1d:15:
2c:d3:2c:0c:ca:22:4b:b1:e7:f5:4f:98:27:80:58:3b:12:2e:
d5:30:b3:7e:9e:fc:87:5a:c7:a2:ae:3f:9a:13:d5:4b:7c:d4:
0e:d0:e1:ba:1c:36:08:70:4e:64:e9:10:d1:fc:f3:4b:06:f7:
b6:33:07:c0:4a:d9:b3:f4:ae:8c:d8:84:79:45:e5:b5:43:91:
8a:7d:00:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFn+YXTlqd0Cwi2lZ5d3nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTU1OWQ4YmY2YWMyZDg2OGQwNjY1YWQ1N2QyYzZhYzE0
NzIxOTMwHhcNMjYwMzI2MDMwMDU2WhcNMjYwMzI3MDMwMDU2WjAzMTEwLwYDVQQD
EyhhZDFkMGNlZjhkNDA3ZWUxYTE5MDAwZWRmYmQ5OWEwYWIyYjdlYjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXEMBbgefo7pT3f8QZcGZliGqsnd
Ub6AstX04CLuRbTn2mTlh2sHaziSSTwLGB2jZ/2lSkZM8+rcLMwzTEDVaFswPS0o
kF2VXRfoQYBMj9c25xUUbslb3dKgTgJIWsTiu+MQPlcdnFu3Bzt7m4pHz7c6+w7n
ojFdFHDKzMIqwsBQ/IIe2fpdn87OLPRdPiNQluM7BylgA5no8kYzxzlcm8lG/wKl
Y+AlbFeDaSJ+zZW151r+a/zbEeAvy/RbtHMFG/5t4qvzFxzNkjujao+hwmN/pjRV
yHcpOcJUSgPMif3WGRKXO4IV4lpXO6tZgs1gJv7kUk8LKAvdWQSQJDiaUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0dDO+NQH7hoZAA7fvZmgqyt+t2MB8GA1UdIwQY
MBaAFB6lWdi/asLYaNBmWtV9LGrBRyGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80ZmI3ODUtZmZmMS00M2EzLWFmZDEt
NWZmY2M0NmFlN2I1LzEvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80ZmI3ODUtZmZmMS00M2EzLWFmZDEtNWZmY2M0NmFlN2I1
LzEvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1onU7Dm
EC8fVsIFl0cJ2UzO9xQWon61x5Z9Rqw1jqWrYQ/ofJGL1ggsd1ALTygClZ50VScF
HQxA+rpOmU3Ve6Cmuv3epIUXJEQ5fRbVcdPtunAFVSdpZ/h0j06LcmWW3nN25QGs
/3ntiZwIsAqgYoGolg2iLMlxpewM2EFxGzy5yhAHANvzzP3Bddk8km8gjXNKKmvg
4YwLmPjM2Vq6d6szYHvVYT0HViTTOrgPhqbB9h0VLNMsDMoiS7Hn9U+YJ4BYOxIu
1TCzfp78h1rHoq4/mhPVS3zUDtDhuhw2CHBOZOkQ0fzzSwb3tjMHwErZs/SujNiE
eUXltUORin0Alg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:09 2026 by rpki-client