Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
File: HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft (raw, json)
Hash identifier: qAyrCQL7pe5dPyXX7wr3gwB1xT6/eNmL3zVAirGnmlM=
Subject key identifier: 45:19:48:ED:B9:A3:54:FC:EF:30:E1:6C:DD:30:92:E2:ED:AF:45:6E
Authority key identifier: 1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
Certificate issuer: /CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Certificate serial: 019D28BBE22A1BFC3FFA8A15995D411580CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
Manifest number: 0DBE
Signing time: Thu 26 Mar 2026 06:01:34 +0000
Manifest this update: Thu 26 Mar 2026 06:01:34 +0000
Manifest next update: Fri 27 Mar 2026 06:01:34 +0000
Files and hashes: 1: HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl (hash: vLIxmk19JuBdCEWJHivkst5vB9uNmICov2/1BqR3i4Q=)
2: gusOyZenv7586RqtEWmnhh7N0MA.roa (hash: 2ylZF1yMijEe2k4/d611VBCjiq1WUabPgeneyDm3vsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:e2:2a:1b:fc:3f:fa:8a:15:99:5d:41:15:80:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Validity
Not Before: Mar 26 06:01:34 2026 GMT
Not After : Mar 27 06:01:34 2026 GMT
Subject: CN=451948edb9a354fcef30e16cdd3092e2edaf456e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ce:01:b2:dd:a5:d2:99:de:31:9f:e8:9a:1f:
c8:ef:e3:09:37:46:b4:c1:87:36:e5:f6:db:d6:16:
de:57:37:71:21:4e:13:1b:5d:a1:50:ab:14:4e:84:
42:66:b3:3f:79:75:6d:26:aa:97:ba:d1:cc:6d:8f:
86:d1:70:f3:27:53:8c:92:f3:f8:58:2a:d8:0e:68:
73:cd:73:64:ea:0d:73:8d:63:9e:76:6d:b2:29:5b:
ff:78:6b:93:e2:5e:c7:c8:1d:15:4a:16:d5:e9:5c:
49:03:1e:84:d0:32:76:68:26:34:88:72:fb:3c:d8:
2b:d1:d0:65:3a:5a:1e:0a:c9:d6:9e:f3:3e:74:b3:
f9:e4:f7:52:90:b5:73:02:ff:ab:3c:a5:a8:ce:8b:
14:a5:9f:f9:9f:37:47:ab:be:6c:0c:98:47:52:32:
5c:d7:8f:f8:32:4f:3f:09:72:6c:50:90:f2:19:4f:
73:db:6f:90:3d:a5:87:64:fa:17:b6:bb:99:0c:cd:
55:b9:5f:49:95:19:ea:9c:52:8e:77:6a:47:0c:fe:
8f:6d:4d:ac:62:a3:ac:83:3d:c2:a5:ef:e9:53:4f:
23:52:5f:04:33:6e:2a:2f:0b:20:0a:23:92:30:ad:
a9:5c:7d:5f:f9:5d:b9:5b:98:94:03:91:57:c8:21:
24:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:19:48:ED:B9:A3:54:FC:EF:30:E1:6C:DD:30:92:E2:ED:AF:45:6E
X509v3 Authority Key Identifier:
keyid:1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f3:c3:ce:20:64:f6:c7:16:49:17:21:50:86:80:d5:6d:64:
05:ee:30:01:c2:90:5d:f6:bb:d6:7c:60:89:39:ff:12:de:0a:
7c:8f:dc:46:e8:42:3b:65:d7:f9:c3:2c:96:7f:85:36:5e:6d:
8a:aa:03:d4:47:40:56:fb:4d:88:e9:06:58:2a:ec:a2:f5:14:
51:50:3b:e5:7f:c0:d2:a8:6c:41:ed:f9:54:9d:d5:09:bc:ea:
db:c8:9b:ee:2e:ce:de:80:25:5a:17:f1:6b:43:da:c7:64:3e:
8c:04:91:c2:bc:17:b9:f0:4b:46:5c:62:0f:da:17:c4:19:d8:
fb:2a:2e:ff:ae:36:b1:d0:4d:d4:73:98:8b:5f:c9:d1:a9:06:
00:a7:ba:ed:3a:57:d7:e8:dd:ed:9f:f2:56:9f:d2:2e:eb:0d:
bb:d0:71:81:c2:51:6c:49:e3:eb:dc:03:fa:2a:26:19:47:5e:
1e:06:e9:97:cf:73:2e:cb:0d:4d:71:f1:c8:8e:79:95:cc:7f:
a0:e2:0b:46:b3:d5:61:d4:7f:ab:7a:22:57:c0:b8:70:17:59:
bf:b1:a9:2f:22:e0:56:e5:4a:57:3d:2c:35:e5:bb:23:5e:89:
fd:0e:5f:8b:c5:79:e9:86:f4:00:08:0d:72:dd:79:40:5a:84:
37:8b:d4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:42 2026 by rpki-client