Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
File: HNq3BST9UTE7hPXY9GNio9jICBQ.mft (raw, json)
Hash identifier: 4bKK2Znxf2uD8XcNp6gFl6Wn2ZAGwiKj5LCTQuMjG1k=
Subject key identifier: 87:B2:B2:47:C5:C1:89:CE:81:6B:C8:3C:0D:FF:05:31:34:03:FF:8F
Authority key identifier: 1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14
Certificate issuer: /CN=1cdab70524fd51313b84f5d8f46362a3d8c80814
Certificate serial: 019D26CD2A7B1FCA55AA2EE1D2D468BF948D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:01:13 +0000
Manifest this update: Wed 25 Mar 2026 21:01:13 +0000
Manifest next update: Thu 26 Mar 2026 21:01:13 +0000
Files and hashes: 1: HNq3BST9UTE7hPXY9GNio9jICBQ.crl (hash: 8isn3dKmWeDkJK2GT3tTl5xLcXE/PlUtOykCayq+XzY=)
2: wJTOj0mEUrIF3Tlq4qTWWTuOppI.roa (hash: w9rdqk85HiQNy+SgpZs0zo1ZOjcfj7xojv16EEwMZF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:2a:7b:1f:ca:55:aa:2e:e1:d2:d4:68:bf:94:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdab70524fd51313b84f5d8f46362a3d8c80814
Validity
Not Before: Mar 25 21:01:13 2026 GMT
Not After : Mar 26 21:01:13 2026 GMT
Subject: CN=87b2b247c5c189ce816bc83c0dff05313403ff8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:54:83:9c:e4:a9:71:83:db:8a:9d:95:89:ce:
e8:61:bc:5e:81:25:5b:05:c3:79:3c:8e:a5:3e:03:
a3:44:6f:d3:bb:22:fb:4f:a0:85:ac:af:13:e9:96:
0d:60:00:20:b6:d8:05:1a:19:54:24:3b:5c:ed:56:
0c:81:d0:ab:0a:cc:77:1a:50:44:f3:ac:78:53:c2:
ac:76:ba:94:64:27:27:14:08:c0:75:27:f5:74:0c:
18:94:a9:ec:b7:47:42:17:ad:06:92:cc:0d:b3:a2:
08:f1:0b:6c:63:ee:19:0c:be:17:fa:7e:7f:cb:d0:
0c:ee:33:02:23:85:4c:77:1a:77:55:1e:5a:3b:1e:
99:9f:ac:1b:4b:55:ee:b2:3f:f1:c0:65:50:de:4f:
35:70:af:9a:c8:09:b6:ac:2b:21:40:55:b8:74:ac:
c3:c0:a0:4b:78:81:5e:06:a9:08:cf:e1:c2:28:85:
20:58:44:82:1f:8a:2f:a3:d8:06:18:64:6f:5e:e5:
9c:1d:8b:69:aa:b9:9f:3e:e7:5c:25:74:0b:f1:e8:
20:0f:21:4e:58:3b:3e:08:e9:c2:ee:c7:4c:1f:15:
1e:02:e7:21:d2:7c:33:a2:b1:a4:8e:95:6b:eb:ad:
89:98:e7:98:1e:0b:29:94:c0:a3:50:1e:60:e7:d5:
bd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B2:B2:47:C5:C1:89:CE:81:6B:C8:3C:0D:FF:05:31:34:03:FF:8F
X509v3 Authority Key Identifier:
keyid:1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:40:44:79:a4:2f:bf:b9:78:c4:6c:42:8f:b9:ab:08:cd:c2:
a8:05:fb:c5:46:1c:71:d4:7c:63:df:c0:92:d1:7b:5c:92:9c:
2f:c4:87:41:23:99:46:eb:33:46:d6:ff:6f:74:a0:9d:28:44:
e5:fb:e2:18:24:56:f3:0a:b7:ce:98:c8:5d:0a:bc:3d:d6:c9:
5a:f5:46:86:4f:10:8d:64:00:65:c1:eb:c1:63:b2:2a:ec:02:
6a:00:26:1d:f4:c8:ef:07:01:c0:c9:88:c1:f6:5c:96:e6:75:
cf:38:a7:07:25:60:3a:e6:d8:c6:4a:41:0b:d7:04:8f:66:40:
26:04:38:bb:f0:e4:f7:2d:ec:03:3f:4a:1a:4c:05:6c:e6:01:
15:ba:75:47:78:68:d0:68:73:df:6e:dd:c9:2e:98:9b:1a:1c:
e5:28:38:f8:3c:fd:ce:c4:09:b4:d8:c4:43:1b:c0:8a:81:56:
85:f5:7a:57:cb:2e:2a:82:ab:a5:7c:54:f5:60:36:f2:7b:7f:
06:92:a9:21:65:49:78:e0:04:a5:e3:66:9a:2a:e2:44:f6:15:
43:c3:24:5c:1e:c9:0f:0e:63:27:0e:c2:a0:df:9e:0b:6d:b6:
d5:e7:1b:bb:f3:86:d7:29:ca:45:81:09:1f:fa:ab:f1:f9:74:
d1:bf:ec:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:40 2026 by rpki-client