Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
File: HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json)
Hash identifier: Sz+j/wctvyK1b7OLTx52UntDSN7JYifzkTDnz7Oq47s=
Subject key identifier: 31:07:98:E5:3F:45:18:6E:14:6C:F9:F8:23:B1:77:A8:0E:56:4C:90
Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
Certificate issuer: /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Certificate serial: 019D26CD663CD4D61DF8F1953578D5879338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
Manifest number: 13F4
Signing time: Wed 25 Mar 2026 21:01:28 +0000
Manifest this update: Wed 25 Mar 2026 21:01:28 +0000
Manifest next update: Thu 26 Mar 2026 21:01:28 +0000
Files and hashes: 1: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: RzlxKt5roG8vM4rK7nnHm6egxV6yG49Lw82YwaC7gbg=)
2: kMtugILpiPzEeW8OKVlItHoOS1w.roa (hash: lAQ2ZT9NHZiz0srqLkoDG7be21LY+uZcdjIbYN8bvbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:66:3c:d4:d6:1d:f8:f1:95:35:78:d5:87:93:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Validity
Not Before: Mar 25 21:01:28 2026 GMT
Not After : Mar 26 21:01:28 2026 GMT
Subject: CN=310798e53f45186e146cf9f823b177a80e564c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:7e:eb:d7:06:28:90:93:67:42:d3:f6:4c:
c4:0d:60:a8:e9:b8:d9:12:f9:d5:16:2e:4d:fa:f3:
a0:dd:2b:e2:c3:b9:66:40:7c:9a:08:4b:eb:bc:46:
e6:a0:56:5a:3c:99:5e:a7:14:42:cc:60:8b:e0:a9:
1d:ac:71:09:bc:0f:63:37:49:aa:1f:a8:39:f3:20:
12:70:75:4b:19:4f:c7:b9:8b:61:ed:a2:ac:68:6d:
0a:b1:51:4a:6c:c0:2f:17:ed:ca:cf:ef:05:81:96:
c8:ca:12:57:53:1b:c6:05:5b:e3:b0:35:29:69:d7:
cd:4e:ce:fb:f8:85:3b:a1:79:5c:5b:bd:55:90:cd:
14:b2:b7:0d:c9:3a:60:42:a4:c6:59:a4:74:09:00:
44:5d:74:b0:fc:e8:3a:f2:de:45:07:cb:64:bb:c2:
c5:c1:3d:64:0f:6b:5c:bf:cf:ff:0f:52:e3:33:54:
27:9d:37:0d:e3:15:0a:88:45:d3:28:66:b6:e2:9b:
6b:d8:01:f6:3f:bb:ac:2b:15:0a:9e:ce:78:13:6a:
06:82:a5:86:2a:b0:64:50:05:3a:0a:88:b0:3e:70:
43:4d:2e:d5:ac:36:60:19:95:22:70:fc:b1:37:27:
23:9c:3f:3d:ae:92:03:34:ef:bc:9f:a7:42:62:a5:
58:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:07:98:E5:3F:45:18:6E:14:6C:F9:F8:23:B1:77:A8:0E:56:4C:90
X509v3 Authority Key Identifier:
keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:35:6c:09:0c:b0:18:40:bb:29:14:81:a7:dd:ef:ae:6d:2c:
a2:bd:9e:4e:78:41:d5:ca:cb:cc:58:71:02:61:38:48:13:e1:
f6:9d:f8:c9:71:b1:9d:31:50:2d:7b:db:06:9a:64:85:35:80:
92:ef:7a:87:c4:f6:26:e7:6f:73:92:72:fb:23:88:8f:16:81:
b7:3a:c0:d1:08:f3:d9:11:44:65:83:c1:76:ca:6f:4d:ef:91:
d3:f4:39:ef:dc:a0:cf:5b:2e:4a:6f:41:b4:8f:9d:d4:ec:13:
ab:db:46:d4:4b:47:9b:c8:85:83:5e:f4:ff:72:f6:c2:39:2c:
a0:24:91:39:21:1d:88:24:f8:f3:04:06:41:ac:5c:6a:f9:38:
73:85:09:37:04:b9:d0:2e:cd:6a:45:8f:a3:86:f5:58:e9:ef:
fa:6a:43:1c:eb:43:16:04:07:07:b5:f5:c2:5f:62:85:7e:63:
99:82:e1:b2:3e:68:96:93:33:63:10:f6:53:f0:d2:cf:e2:98:
b9:75:05:79:7c:7a:a0:2d:b2:27:4a:e4:32:ce:69:ed:00:63:
8d:93:d9:34:1d:cc:61:f5:6a:22:de:a9:e8:1d:06:fc:e9:aa:
3f:ac:8d:c2:60:ed:54:74:6b:43:8d:6a:54:58:8e:45:11:21:
74:aa:ac:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:41:05 2026 by rpki-client