Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
File: hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft (raw, json)
Hash identifier: XoNClTAElgSyq8mnDicvUp5YfJ7Ok8pUVMdVJOELjhk=
Subject key identifier: 14:95:A0:21:D1:91:6B:E7:F4:2A:54:77:5C:17:07:15:D4:A2:90:18
Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Certificate serial: 019E1F47844A0AE59ABC1977793ACDED3B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 03:00:41 +0000
Manifest this update: Wed 13 May 2026 03:00:41 +0000
Manifest next update: Thu 14 May 2026 03:00:41 +0000
Files and hashes: 1: Xt9gim6uGZAO-XoH9YVT_sjrnmc.roa (hash: EDOq5gPDJvJThydl2Ogu3GFdpWlVfncejE+dMuzQn70=)
2: c06039lKyV_J6xBbo-T4U-OvKpY.roa (hash: iZi7artEej/ZvwjEPmdFR6zAlAdw9xNqyuBRvLMxbow=)
3: hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl (hash: e+vDQeF/wp7JgvpYC1mVq0988NJoFLD1RXZ+9UYvUww=)
4: oEY0i9r3K2XzpeIqb_uHhC_ZJf8.roa (hash: eStOq03pWfBN0BFsIv2si494zM3pBol5A5EHh+T2UJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:84:4a:0a:e5:9a:bc:19:77:79:3a:cd:ed:3b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Validity
Not Before: May 13 03:00:41 2026 GMT
Not After : May 14 03:00:41 2026 GMT
Subject: CN=1495a021d1916be7f42a54775c170715d4a29018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:cd:37:00:6f:d4:74:9c:bb:9b:fc:9d:3b:
a7:b3:ec:7f:7c:e2:ab:c8:76:65:74:0d:25:62:16:
57:eb:41:ca:5b:64:88:db:f8:80:95:0c:05:0c:3a:
8e:0d:57:87:da:e4:bd:b7:2a:f2:d3:9a:10:b1:46:
1f:e5:34:b8:6e:a5:8f:36:03:b2:13:ae:30:de:d9:
6b:94:1b:28:6b:25:85:20:89:1d:20:46:de:87:5e:
43:2d:d2:a6:35:70:2b:e1:71:3c:ef:21:51:00:c5:
e7:1f:22:ac:c5:93:8a:44:e8:69:8a:98:91:ab:05:
12:c2:d8:90:27:09:cc:50:54:b4:dd:7a:4f:b4:95:
d0:92:74:6f:e3:eb:0c:21:6f:75:96:e4:bd:6e:63:
6a:6a:94:ed:ef:af:3c:a3:eb:d4:3a:cf:a7:35:89:
ea:4f:c6:13:4d:64:52:b5:1f:a7:19:af:a8:be:54:
bd:7d:17:66:ec:5d:7e:bf:5b:51:5c:1d:93:94:61:
74:93:6e:31:b5:96:22:5d:83:cb:7d:23:c7:3d:63:
a9:da:ff:26:94:c0:b6:69:84:86:3c:b5:fb:dc:97:
22:ea:46:59:aa:d0:e7:8a:38:9d:c2:66:31:51:1e:
e0:b6:3d:e6:9c:68:4d:e6:19:7a:83:f2:89:56:95:
42:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:95:A0:21:D1:91:6B:E7:F4:2A:54:77:5C:17:07:15:D4:A2:90:18
X509v3 Authority Key Identifier:
keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:71:94:aa:f4:e7:74:a9:4e:32:99:3c:df:0b:55:44:e2:3a:
d8:41:a6:c3:a2:53:e2:dd:a9:dc:a5:f3:9a:59:1a:4a:df:18:
3e:cb:ec:d0:73:c1:1d:f9:03:ae:92:1d:5b:43:d5:74:e7:e8:
c4:6f:80:f7:00:3b:72:48:ae:55:cb:10:0a:1b:52:83:2f:62:
af:5e:ec:9d:3b:e5:ef:41:1f:72:fc:d1:b0:5a:08:fa:e0:35:
f1:1a:1f:1c:0b:28:98:e0:02:6d:e1:0c:cd:50:3d:05:a9:90:
9f:0b:bc:3a:b6:27:e9:c2:03:db:df:99:96:b1:d9:79:90:5a:
38:53:ae:d0:83:89:d8:c9:19:0c:1d:55:d7:9c:56:75:c3:eb:
33:75:f8:91:f7:4c:6c:23:79:d8:ab:69:b6:4d:5c:ad:cc:ae:
2a:56:67:d6:c6:aa:d5:ce:36:32:04:6b:8d:81:1c:b1:94:a6:
c5:28:b7:f0:f0:d4:6d:cb:9b:02:83:ea:b5:41:b4:6d:33:19:
5a:96:98:fb:7b:43:9d:63:7d:e7:84:40:26:bc:ee:85:c4:b0:
0e:98:8f:cf:89:fa:0f:a3:27:a9:30:48:4f:33:e4:cf:56:b0:
28:b1:db:06:35:d4:83:fd:66:61:20:bd:0c:50:dc:01:67:61:
6b:03:cd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:47:35 2026 by rpki-client