Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
File: hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft (raw, json)
Hash identifier: Dmu38W7FW8ZoHJ66LfYQS1PLjLn/mGlKm4Bw/VWLmOg=
Subject key identifier: 64:F3:04:AF:A1:83:EE:81:BF:D2:AC:19:CD:6F:82:9A:3A:48:5D:AD
Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Certificate serial: 01A0D87282F5D98ED4DB50C4BD673C573212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 12:02:58 +0000
Manifest this update: Fri 25 Sep 2026 12:02:58 +0000
Manifest next update: Sat 26 Sep 2026 12:02:58 +0000
Files and hashes: 1: Xt9gim6uGZAO-XoH9YVT_sjrnmc.roa (hash: EDOq5gPDJvJThydl2Ogu3GFdpWlVfncejE+dMuzQn70=)
2: c06039lKyV_J6xBbo-T4U-OvKpY.roa (hash: iZi7artEej/ZvwjEPmdFR6zAlAdw9xNqyuBRvLMxbow=)
3: hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl (hash: 2q+JTKNL+BNeTCRi7DkgEkU73lFzz++l/kllpVgBVwg=)
4: oEY0i9r3K2XzpeIqb_uHhC_ZJf8.roa (hash: eStOq03pWfBN0BFsIv2si494zM3pBol5A5EHh+T2UJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:82:f5:d9:8e:d4:db:50:c4:bd:67:3c:57:32:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Validity
Not Before: Sep 25 12:02:58 2026 GMT
Not After : Sep 26 12:02:58 2026 GMT
Subject: CN=64f304afa183ee81bfd2ac19cd6f829a3a485dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:14:45:9b:64:1e:a6:c1:a6:29:7e:1b:13:
b7:b2:f5:a6:39:cb:d3:a2:e9:ad:3c:74:a8:95:81:
d8:7d:22:7c:d5:d7:05:ea:56:0f:df:04:40:0c:25:
89:04:8a:67:c2:61:14:64:ad:fd:93:6f:66:79:1b:
db:ab:b9:79:33:82:3b:66:81:cf:be:d2:70:46:42:
36:b6:e6:4c:d2:34:0c:e4:d8:2f:94:4e:d3:0e:e7:
ac:34:1a:52:12:e0:2d:7a:ef:39:83:5e:5a:47:a0:
49:0c:4b:00:29:a5:ed:fd:cb:e6:04:36:0e:f2:7b:
11:e8:d2:3c:14:5e:4c:f1:9b:0c:fa:af:0d:49:ef:
aa:80:01:9d:ac:ad:e7:45:8f:62:64:61:b8:aa:00:
35:42:3a:5d:73:7a:6f:1c:9b:f4:3c:67:ce:2d:9c:
fe:37:4f:93:82:43:c7:9e:5d:5c:21:a2:f1:91:4a:
9e:8c:73:d7:70:10:1d:ed:b2:7b:2d:73:7f:55:11:
0b:a8:44:08:5e:de:36:df:a0:7e:25:88:97:d0:a7:
5c:3e:14:23:c8:8b:1c:ab:4c:81:c2:9b:45:15:b0:
03:2f:38:11:0d:50:e4:55:e4:06:69:50:41:66:58:
48:30:a2:e4:2b:5f:a3:56:45:1d:5d:2a:bd:78:a3:
dd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F3:04:AF:A1:83:EE:81:BF:D2:AC:19:CD:6F:82:9A:3A:48:5D:AD
X509v3 Authority Key Identifier:
keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:3d:94:34:fe:bc:12:5a:89:f8:45:38:e1:0d:cb:0b:41:a9:
ca:3d:97:b7:d5:74:50:63:39:51:b0:5d:f4:f3:33:64:e9:05:
20:76:0d:b4:de:3b:b1:e9:c4:29:88:66:16:a5:36:d5:52:4a:
ae:f2:00:3f:7f:77:a6:66:57:09:ed:ac:f4:6a:61:a3:48:a4:
4f:7f:79:2a:80:73:48:b4:01:a6:78:c3:1c:c6:af:4b:50:31:
d1:c8:5d:bb:4b:81:34:05:42:82:58:cf:19:1e:8c:13:1b:86:
cb:0e:07:7a:96:f6:ae:79:21:1c:2c:8c:c2:01:dc:3f:8d:a7:
d9:2c:88:13:a2:69:9a:c1:27:68:22:e0:2e:8c:50:49:18:f9:
e4:84:80:15:ed:77:77:95:3a:51:10:aa:be:bc:e2:c5:9c:9a:
94:b2:f1:4b:43:a3:91:d9:17:d0:83:9f:08:b9:82:89:31:35:
c2:6d:fc:a9:a7:0d:71:f9:da:7c:13:cb:dc:49:23:6b:14:2a:
c5:a3:48:6a:5e:b9:09:69:51:8d:b2:d3:25:e6:19:5d:0e:30:
38:79:7d:43:0f:49:5f:74:2b:7c:78:b0:16:ab:3c:7f:6c:d8:
e4:80:b7:db:04:59:bf:84:17:b0:68:7b:54:db:43:5d:a8:49:
45:dd:d1:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYcoL12Y7U21DEvWc8VzISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YThmZjRjOWM1NjY2N2Q5OTAyNWQ3ZjAxNTkxY2JmNzdh
ZDJmMDkwHhcNMjYwOTI1MTIwMjU4WhcNMjYwOTI2MTIwMjU4WjAzMTEwLwYDVQQD
Eyg2NGYzMDRhZmExODNlZTgxYmZkMmFjMTljZDZmODI5YTNhNDg1ZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2kURZtkHqbBpil+GxO3svWmOcvT
oumtPHSolYHYfSJ81dcF6lYP3wRADCWJBIpnwmEUZK39k29meRvbq7l5M4I7ZoHP
vtJwRkI2tuZM0jQM5NgvlE7TDuesNBpSEuAteu85g15aR6BJDEsAKaXt/cvmBDYO
8nsR6NI8FF5M8ZsM+q8NSe+qgAGdrK3nRY9iZGG4qgA1Qjpdc3pvHJv0PGfOLZz+
N0+TgkPHnl1cIaLxkUqejHPXcBAd7bJ7LXN/VRELqEQIXt4236B+JYiX0KdcPhQj
yIscq0yBwptFFbADLzgRDVDkVeQGaVBBZlhIMKLkK1+jVkUdXSq9eKPdlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTzBK+hg+6Bv9KsGc1vgpo6SF2tMB8GA1UdIwQY
MBaAFIao/0ycVmZ9mQJdfwFZHL93rS8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQt
MDZhNDk5NjhjMmQzLzEvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQtMDZhNDk5NjhjMmQz
LzEvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqT2UNP68
ElqJ+EU44Q3LC0Gpyj2Xt9V0UGM5UbBd9PMzZOkFIHYNtN47senEKYhmFqU21VJK
rvIAP393pmZXCe2s9Gpho0ikT395KoBzSLQBpnjDHMavS1Ax0chdu0uBNAVCgljP
GR6MExuGyw4Hepb2rnkhHCyMwgHcP42n2SyIE6JpmsEnaCLgLoxQSRj55ISAFe13
d5U6URCqvrzixZyalLLxS0OjkdkX0IOfCLmCiTE1wm38qacNcfnafBPL3EkjaxQq
xaNIal65CWlRjbLTJeYZXQ4wOHl9Qw9JX3QrfHiwFqs8f2zY5IC32wRZv4QXsGh7
VNtDXahJRd3RPQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:06:35 2026 by rpki-client