Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
File: hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft (raw, json)
Hash identifier: tWnb/2WQSQYNrJ90zQyN+g4wG2m9TGp69fpjpQVr+zk=
Subject key identifier: 78:FE:FA:62:46:F6:F4:DF:9B:DE:0F:51:B1:15:E8:AB:8C:72:07:A1
Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Certificate serial: 019D2816E406EB7022A8EEAF517B7BA82B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:01:21 +0000
Manifest this update: Thu 26 Mar 2026 03:01:21 +0000
Manifest next update: Fri 27 Mar 2026 03:01:21 +0000
Files and hashes: 1: Xt9gim6uGZAO-XoH9YVT_sjrnmc.roa (hash: EDOq5gPDJvJThydl2Ogu3GFdpWlVfncejE+dMuzQn70=)
2: c06039lKyV_J6xBbo-T4U-OvKpY.roa (hash: iZi7artEej/ZvwjEPmdFR6zAlAdw9xNqyuBRvLMxbow=)
3: hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl (hash: LCcix+MYa0Dz7PvryKr2t6+ztqU+mgr+Ff6ZW/BjU7Q=)
4: oEY0i9r3K2XzpeIqb_uHhC_ZJf8.roa (hash: eStOq03pWfBN0BFsIv2si494zM3pBol5A5EHh+T2UJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:e4:06:eb:70:22:a8:ee:af:51:7b:7b:a8:2b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Validity
Not Before: Mar 26 03:01:21 2026 GMT
Not After : Mar 27 03:01:21 2026 GMT
Subject: CN=78fefa6246f6f4df9bde0f51b115e8ab8c7207a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b9:ff:9e:5b:b3:ee:89:07:0e:60:92:1c:82:
bf:dc:04:ff:d1:7d:d1:35:2c:43:f8:32:a9:2a:c7:
f6:2f:27:71:fb:d0:c5:e9:32:f1:4b:d9:fb:6d:1c:
36:e8:8e:5b:9d:5d:e9:6c:b7:aa:51:97:ed:8e:90:
15:8a:3b:ea:9d:ed:3c:5b:aa:b8:c8:8b:0a:f2:ad:
9a:9f:f0:40:55:a5:66:f1:e7:46:07:3c:f2:83:48:
5e:ab:4e:e5:de:a4:0e:f3:ea:4c:e8:8a:4d:9e:f2:
c9:30:c8:a3:5d:8f:a4:ae:a8:e9:c9:ae:83:a3:8d:
50:1b:b4:03:0a:7b:58:32:4a:c8:65:ba:06:23:f0:
e5:24:4f:16:40:ee:87:25:2e:74:db:0d:28:62:73:
6f:54:86:4f:e1:0c:39:ae:b9:eb:f2:1c:7f:48:1b:
85:40:2e:fa:f4:b6:9f:22:87:08:8c:e0:35:05:8f:
d3:38:90:8b:0a:23:02:e1:91:c5:b2:87:5c:86:90:
99:3a:e8:2b:bf:50:39:36:74:32:9e:19:7f:4e:ee:
65:ba:17:71:18:24:2c:f8:5b:58:6f:6e:bc:b7:84:
00:cf:b9:8a:b9:95:d2:7f:dc:6a:fd:b9:32:3f:cc:
b4:ef:26:25:7b:2d:48:c8:bd:09:75:3a:be:40:23:
90:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FE:FA:62:46:F6:F4:DF:9B:DE:0F:51:B1:15:E8:AB:8C:72:07:A1
X509v3 Authority Key Identifier:
keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4d:8a:83:89:8e:50:56:65:51:ce:34:51:e2:75:b9:f5:f9:
5a:82:0b:cc:a2:b6:40:59:e4:35:75:2f:91:52:9b:bf:df:05:
7e:47:f8:31:b1:52:00:c8:e8:ac:02:fa:9d:bc:3b:de:3e:33:
3e:80:a3:ba:98:a3:45:06:16:bb:05:83:84:ed:d5:4d:0c:d5:
69:54:b5:36:0e:4e:21:4a:00:7d:b4:94:13:87:1a:eb:cd:90:
f9:0f:85:8c:75:44:b8:7e:6d:47:db:ff:f1:ee:95:dc:ff:f4:
61:77:5b:1e:48:83:25:68:d8:b6:d2:0d:d4:0c:5a:55:82:2a:
9d:e6:62:ed:51:5a:69:1a:8f:a0:fe:59:27:8d:4a:ac:44:d6:
55:55:0a:05:50:a2:16:c4:ea:f4:c8:fe:d4:9d:a5:1e:57:cb:
09:92:77:1f:39:20:a2:46:7a:88:c9:4a:7e:cb:19:a6:f1:e8:
fe:a8:52:5d:3e:13:42:e0:be:36:94:4b:e6:2b:3b:c1:21:95:
ee:44:f7:19:6d:0c:d5:4c:2c:57:a3:0b:d6:c5:ab:2b:dd:1d:
eb:0c:3a:2b:e4:5f:0f:95:86:03:29:c5:db:9c:2a:fc:1b:12:
fd:d3:7b:35:51:27:80:96:11:30:c4:bf:9f:3b:34:16:69:17:
6d:38:e2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:24 2026 by rpki-client