Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
File: HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft (raw, json)
Hash identifier: XDfnR+5ysYzDceo5q9sOeDSDNvqTP6WtyL3ugPUHbrA=
Subject key identifier: 31:60:14:20:38:EF:F5:02:10:68:69:5E:D6:FE:A9:5E:FE:D4:F9:40
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial: 019E2023DB25902CE420ED8428433ECDD494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
Manifest number: 187A
Signing time: Wed 13 May 2026 07:01:21 +0000
Manifest this update: Wed 13 May 2026 07:01:21 +0000
Manifest next update: Thu 14 May 2026 07:01:21 +0000
Files and hashes: 1: HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl (hash: IBZyhAb3uF/PPVC9TS8IkZedW30XW8f9Kr9RetmMieA=)
2: W_mPbXQdWoE3DWEm89aYtTyvXdM.roa (hash: Cuy5C/uLsNnCjQnpl1ezzAhceftWpl5e4uiEK2a9oas=)
3: kohaMOAFUb9m1qAoziqxSlDrzkI.roa (hash: zLdUfaZkNbzAb9CiXssBadeUcauoRp2vZNfyu16dqgA=)
4: oOubWaz2meS0_8Fp_zkutkVpQhY.roa (hash: pSmKXeOqsuxy538KjTVMIn4xkuzCLTfsM1rAsvfnG68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:db:25:90:2c:e4:20:ed:84:28:43:3e:cd:d4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Validity
Not Before: May 13 07:01:21 2026 GMT
Not After : May 14 07:01:21 2026 GMT
Subject: CN=3160142038eff5021068695ed6fea95efed4f940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:85:94:d1:c7:9e:06:97:ba:a7:13:77:50:d2:
9e:a7:8e:67:ab:74:31:43:7d:63:2f:f0:29:5e:b9:
cf:5f:5c:82:14:c7:df:52:0a:9c:12:ed:f4:c3:2b:
e8:17:10:c6:e0:55:54:7d:71:86:00:95:27:ba:bb:
14:21:53:a6:6c:b7:18:e3:92:dd:54:6c:d5:1d:8a:
a3:eb:8c:6d:ad:f0:70:bc:89:fb:76:63:5d:1a:0d:
78:1c:0f:8d:92:84:ef:66:a9:c3:51:7d:6f:ee:81:
55:c2:30:e2:f9:d7:77:db:48:22:0a:30:0d:be:d1:
0f:9a:85:65:47:eb:de:bd:2e:ee:c8:cf:24:91:32:
10:d4:69:3a:20:c5:ef:65:23:82:68:91:28:ed:f7:
8a:4e:a2:52:ee:64:29:e6:1d:a2:46:90:82:60:f5:
50:b0:38:b5:d2:77:38:a1:01:fe:48:cb:4c:1d:18:
9e:ce:c0:6b:11:49:21:b5:66:c5:6c:c5:e3:85:70:
51:b8:d6:26:cc:78:e7:ce:1c:f8:d9:27:5d:07:9b:
cb:c9:a5:f4:33:81:4c:91:82:da:28:1e:82:b9:58:
03:3d:d4:0a:93:f1:9e:f9:0b:01:e4:eb:9c:30:fb:
e5:78:f9:91:23:96:bb:db:f2:04:3f:dd:6e:ea:01:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:60:14:20:38:EF:F5:02:10:68:69:5E:D6:FE:A9:5E:FE:D4:F9:40
X509v3 Authority Key Identifier:
keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:54:9a:97:73:3c:b4:86:cb:29:18:20:d4:81:00:22:47:08:
8f:3a:d3:a2:09:8c:85:bb:24:14:a3:d0:3d:0e:ff:c6:c3:d7:
7b:fd:6a:cc:2c:01:8c:7b:ed:10:d6:2c:14:3a:ff:ac:3a:6a:
e9:7a:a5:0c:29:9a:50:a1:fe:8d:84:a5:02:c6:94:c0:2f:be:
be:b9:86:19:c2:0f:15:e0:49:8e:1d:6b:c2:f0:67:73:f5:0f:
45:22:e1:7a:08:6f:34:73:dc:f2:72:9c:48:3d:7f:6b:37:6c:
88:94:dd:3b:d9:3e:73:45:93:21:e1:72:1b:ef:c3:63:a2:33:
7d:5b:3a:a6:71:a7:84:e2:41:17:96:25:fe:2e:3b:40:f1:cf:
5f:f4:b1:6e:f9:bd:2e:69:44:56:e7:b2:e2:d9:c1:04:d5:1c:
61:35:7f:8a:61:75:39:3b:d5:22:b3:bf:4f:e0:33:19:c2:5e:
b4:dd:be:97:95:43:33:94:97:c8:c9:7a:ea:ca:d6:ce:94:2c:
47:50:f9:1d:d9:ed:62:86:78:ae:aa:48:84:b3:cf:07:3d:63:
63:8a:3c:e2:aa:e4:a2:2b:e1:3d:15:38:41:70:a3:40:02:0c:
60:a5:67:30:e0:2a:24:bb:32:d5:5d:1c:74:d0:c3:71:81:2c:
d4:d5:8b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:38:33 2026 by rpki-client