Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
File: HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft (raw, json)
Hash identifier: Spv3tygchEGwKYxSqCU7PyAFoZcS5nOb2gJmOKm1sao=
Subject key identifier: BA:42:68:D9:7D:23:A1:DF:DF:CC:72:F9:CF:4D:9E:3F:3D:A8:6B:32
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial: 01A11AF543755F9C873AF142F74912B8B0DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
Manifest number: 1A05
Signing time: Thu 08 Oct 2026 10:00:43 +0000
Manifest this update: Thu 08 Oct 2026 10:00:43 +0000
Manifest next update: Fri 09 Oct 2026 10:00:43 +0000
Files and hashes: 1: HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl (hash: coBc+/pBvpZWtTZME3z3tyNjY4HSEzGo/+YopuFEk5k=)
2: W_mPbXQdWoE3DWEm89aYtTyvXdM.roa (hash: Cuy5C/uLsNnCjQnpl1ezzAhceftWpl5e4uiEK2a9oas=)
3: kohaMOAFUb9m1qAoziqxSlDrzkI.roa (hash: zLdUfaZkNbzAb9CiXssBadeUcauoRp2vZNfyu16dqgA=)
4: oOubWaz2meS0_8Fp_zkutkVpQhY.roa (hash: pSmKXeOqsuxy538KjTVMIn4xkuzCLTfsM1rAsvfnG68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:f5:43:75:5f:9c:87:3a:f1:42:f7:49:12:b8:b0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Validity
Not Before: Oct 8 10:00:43 2026 GMT
Not After : Oct 9 10:00:43 2026 GMT
Subject: CN=ba4268d97d23a1dfdfcc72f9cf4d9e3f3da86b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:8e:5f:d3:ee:7b:f8:97:f5:15:5b:e7:89:
5f:8a:22:69:1d:2d:4e:3c:05:08:e2:25:5b:3c:c4:
9f:9c:d7:84:ce:88:03:07:b8:d5:ac:a6:38:76:ea:
1e:eb:b1:7e:71:33:c8:c8:b1:95:94:27:b5:86:0f:
59:37:1d:e6:a5:48:53:2c:82:30:35:00:3e:0d:d2:
95:83:e0:ed:00:6d:0b:d1:0b:ce:48:16:e0:e6:17:
dc:4d:be:d7:5c:85:91:a4:02:de:8d:a0:10:ff:86:
80:35:96:6c:24:04:b1:71:d8:4a:46:29:7b:90:34:
22:eb:91:16:57:d5:15:fc:19:11:1f:f5:fb:8d:c1:
32:b8:ad:de:a9:f6:7b:60:f8:32:36:16:7d:20:7c:
de:85:8e:e1:cc:2a:e4:76:77:f3:85:0a:5c:9b:d2:
c7:73:16:45:2d:80:af:7f:fc:eb:c2:fe:40:b0:70:
6d:67:18:02:74:df:d3:04:e0:88:a8:37:e5:c0:3d:
77:1b:c5:f5:3d:bd:4b:8b:02:68:67:27:7d:b8:0d:
a3:d4:6d:63:19:70:d1:b9:d0:e0:d0:6e:e6:05:af:
cb:38:de:70:0c:6b:2c:95:da:c2:dc:e4:9b:2a:96:
f3:05:4d:bc:eb:21:4f:9f:3b:5b:6b:de:97:16:d4:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:42:68:D9:7D:23:A1:DF:DF:CC:72:F9:CF:4D:9E:3F:3D:A8:6B:32
X509v3 Authority Key Identifier:
keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:bc:a6:fc:d5:13:87:d0:92:05:41:39:21:81:75:46:49:6b:
95:82:a7:ed:7c:45:b7:ab:0f:b5:3f:28:94:22:55:1d:83:9f:
94:b2:68:d7:82:7b:ef:44:16:ca:b2:5f:50:49:49:c2:9c:71:
b7:49:6c:e5:c7:46:76:29:b2:ec:c4:b0:44:0a:97:d6:0a:2c:
15:01:4a:fb:a5:af:2b:35:9a:a1:12:1e:70:2e:6f:56:18:da:
10:f2:cd:c0:7a:da:7b:ca:4f:02:fc:37:7b:82:bb:92:36:96:
94:13:a4:c2:3f:e3:1b:96:ac:7c:ef:91:79:ac:ed:bb:57:a7:
cd:58:9b:ce:2f:20:22:c9:3f:92:f2:64:2f:fc:0b:37:63:57:
ee:26:05:29:54:ce:61:d8:d5:7c:4e:e1:d5:95:46:c9:5f:9d:
cf:58:21:f7:26:68:ec:49:a1:6c:23:c3:a4:2c:d2:ba:8c:fd:
ea:83:67:33:c5:27:96:00:a7:67:7d:fb:ce:2b:39:14:be:ab:
96:94:f7:e1:b9:90:89:73:83:30:a5:13:66:a7:ad:92:a1:94:
a3:53:ab:d3:53:4d:af:17:fc:f5:44:e1:d7:7e:b9:cb:3f:29:
24:39:35:05:24:5b:da:33:c7:d4:1d:70:98:54:78:79:e7:b0:
33:a5:80:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:15:47 2026 by rpki-client