Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
File: HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft (raw, json)
Hash identifier: cXof6AVxWNio/fyJsT4K5ZwsD2tPDaFjPPb1u42Iz7I=
Subject key identifier: 03:7D:32:3D:A3:C6:47:3E:8F:BE:4C:78:A3:5F:80:94:A2:EB:D2:07
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial: 019F8F10101E9BEFD5F8A497DF52027FF525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
Manifest number: 1938
Signing time: Thu 23 Jul 2026 13:00:22 +0000
Manifest this update: Thu 23 Jul 2026 13:00:22 +0000
Manifest next update: Fri 24 Jul 2026 13:00:22 +0000
Files and hashes: 1: HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl (hash: Gx0lJ+p2txhO7J59pwHvevtYvRFGWHWbzwAtg5ioj1w=)
2: W_mPbXQdWoE3DWEm89aYtTyvXdM.roa (hash: Cuy5C/uLsNnCjQnpl1ezzAhceftWpl5e4uiEK2a9oas=)
3: kohaMOAFUb9m1qAoziqxSlDrzkI.roa (hash: zLdUfaZkNbzAb9CiXssBadeUcauoRp2vZNfyu16dqgA=)
4: oOubWaz2meS0_8Fp_zkutkVpQhY.roa (hash: pSmKXeOqsuxy538KjTVMIn4xkuzCLTfsM1rAsvfnG68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:10:1e:9b:ef:d5:f8:a4:97:df:52:02:7f:f5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Validity
Not Before: Jul 23 13:00:22 2026 GMT
Not After : Jul 24 13:00:22 2026 GMT
Subject: CN=037d323da3c6473e8fbe4c78a35f8094a2ebd207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6c:5a:07:72:98:1e:8b:66:e9:d9:a6:80:f3:
6f:2a:18:09:56:0d:77:6c:11:4c:18:a1:65:6a:89:
93:79:e8:18:b6:c7:a4:07:36:3a:4b:6c:d5:5f:c2:
a1:78:3a:48:57:db:91:3a:55:c6:28:09:ea:28:e2:
25:85:74:77:dc:bd:15:0f:e4:ab:f2:63:3f:47:92:
33:25:f5:26:42:d2:f5:e9:43:97:d2:37:09:de:e9:
2e:2e:47:e3:3c:ee:b1:3e:0d:51:12:b8:eb:c3:13:
25:4d:85:be:9e:d3:49:c4:0d:92:16:35:43:8c:2b:
34:6e:36:61:04:f8:6d:23:fb:df:5f:f1:0f:c9:db:
85:74:79:44:72:a2:5f:cf:0e:15:af:7a:b3:62:31:
ae:ad:f1:1f:06:e5:28:08:c3:6f:de:29:6e:09:48:
1f:f1:f2:2f:35:39:b8:9e:1e:62:91:a3:b7:bf:ea:
48:f8:a5:f8:9d:fc:81:e5:9c:a6:70:92:5c:4e:14:
5e:71:07:58:a9:60:98:f5:b3:70:78:27:e7:e6:8c:
dd:5d:03:6a:ce:41:92:35:78:30:fc:2d:de:af:0d:
f1:7d:16:b1:ca:ed:d8:63:60:6f:e9:b9:a1:17:b7:
53:c2:7d:aa:77:b7:c3:d7:9e:66:45:03:1c:6f:08:
eb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7D:32:3D:A3:C6:47:3E:8F:BE:4C:78:A3:5F:80:94:A2:EB:D2:07
X509v3 Authority Key Identifier:
keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:34:a8:d7:56:89:23:15:17:f2:bd:e4:a3:5f:d6:91:b9:9f:
c2:46:cf:c2:d2:df:53:ac:c5:21:a6:51:5d:8b:75:6e:1a:dd:
c2:c6:16:3c:ef:f3:a3:14:8d:9e:a6:81:8f:c9:65:99:8d:c3:
8c:37:45:e8:2c:31:17:da:40:83:42:7a:5e:3b:4a:f5:bf:1a:
7a:27:fc:fe:21:6b:62:1e:c9:63:63:29:01:e9:a3:56:63:81:
06:19:b5:e0:cb:e7:f6:23:24:d9:6d:af:c5:3d:90:16:20:7d:
45:fc:bf:39:35:65:19:91:db:99:db:c1:59:db:09:aa:6b:df:
b6:97:cb:de:81:b5:43:8c:f0:b5:7b:61:a1:e2:04:27:48:2c:
58:8d:62:be:44:7c:45:02:eb:40:06:51:9d:2c:b9:12:3d:f3:
97:f4:77:7d:8c:89:13:e2:e1:54:3c:b3:b2:e6:49:57:dd:d5:
4b:8f:8f:5f:36:92:57:04:f8:e1:8c:42:1b:52:02:1c:21:c1:
4a:35:29:51:fc:4a:50:48:52:99:d0:2c:9f:f1:f1:ee:4a:87:
65:f9:37:bd:22:15:ca:d8:ce:81:a0:3e:12:72:fd:23:11:a5:
c4:17:62:22:23:62:35:dc:4a:0b:88:0f:74:f6:39:53:7a:7a:
6e:08:90:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:28:08 2026 by rpki-client