Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
File: HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft (raw, json)
Hash identifier: X4u5Pvj7HiZHwnQUBeJZ00pEhFdKQLd8J5+1zVCfxmI=
Subject key identifier: D6:9A:8A:66:8C:37:55:5F:50:1B:E3:61:F5:51:CA:8B:A6:0A:DB:2E
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial: 019D2703D58655AF1EC42D2D5243B855F6D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
Manifest number: 17F9
Signing time: Wed 25 Mar 2026 22:00:55 +0000
Manifest this update: Wed 25 Mar 2026 22:00:55 +0000
Manifest next update: Thu 26 Mar 2026 22:00:55 +0000
Files and hashes: 1: HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl (hash: vY0B7GwRbhluHjhNtVmCgdE8MS3R4fYhzk3f60+Mgbk=)
2: W_mPbXQdWoE3DWEm89aYtTyvXdM.roa (hash: Cuy5C/uLsNnCjQnpl1ezzAhceftWpl5e4uiEK2a9oas=)
3: kohaMOAFUb9m1qAoziqxSlDrzkI.roa (hash: zLdUfaZkNbzAb9CiXssBadeUcauoRp2vZNfyu16dqgA=)
4: oOubWaz2meS0_8Fp_zkutkVpQhY.roa (hash: pSmKXeOqsuxy538KjTVMIn4xkuzCLTfsM1rAsvfnG68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:d5:86:55:af:1e:c4:2d:2d:52:43:b8:55:f6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Validity
Not Before: Mar 25 22:00:55 2026 GMT
Not After : Mar 26 22:00:55 2026 GMT
Subject: CN=d69a8a668c37555f501be361f551ca8ba60adb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:92:fe:f1:d5:b6:a2:d4:7b:6d:c8:82:bb:
77:63:9d:f0:bd:f4:1f:cf:ae:bf:2d:61:f6:da:24:
4f:3d:55:8e:55:5b:91:07:97:60:03:1f:61:63:84:
7a:17:c2:52:43:09:9c:73:45:bd:fc:25:3b:ff:b5:
b2:a2:f5:57:c7:9c:ce:c9:b4:17:f3:01:90:55:0d:
fa:19:13:19:02:58:fb:99:2a:08:8d:2b:bc:4c:c5:
23:54:f6:35:e6:7a:64:97:5b:0e:1c:5a:f3:80:87:
37:7b:82:9d:7d:4e:0b:55:46:89:e7:51:43:dd:1b:
1b:f5:7f:4e:e7:1a:54:09:cb:3d:3a:0c:cc:6f:fd:
c3:3c:b1:76:6b:c1:85:9e:58:ec:00:6d:74:05:82:
25:f0:c5:b7:27:59:9a:64:8c:bf:71:bb:28:58:43:
74:ad:a4:82:f1:71:56:0a:c5:ff:00:60:49:8d:db:
12:1a:10:99:f2:8c:96:53:a5:7e:9d:80:79:9a:f3:
be:4e:cf:41:86:b3:18:fe:98:de:a9:9f:52:48:fb:
6e:ca:88:49:3a:3c:fa:93:d4:f7:97:7f:b3:4f:cc:
55:15:9f:fd:ae:2c:8b:17:1a:a5:7e:d8:7a:61:2d:
cb:60:6c:82:31:ae:c0:c2:41:78:be:06:ca:90:a2:
ac:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9A:8A:66:8C:37:55:5F:50:1B:E3:61:F5:51:CA:8B:A6:0A:DB:2E
X509v3 Authority Key Identifier:
keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8a:05:f9:05:d5:b7:d6:68:c4:27:38:33:dd:6c:ac:29:72:
7c:8f:4f:d3:74:ca:1e:e2:87:67:6a:ea:84:e1:1d:03:3c:b1:
53:15:3e:d7:c8:6a:e5:d1:3a:44:63:1c:d0:ff:d9:d8:ec:d2:
de:48:b0:f4:4a:2e:ad:94:4d:b1:0c:c8:11:62:bb:c5:f8:48:
04:b5:d9:15:d9:32:83:82:c9:2d:65:c1:10:dd:66:8c:a3:28:
6e:be:2e:13:52:9b:2e:4f:a9:af:21:63:d8:b7:dd:e4:88:8e:
ed:7e:f5:2c:da:7b:a0:32:6f:8e:42:bd:e6:54:3a:40:b0:e3:
89:7d:c6:08:85:cb:00:b1:e8:d4:ca:95:0c:8c:74:8a:9d:d6:
92:47:b2:fc:b4:ca:05:2d:a0:f4:a0:78:8d:6b:07:08:c1:b7:
7c:c3:28:bd:0b:eb:9f:e1:bc:17:52:c4:bd:a5:b4:b1:17:21:
f5:9d:bb:0f:0a:90:9e:06:b8:59:25:e0:c2:28:c2:0d:66:ac:
f2:f8:cc:c6:40:9b:1d:1d:e3:b7:9d:42:d6:03:da:2f:10:0c:
c7:60:0d:d1:71:34:00:21:fb:ed:67:68:3a:04:59:ce:23:5f:
38:02:fc:eb:ed:f4:99:33:84:28:8c:a6:17:0e:2c:6b:3f:de:
59:7e:c7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:04 2026 by rpki-client