
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
File: HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft (raw, json)
Hash identifier: Jsyz+t/E2ZpEMS9JwO3LVt/2bnTcUN/19U7q1fLJ0ks=
Subject key identifier: 19:63:7C:FE:D6:80:A5:6E:8C:1F:CB:90:1F:82:92:15:4A:2C:0F:5D
Authority key identifier: 1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
Certificate issuer: /CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Certificate serial: 019F94A4FCDEAE3C0B61D687A293EB3BB029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 15:01:08 +0000
Manifest this update: Fri 24 Jul 2026 15:01:08 +0000
Manifest next update: Sat 25 Jul 2026 15:01:08 +0000
Files and hashes: 1: HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl (hash: mwWHqGvKwM3sYHRqNGecwZAkcdVg/nhkjS52FgYvCzc=)
2: oIEkw3PCXr1UYdRnKr9q4Q6XWcs.roa (hash: v1OkVWqraYOFjsEZ3LFnKjFEiGungWJLb2B2UAHBg6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:fc:de:ae:3c:0b:61:d6:87:a2:93:eb:3b:b0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Validity
Not Before: Jul 24 15:01:08 2026 GMT
Not After : Jul 25 15:01:08 2026 GMT
Subject: CN=19637cfed680a56e8c1fcb901f8292154a2c0f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:34:ed:a3:e1:b2:3c:11:2c:e4:10:de:df:
5e:b7:6e:15:dd:4d:b1:53:08:51:d0:68:44:e8:1e:
22:78:49:08:8c:c7:c5:ae:f8:e1:e1:95:07:e9:3f:
75:31:86:2c:de:30:b0:a9:86:2b:03:1a:13:45:dc:
2e:04:e2:34:d9:f8:e6:02:59:21:53:85:02:bc:a7:
ac:2f:ce:dd:b3:58:d9:d7:c9:f6:34:5b:ea:5b:53:
d4:a3:58:cb:14:88:e4:9d:5d:a2:47:60:fe:85:b0:
03:04:26:d5:95:18:c1:2a:e4:fb:dd:f9:e9:fc:e3:
60:a7:8f:5d:53:31:ca:c7:57:3b:db:14:35:d9:6d:
13:61:d8:82:22:82:e1:53:89:48:13:f9:bd:7e:34:
66:c2:c6:a8:5c:4b:4d:21:ef:94:42:ea:f0:1a:88:
f4:cf:b5:34:59:a9:70:41:c1:83:92:59:09:32:65:
b4:0c:12:70:3b:e3:83:c8:60:8e:c5:13:49:e8:66:
49:46:e5:21:f8:a9:86:8c:fa:19:d1:48:17:cd:51:
b2:8c:4f:a6:b7:0a:3b:ab:66:59:3e:a5:64:ad:2b:
5e:66:63:dc:ed:6b:d1:f8:30:2d:2f:09:c6:4a:55:
1b:a0:96:64:f7:67:a9:8b:ac:c3:2a:24:e1:a2:5f:
d6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:63:7C:FE:D6:80:A5:6E:8C:1F:CB:90:1F:82:92:15:4A:2C:0F:5D
X509v3 Authority Key Identifier:
keyid:1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:28:8e:65:4a:61:fb:87:fc:b5:15:c7:82:4b:35:2f:ae:64:
90:df:c7:ee:46:a8:0f:a5:88:3c:23:39:f0:7a:3b:19:bc:99:
30:92:47:b3:74:fc:e3:2e:05:86:6a:b8:ac:2b:5a:c4:36:bc:
a3:b3:0c:63:88:5a:8f:0e:66:5a:28:2d:5d:f8:c5:70:73:9b:
c2:1f:24:5c:6c:97:00:8d:a4:34:6b:e1:e3:dc:1f:9b:d3:bf:
c4:bc:67:fe:a8:af:8c:e4:90:39:4a:26:6c:14:03:dc:9d:c7:
99:f3:88:cf:23:e4:e6:d6:db:95:31:c2:72:2c:2e:31:68:06:
17:55:2d:cf:90:55:bc:38:7c:89:60:91:4f:da:94:bb:85:74:
91:0f:ab:9d:89:90:26:e7:84:61:65:bb:bd:42:64:f5:44:48:
fd:06:55:05:ec:11:23:0e:91:c7:61:17:a8:11:ec:e0:0f:d4:
63:08:1a:cb:37:3c:41:7a:fa:99:9b:74:17:cf:ba:af:7b:fa:
b5:4a:a2:d1:45:36:a1:01:15:99:ed:26:cc:15:b0:2b:a2:4e:
f3:e9:79:dd:67:fe:69:ff:e8:9f:75:9d:e2:57:55:0b:fe:9f:
eb:c1:25:ac:99:2d:69:f4:3d:69:1a:20:1a:83:3c:e6:15:12:
b1:8d:e2:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpPzerjwLYdaHopPrO7ApMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTBjODIzYzM2MGI1Zjg2MTQ4OTJkMzViMTAzYzY0Nzc0
ZmQ2NWQwHhcNMjYwNzI0MTUwMTA4WhcNMjYwNzI1MTUwMTA4WjAzMTEwLwYDVQQD
EygxOTYzN2NmZWQ2ODBhNTZlOGMxZmNiOTAxZjgyOTIxNTRhMmMwZjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWo07aPhsjwRLOQQ3t9et24V3U2x
UwhR0GhE6B4ieEkIjMfFrvjh4ZUH6T91MYYs3jCwqYYrAxoTRdwuBOI02fjmAlkh
U4UCvKesL87ds1jZ18n2NFvqW1PUo1jLFIjknV2iR2D+hbADBCbVlRjBKuT73fnp
/ONgp49dUzHKx1c72xQ12W0TYdiCIoLhU4lIE/m9fjRmwsaoXEtNIe+UQurwGoj0
z7U0WalwQcGDklkJMmW0DBJwO+ODyGCOxRNJ6GZJRuUh+KmGjPoZ0UgXzVGyjE+m
two7q2ZZPqVkrSteZmPc7WvR+DAtLwnGSlUboJZk92epi6zDKiThol/WhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBljfP7WgKVujB/LkB+CkhVKLA9dMB8GA1UdIwQY
MBaAFB6gyCPDYLX4YUiS01sQPGR3T9ZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFESUk4Tmd0ZmhoU0pMVFd4QThaSGRQMWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80OTI2MTUtODE2Mi00YjM3LWJjYmIt
NWMwZDA1N2VmMmE2LzEvSHFESUk4Tmd0ZmhoU0pMVFd4QThaSGRQMWwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS80OTI2MTUtODE2Mi00YjM3LWJjYmItNWMwZDA1N2VmMmE2
LzEvSHFESUk4Tmd0ZmhoU0pMVFd4QThaSGRQMWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJiiOZUph
+4f8tRXHgks1L65kkN/H7kaoD6WIPCM58Ho7GbyZMJJHs3T84y4Fhmq4rCtaxDa8
o7MMY4hajw5mWigtXfjFcHObwh8kXGyXAI2kNGvh49wfm9O/xLxn/qivjOSQOUom
bBQD3J3HmfOIzyPk5tbblTHCciwuMWgGF1Utz5BVvDh8iWCRT9qUu4V0kQ+rnYmQ
JueEYWW7vUJk9URI/QZVBewRIw6Rx2EXqBHs4A/UYwgayzc8QXr6mZt0F8+6r3v6
tUqi0UU2oQEVme0mzBWwK6JO8+l53Wf+af/on3Wd4ldVC/6f68ElrJktafQ9aRog
GoM85hUSsY3isw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:06 2026 by rpki-client