Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
File: HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json)
Hash identifier: LD+qGjVowdB5kIhBPPGY0WJ3moMsgdvoRtt4oVxiYFw=
Subject key identifier: E5:68:41:69:D9:33:A5:04:9F:CF:88:B8:48:2D:34:BD:15:44:85:03
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 01A0D83C4A21D8F35DBB14D8447C7F5F390D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
Manifest number: 1A82
Signing time: Fri 25 Sep 2026 11:03:44 +0000
Manifest this update: Fri 25 Sep 2026 11:03:44 +0000
Manifest next update: Sat 26 Sep 2026 11:03:44 +0000
Files and hashes: 1: 1-zqC4HhQSozydEfSsWMeVRvX4Ag.roa (hash: YCbMIIG2MrUDfBfXlLOUYihuI+nwLwGzroFonhJo9+c=)
2: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: ePKYGQ25vRG0PmEnbSVuWPMjjr61QoCKzJ1v4OwowtU=)
3: eQBqd8VSQ_-EDmCXW9sFFYDeMQk.roa (hash: dEI6v24yV0EpcI35EHdwZC8mHRo0m2mxSHgvKT9A5+8=)
4: xZQQ0CvgvGISAk0eT_rFmazBHWc.roa (hash: 2uo51y4FTldRjelw7bQ2s6OQpSKwuYg+UN+zR4NJjsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3c:4a:21:d8:f3:5d:bb:14:d8:44:7c:7f:5f:39:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Sep 25 11:03:44 2026 GMT
Not After : Sep 26 11:03:44 2026 GMT
Subject: CN=e5684169d933a5049fcf88b8482d34bd15448503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cd:e9:7b:b1:73:70:2e:c6:4a:91:73:a6:4a:
8c:15:dd:78:8c:1c:6c:e2:90:23:a9:5e:f9:38:bb:
b8:ba:84:34:53:d6:0d:f1:95:44:89:e9:82:cd:50:
69:ed:50:73:5b:22:c8:03:38:5a:00:4b:33:d7:a8:
a2:df:1c:38:9b:6d:f2:f8:c1:0f:e1:84:85:4a:e6:
72:7d:a7:e7:23:35:9b:f9:78:cf:ab:1b:a5:01:cb:
ce:fe:22:cc:42:cf:79:d3:69:ce:a2:fa:d5:75:dc:
cb:17:59:b4:40:32:8e:31:88:3a:fe:5c:8a:5e:45:
00:20:9b:6f:ed:1d:0b:de:d9:19:53:85:d1:9a:d6:
5c:5f:45:12:ff:c7:55:08:64:1d:24:83:05:1f:6f:
ee:92:f0:96:51:3b:33:01:1a:a5:d1:42:79:76:52:
86:bd:b7:eb:33:5c:25:e0:c1:ea:fa:67:47:a1:76:
ed:5d:49:15:d0:0a:e9:08:e3:2a:1a:1d:37:ed:35:
e3:a1:29:93:31:ef:b5:6a:ea:c5:dc:34:5b:3b:c2:
9d:99:a2:f7:67:e6:9e:04:31:5b:03:33:fc:07:7b:
c5:08:63:3a:a0:fa:fb:e1:cd:62:15:84:e4:b0:50:
4e:f2:53:5c:30:aa:ca:ba:58:66:4d:79:b8:8e:9e:
ef:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:68:41:69:D9:33:A5:04:9F:CF:88:B8:48:2D:34:BD:15:44:85:03
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:95:b8:c9:55:8b:a3:99:fc:89:a3:f1:6c:3f:82:d2:92:84:
e6:6e:a8:70:a3:70:71:d8:96:28:77:c0:48:19:b5:2c:cf:b2:
1b:3a:1b:bf:f9:55:0b:7a:74:8d:0a:e6:6b:1c:db:3e:a4:b4:
3f:3b:8a:a9:51:99:4e:bf:1b:ec:61:7e:7a:13:42:c9:13:84:
cf:1b:83:d1:d1:ab:95:4e:de:4e:00:b7:28:32:0e:f7:1b:f7:
48:5a:4a:cb:b7:53:0e:ed:1b:90:6c:4d:b5:17:0a:84:68:9f:
03:e4:96:19:03:0f:48:ac:e4:4e:17:2c:8a:e2:d7:ac:a9:95:
ca:35:d4:50:e4:60:dd:85:20:46:3a:0b:4f:c4:8f:09:b1:33:
6d:a7:b4:cd:fc:6c:96:1f:d9:ac:de:e9:b7:25:06:bc:36:be:
81:cb:a6:53:24:41:b5:37:88:05:fb:da:07:42:f9:cf:ed:10:
ab:61:dc:1c:f1:79:a1:99:8d:56:3e:de:a1:0f:44:34:fc:f9:
13:dd:25:b4:0a:c4:a5:9a:b4:7c:19:e9:ac:49:36:db:d4:f5:
a1:60:30:92:fa:73:63:46:84:83:94:5f:4d:fd:0e:18:73:77:
68:67:b6:37:0f:01:b6:fa:3e:1d:1b:0a:4f:b5:2c:d0:12:03:
87:92:ae:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:21:14 2026 by rpki-client