Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
File: HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json)
Hash identifier: M10ybNDepx5h4gZKBoXl6L5YamqrCE0pECMQlOSU4IY=
Subject key identifier: EA:66:8D:B4:CF:AE:49:A4:EB:CC:F0:85:25:BC:11:B9:F1:7B:A1:2A
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 019E1E6C161531AA8158781ADE276CBEE869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
Manifest number: 1918
Signing time: Tue 12 May 2026 23:01:00 +0000
Manifest this update: Tue 12 May 2026 23:01:00 +0000
Manifest next update: Wed 13 May 2026 23:01:00 +0000
Files and hashes: 1: 1-zqC4HhQSozydEfSsWMeVRvX4Ag.roa (hash: YCbMIIG2MrUDfBfXlLOUYihuI+nwLwGzroFonhJo9+c=)
2: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: GxCIhi6ZQftZ8u1c/gfe0CoY5NLemlmbpvqv99byNPA=)
3: eQBqd8VSQ_-EDmCXW9sFFYDeMQk.roa (hash: dEI6v24yV0EpcI35EHdwZC8mHRo0m2mxSHgvKT9A5+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:16:15:31:aa:81:58:78:1a:de:27:6c:be:e8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: May 12 23:01:00 2026 GMT
Not After : May 13 23:01:00 2026 GMT
Subject: CN=ea668db4cfae49a4ebccf08525bc11b9f17ba12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:91:94:f5:f1:29:28:cb:78:eb:b8:53:5c:9a:
a6:20:38:ef:89:8d:d9:fe:3c:18:24:c8:0e:68:b7:
35:9d:bb:13:dc:c6:48:e7:c6:b4:aa:ad:3a:d7:13:
9c:c5:8f:01:ad:5b:96:d5:c1:de:bf:36:5f:65:8c:
02:36:72:16:c8:13:1b:84:dd:a0:28:83:97:80:95:
0a:30:29:28:22:c9:97:c0:22:6d:a1:cf:5e:35:e1:
73:ff:3d:69:fd:5b:7a:f9:06:b0:9c:a9:b2:46:96:
04:7a:67:46:af:4b:0c:ba:55:33:31:ea:7e:0f:76:
29:11:1c:02:45:e7:64:10:4f:49:91:c3:dc:75:7b:
47:90:45:4e:6b:91:c7:7d:02:bd:07:51:54:b2:1c:
01:c8:23:dc:54:b9:a4:67:59:b2:8f:63:2e:ae:0d:
5a:6b:43:3a:e0:1b:e5:72:6c:99:5e:c8:bf:d9:77:
fd:d5:e3:0c:f9:86:a8:b3:32:d3:24:1a:77:76:55:
e6:55:45:64:71:6f:98:76:42:d8:c0:be:ab:42:40:
db:24:d1:9c:81:c7:06:26:b0:73:77:a2:cf:f9:48:
6e:95:1d:fb:15:97:4c:f8:84:0f:b7:08:2e:b4:f0:
04:e0:87:84:b2:df:e3:b7:c5:f4:b7:b8:25:d1:5e:
ae:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:66:8D:B4:CF:AE:49:A4:EB:CC:F0:85:25:BC:11:B9:F1:7B:A1:2A
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:25:9a:fe:b8:b8:13:f5:ae:95:c2:7e:f4:b6:08:d6:ae:59:
35:7f:74:b3:4b:d1:9f:60:e4:40:88:15:79:f7:ad:92:5a:87:
e8:e5:32:90:80:e3:17:67:ca:e7:5c:eb:b6:73:38:37:2d:15:
11:3b:c5:37:69:82:db:46:62:fd:cb:4c:1e:17:4c:66:20:6b:
a5:01:04:bb:0a:56:8f:62:09:c9:06:32:42:22:62:d8:af:ec:
5a:ea:8e:dc:fe:7f:93:45:38:85:dd:11:be:3c:3b:73:19:16:
f8:e3:96:22:50:67:b7:9a:14:59:b5:a2:6f:e7:21:c3:f4:dd:
de:e5:c1:20:30:05:11:f8:0e:7d:ff:4e:83:46:64:f4:fe:76:
0f:12:58:a3:3a:00:14:c4:63:63:12:2d:06:1c:8a:39:f6:2d:
0d:af:9d:94:5a:2e:2e:55:ec:d7:0d:af:ee:9b:ba:70:43:79:
0f:20:e6:f5:39:7e:c4:ee:78:18:8f:9b:86:23:3d:13:7c:8a:
e5:94:22:1f:03:f0:cf:71:8b:a0:32:7c:60:f8:f1:6b:23:04:
90:a7:4d:3c:5d:55:d8:4f:cf:33:61:fe:f5:12:50:18:85:de:
af:1d:8e:1f:cf:c7:d6:0d:4a:ef:10:4a:18:ca:3c:15:d7:6a:
dd:ef:34:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:42 2026 by rpki-client