Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
File: HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json)
Hash identifier: fvK9/w5q8ns/YM0WTCU3NKvyNd5SsKbbuPjIVCA/+RI=
Subject key identifier: 63:4E:4B:30:7F:D3:FC:F0:E1:6D:80:26:EB:DE:0A:BF:21:24:37:53
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 019F8FEBCEACC6D550F40795D540768B86F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
Manifest number: 19D8
Signing time: Thu 23 Jul 2026 17:00:23 +0000
Manifest this update: Thu 23 Jul 2026 17:00:23 +0000
Manifest next update: Fri 24 Jul 2026 17:00:23 +0000
Files and hashes: 1: 1-zqC4HhQSozydEfSsWMeVRvX4Ag.roa (hash: YCbMIIG2MrUDfBfXlLOUYihuI+nwLwGzroFonhJo9+c=)
2: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: eQKlwcyBnrzgtv/VYCc3aGspKZJsXbr+PvCzfTOch0o=)
3: eQBqd8VSQ_-EDmCXW9sFFYDeMQk.roa (hash: dEI6v24yV0EpcI35EHdwZC8mHRo0m2mxSHgvKT9A5+8=)
4: xZQQ0CvgvGISAk0eT_rFmazBHWc.roa (hash: 2uo51y4FTldRjelw7bQ2s6OQpSKwuYg+UN+zR4NJjsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:ce:ac:c6:d5:50:f4:07:95:d5:40:76:8b:86:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Jul 23 17:00:23 2026 GMT
Not After : Jul 24 17:00:23 2026 GMT
Subject: CN=634e4b307fd3fcf0e16d8026ebde0abf21243753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:87:9e:bd:0f:e8:76:ae:f1:a9:34:84:54:19:
88:88:26:96:d9:ec:8e:4a:b5:2c:b4:e3:5a:0b:44:
dd:22:c1:1a:e0:66:57:2b:ff:bf:e9:25:5e:88:1b:
bf:09:93:af:26:fa:ec:71:a6:44:f5:96:c6:94:48:
e3:49:59:5a:7d:a6:03:ee:fd:4f:65:99:5c:93:69:
9f:fc:93:56:bd:ca:e8:7f:7f:37:8a:f6:0b:3c:7e:
83:ac:e4:c9:e4:c6:98:bb:b9:11:a5:4d:46:62:82:
6e:67:a1:0d:fc:27:54:4b:35:04:48:0c:8b:9f:2e:
c7:c6:e3:b3:51:21:7e:74:b2:eb:94:8a:77:30:7a:
43:1c:46:68:f0:00:42:83:75:63:31:ce:38:e8:ab:
ef:80:9d:e5:f5:1a:17:00:e2:0e:fe:55:1b:3f:0a:
ab:1c:e6:3b:bf:b4:c9:bb:84:b5:8d:f7:59:0e:f9:
1a:0f:fe:9f:5f:d9:c6:63:d7:1e:92:a6:f1:c9:6c:
d4:4e:f8:d6:a3:af:4d:27:af:fc:03:07:a7:86:66:
30:04:2e:a4:0e:b8:03:c8:6c:d5:07:9c:16:75:79:
f8:eb:f6:4c:8d:c3:c1:25:8b:74:26:b3:45:8b:75:
8e:cc:da:a0:fe:92:42:93:30:cc:03:57:28:d6:80:
22:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4E:4B:30:7F:D3:FC:F0:E1:6D:80:26:EB:DE:0A:BF:21:24:37:53
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:37:31:46:58:2a:6e:a8:0f:13:6a:17:04:90:ae:db:27:44:
bb:af:81:08:73:76:cb:76:bf:6e:bf:6b:1c:a1:8e:cf:31:e5:
85:f8:f4:91:f6:02:69:03:07:88:ca:47:fe:79:b2:bd:ef:0a:
45:fe:b5:61:c9:78:fc:4e:3a:d0:06:b8:83:b0:58:15:c7:8e:
30:98:43:d5:e4:56:f9:f7:e5:07:02:58:b2:74:6b:8c:76:eb:
ac:5b:4d:23:33:81:4f:e8:24:8c:1b:72:51:76:fc:91:8c:2f:
38:f9:50:2b:96:46:24:ec:b9:99:07:80:d1:ab:d9:93:77:24:
fd:10:87:1d:14:0a:85:3d:6e:62:af:8d:75:a5:86:7a:78:2a:
1b:0b:89:44:59:1c:e8:ff:7a:86:1d:0b:54:19:95:ab:90:e8:
11:91:11:b2:22:a8:60:9d:ba:b0:3e:59:8d:d7:32:f1:54:8e:
8c:df:c1:3a:e2:14:81:47:a4:9d:f1:15:72:79:94:30:c1:b3:
a5:9d:fe:34:45:39:a2:e6:35:53:97:7e:98:a0:33:40:98:bc:
4d:85:b0:c9:b3:14:0c:45:3e:e7:9a:d1:8f:01:0e:1c:49:a1:
62:17:bb:7e:65:58:79:24:90:be:87:27:4b:0f:45:7a:9c:98:
cd:dd:cb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:19 2026 by rpki-client