Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
File: HqVZ2L9qwtho0GZa1X0sasFHIZM.mft (raw, json)
Hash identifier: kOaYgbdEtcfoCgIBRMI5Yedm1jUx/iOtQ++DcX9L1b4=
Subject key identifier: 73:8E:C6:72:0E:08:DB:77:BB:08:26:EB:95:E2:5E:FB:AD:93:8A:05
Authority key identifier: 1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
Certificate issuer: /CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Certificate serial: 019E1D59B195C461F41CE25D519339E6DB3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
Manifest number: 1897
Signing time: Tue 12 May 2026 18:01:17 +0000
Manifest this update: Tue 12 May 2026 18:01:17 +0000
Manifest next update: Wed 13 May 2026 18:01:17 +0000
Files and hashes: 1: HqVZ2L9qwtho0GZa1X0sasFHIZM.crl (hash: 5jrFx7FK0YCCDclhaQLI3CLeuvvbwwSrcfQxFD2tDUE=)
2: h2Pj0fup6PmGgboIXfm183EEF9c.roa (hash: eferMGwRa6YXz1Q8h3PiGClbC5vOEBn3msIVlW/jo08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:b1:95:c4:61:f4:1c:e2:5d:51:93:39:e6:db:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Validity
Not Before: May 12 18:01:17 2026 GMT
Not After : May 13 18:01:17 2026 GMT
Subject: CN=738ec6720e08db77bb0826eb95e25efbad938a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:31:c0:f1:82:73:45:00:0e:60:66:71:e0:a6:
2a:bb:e9:dd:a5:b5:8a:80:ae:73:26:a1:5b:6e:9e:
fe:33:4c:fe:c3:3b:2d:65:6d:c6:74:99:d2:ae:03:
e1:ab:7f:4b:ee:6e:c0:7e:8c:b5:2c:b8:c9:af:d1:
47:33:0e:ff:85:19:c2:18:3d:49:27:93:26:fa:8e:
d6:33:24:af:9b:0a:a7:32:5f:05:ac:62:eb:63:0b:
38:92:bf:8b:3b:1f:95:11:90:5b:b6:bf:50:b7:c2:
1d:bd:6e:5d:49:93:4d:36:bd:3a:f6:be:01:a3:09:
ad:65:09:3c:87:41:51:0f:dd:a6:f1:96:e3:b8:67:
fb:28:f6:6f:2c:35:c1:d8:99:af:2c:79:e0:fe:5e:
de:8c:af:c7:79:12:53:8e:01:28:94:50:69:f2:87:
a1:c9:7e:40:06:03:d1:ce:47:6d:29:c0:10:2b:cd:
0a:99:7c:41:f0:a8:41:85:2e:67:f7:f9:cb:82:b7:
b5:34:e4:90:08:cf:1a:30:6c:ea:67:9a:44:69:3b:
b8:e9:c9:db:de:20:27:4a:78:e1:e9:c0:15:67:00:
57:ef:04:cd:e6:77:a6:bb:73:c0:4b:91:f2:1f:11:
d6:dc:8a:ef:a1:39:43:e8:09:22:6d:cf:fc:1e:f4:
e7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8E:C6:72:0E:08:DB:77:BB:08:26:EB:95:E2:5E:FB:AD:93:8A:05
X509v3 Authority Key Identifier:
keyid:1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8b:37:03:9c:3e:82:aa:4b:ef:7a:e5:4d:e1:e3:b3:4a:71:
19:41:04:a3:3e:da:be:fc:32:7d:15:4f:c7:c7:c4:9e:30:1a:
ad:b8:f7:f7:54:ac:f0:da:75:85:75:df:91:4a:15:43:6f:d2:
b2:20:ae:7c:38:46:ba:38:58:af:f2:97:fd:84:bd:48:28:3d:
d0:f8:d3:58:01:be:36:17:91:7a:46:3a:30:67:26:8e:32:24:
4b:0c:8d:b7:aa:51:67:d1:d7:83:3f:eb:b7:f6:e3:de:b7:05:
c7:93:18:ce:09:8c:40:ac:fd:37:6a:8c:9d:50:a8:3b:8b:98:
23:b0:e3:07:07:6e:9f:0e:10:75:f9:8b:77:8c:4c:5b:29:19:
46:86:b3:3a:5a:e7:88:6e:2e:48:ed:a6:b7:15:aa:40:6d:0e:
82:dd:72:f0:ab:de:e3:34:97:fd:d1:9c:d6:81:f7:e0:8e:35:
0a:c0:e8:03:24:79:e4:a9:e3:f5:9d:7c:1d:60:75:df:ea:69:
f4:fc:23:38:37:90:59:ed:23:10:c5:d5:4a:3f:f9:41:a6:8e:
11:c1:78:b7:4a:1f:15:d8:98:ca:0f:86:16:4d:11:bb:d1:b8:
f8:ea:5d:d2:6e:20:76:f9:88:37:c7:2d:ba:48:21:06:a8:db:
33:33:5b:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWbGVxGH0HOJdUZM55ts/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTU1OWQ4YmY2YWMyZDg2OGQwNjY1YWQ1N2QyYzZhYzE0
NzIxOTMwHhcNMjYwNTEyMTgwMTE3WhcNMjYwNTEzMTgwMTE3WjAzMTEwLwYDVQQD
Eyg3MzhlYzY3MjBlMDhkYjc3YmIwODI2ZWI5NWUyNWVmYmFkOTM4YTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/THA8YJzRQAOYGZx4KYqu+ndpbWK
gK5zJqFbbp7+M0z+wzstZW3GdJnSrgPhq39L7m7Afoy1LLjJr9FHMw7/hRnCGD1J
J5Mm+o7WMySvmwqnMl8FrGLrYws4kr+LOx+VEZBbtr9Qt8IdvW5dSZNNNr069r4B
owmtZQk8h0FRD92m8ZbjuGf7KPZvLDXB2JmvLHng/l7ejK/HeRJTjgEolFBp8oeh
yX5ABgPRzkdtKcAQK80KmXxB8KhBhS5n9/nLgre1NOSQCM8aMGzqZ5pEaTu46cnb
3iAnSnjh6cAVZwBX7wTN5nemu3PAS5HyHxHW3IrvoTlD6Akibc/8HvTn9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOOxnIOCNt3uwgm65XiXvutk4oFMB8GA1UdIwQY
MBaAFB6lWdi/asLYaNBmWtV9LGrBRyGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80ZmI3ODUtZmZmMS00M2EzLWFmZDEt
NWZmY2M0NmFlN2I1LzEvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80ZmI3ODUtZmZmMS00M2EzLWFmZDEtNWZmY2M0NmFlN2I1
LzEvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4s3A5w+
gqpL73rlTeHjs0pxGUEEoz7avvwyfRVPx8fEnjAarbj391Ss8Np1hXXfkUoVQ2/S
siCufDhGujhYr/KX/YS9SCg90PjTWAG+NheRekY6MGcmjjIkSwyNt6pRZ9HXgz/r
t/bj3rcFx5MYzgmMQKz9N2qMnVCoO4uYI7DjBwdunw4QdfmLd4xMWykZRoazOlrn
iG4uSO2mtxWqQG0Ogt1y8Kve4zSX/dGc1oH34I41CsDoAyR55Knj9Z18HWB13+pp
9PwjODeQWe0jEMXVSj/5QaaOEcF4t0ofFdiYyg+GFk0Ru9G4+Opd0m4gdvmIN8ct
ukghBqjbMzNbmA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:31:28 2026 by rpki-client