Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
File: HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json)
Hash identifier: e11YKre62eQrGel5/gr0pTEmACc+gI0r7LogkTHlz/k=
Subject key identifier: 4E:C4:80:F9:08:96:EB:29:EC:6C:44:6D:2F:47:2A:89:4A:84:F6:2F
Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
Certificate issuer: /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Certificate serial: 01A19C221E413C6DFE7B7E26A2ECC6023EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
Manifest number: 1643
Signing time: Mon 02 Nov 2026 12:00:43 +0000
Manifest this update: Mon 02 Nov 2026 12:00:43 +0000
Manifest next update: Tue 03 Nov 2026 12:00:43 +0000
Files and hashes: 1: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: hmJJXTyPZcUgSlrdyFmCLvEqvesgb6aS8mowqsrstLw=)
2: kMtugILpiPzEeW8OKVlItHoOS1w.roa (hash: lAQ2ZT9NHZiz0srqLkoDG7be21LY+uZcdjIbYN8bvbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:22:1e:41:3c:6d:fe:7b:7e:26:a2:ec:c6:02:3e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Validity
Not Before: Nov 2 12:00:43 2026 GMT
Not After : Nov 3 12:00:43 2026 GMT
Subject: CN=4ec480f90896eb29ec6c446d2f472a894a84f62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:12:da:e7:62:38:98:ed:6a:98:19:b2:14:fc:
f8:27:ca:6e:c0:42:d4:13:a4:74:88:47:c4:03:47:
4c:25:93:14:81:31:83:76:69:09:cd:c8:8a:1b:d6:
94:b8:95:7f:d5:fb:b5:d8:f1:f5:4e:38:10:cd:e0:
a6:03:29:2a:36:d1:d5:1a:ad:bf:cb:91:f2:62:03:
20:a6:21:64:10:c0:76:b0:80:2c:de:5f:43:14:2b:
eb:03:a7:c8:2f:ae:29:e9:c9:85:06:24:da:8b:8f:
ab:19:51:f8:dd:6f:f8:10:52:f3:05:03:1b:b8:8e:
51:f8:dd:4e:9c:bb:62:be:ab:3a:96:d3:d7:1d:d4:
d5:b8:7a:b6:d1:99:68:15:21:bb:57:b5:d5:46:5b:
9b:c4:78:60:23:43:9e:a8:df:42:c5:23:3c:45:d5:
bd:70:b0:c1:42:bd:1f:71:1a:1f:72:3d:ae:b8:19:
32:b8:87:cb:b0:65:c2:04:45:21:55:36:98:0c:56:
5b:bd:be:37:d7:b2:c8:27:a5:c4:6f:17:67:ce:af:
8c:3b:f9:cc:5e:83:e1:75:2d:8d:02:63:b8:2b:19:
45:6b:b1:27:78:9e:cb:fb:41:0a:da:e0:29:89:f5:
94:d7:e8:eb:3d:a7:3c:3b:0a:a0:4f:49:f4:23:33:
67:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C4:80:F9:08:96:EB:29:EC:6C:44:6D:2F:47:2A:89:4A:84:F6:2F
X509v3 Authority Key Identifier:
keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:4a:a6:e4:6c:d4:9f:73:fa:d2:bb:1a:99:40:52:b5:b1:6c:
44:f9:73:24:aa:ea:33:4b:16:fc:2c:d7:0e:d5:8c:4b:80:cd:
bb:fa:0b:91:40:a9:3f:9e:2c:ed:1f:a8:e6:bb:19:92:b1:a7:
86:99:a1:e3:72:4c:11:60:95:ef:01:04:3f:a3:6b:db:44:9a:
c2:d3:12:01:06:4d:ff:70:4b:21:d6:12:fb:28:c2:77:a1:57:
1d:1a:59:be:25:f3:6a:12:65:75:4b:29:df:49:8e:a4:54:90:
14:60:90:23:16:88:e6:11:75:43:ae:6c:c7:5c:7d:48:64:5c:
52:2a:ff:0d:02:7b:ef:11:40:48:16:94:e8:57:63:1e:91:03:
46:44:49:be:bd:06:4c:ec:9a:c1:83:2d:02:73:d7:b1:43:f2:
ed:0f:a9:86:a7:32:ab:cc:c3:4e:d2:30:30:b7:28:90:00:cc:
47:a8:44:d5:c1:c6:15:f2:ef:12:41:06:5f:db:94:53:21:77:
6b:c7:01:16:7c:dc:13:4d:83:bb:13:b8:15:e3:2f:77:36:64:
32:5f:d9:b9:2b:e2:1f:9e:6a:41:58:26:15:48:02:c7:9a:3f:
8d:5f:27:d2:a4:f2:cf:3f:5d:71:91:a5:bd:4f:66:98:20:5c:
1e:c1:53:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 18:53:21 2026 by rpki-client