
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
File: HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json)
Hash identifier: vnir5GBrjcTO8utNkPhEaY8YY5XQuW7NOK7R0X18H5E=
Subject key identifier: 84:B2:D4:C4:CC:61:27:92:2C:E0:E0:D4:05:71:78:BE:DE:51:92:A2
Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
Certificate issuer: /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Certificate serial: 019EBA6ADC7BA09BB781331210319204B34B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
Manifest number: 14C5
Signing time: Fri 12 Jun 2026 06:00:25 +0000
Manifest this update: Fri 12 Jun 2026 06:00:25 +0000
Manifest next update: Sat 13 Jun 2026 06:00:25 +0000
Files and hashes: 1: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: eYGa1rGPcfjxCghL2cRUky3SeXTL+IAlJF+rzOo44xk=)
2: kMtugILpiPzEeW8OKVlItHoOS1w.roa (hash: lAQ2ZT9NHZiz0srqLkoDG7be21LY+uZcdjIbYN8bvbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:6a:dc:7b:a0:9b:b7:81:33:12:10:31:92:04:b3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Validity
Not Before: Jun 12 06:00:25 2026 GMT
Not After : Jun 13 06:00:25 2026 GMT
Subject: CN=84b2d4c4cc6127922ce0e0d4057178bede5192a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a4:9f:62:d9:26:bf:a5:fe:a7:24:ad:60:c3:
83:fc:85:d9:88:93:ae:75:4f:74:15:d2:1b:21:66:
78:0f:ee:74:b1:1d:96:6c:13:d5:2f:18:e1:d7:d2:
92:87:a4:92:95:af:1c:0c:71:e3:c2:63:78:37:41:
ac:ad:80:23:5f:78:63:70:ae:87:95:7c:9d:11:61:
cd:ed:c0:56:bd:c2:c0:3a:e6:cd:20:38:d4:3b:cc:
89:1e:dd:0a:be:5f:a8:b0:a5:ca:18:66:81:68:49:
10:53:c6:c3:92:84:c5:10:07:fd:b4:52:25:65:7b:
4d:cd:f6:7f:7c:33:33:d7:5f:55:07:99:3a:aa:93:
f0:53:6f:01:a0:72:de:a7:d4:c1:88:53:c9:15:95:
b9:e7:3d:3a:f3:ca:1b:59:ad:d6:1f:cc:42:58:4d:
a6:f6:9b:98:f9:d6:68:1a:69:cf:7a:01:a5:bc:d0:
5b:a4:2d:77:d5:49:c6:51:8b:c6:87:5c:85:8f:04:
cf:cd:6c:40:7d:0a:d5:4e:bb:19:b0:87:72:01:4d:
ce:44:0a:0a:88:8f:c4:9b:5f:b3:0a:a8:02:06:60:
c2:4e:d4:7e:bd:f4:4d:65:23:4c:35:e6:cf:d3:18:
7f:8e:0f:5a:2a:16:ad:15:51:98:10:9a:d2:2b:70:
74:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B2:D4:C4:CC:61:27:92:2C:E0:E0:D4:05:71:78:BE:DE:51:92:A2
X509v3 Authority Key Identifier:
keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6b:58:3a:11:51:2a:ff:52:69:ab:a6:61:9d:f4:f1:48:6e:
33:5a:7b:d8:f6:04:d7:0e:76:c9:7d:a7:41:41:2f:a6:ed:0e:
31:7f:5d:2d:8f:90:71:87:7d:6d:4e:13:2e:5e:b3:ee:4b:0b:
78:33:da:3c:96:7d:7c:de:83:05:07:ec:1e:61:24:a2:0b:23:
d1:cd:9e:4d:6c:0b:13:81:fa:b7:94:ce:5c:7c:e2:45:2f:ba:
7e:8c:7c:af:04:c2:97:96:e7:4b:cc:57:b2:99:ad:7a:67:da:
ea:89:68:57:5a:6f:26:d7:53:d2:f0:eb:1a:75:80:cf:81:ff:
c7:de:0b:72:90:a6:e5:21:2d:ec:dd:f1:c4:3f:6c:f5:57:93:
4f:df:d3:dc:90:bb:fd:62:3e:2b:ef:99:c9:b1:47:60:dc:bd:
67:bc:c3:9b:22:34:1f:86:44:37:f0:fd:12:a6:36:36:e8:1d:
c9:bf:4c:cb:69:76:3a:db:fa:d0:56:c5:86:c7:56:8a:2f:58:
e8:83:9e:18:32:6a:39:d1:bd:c2:e1:8f:29:b7:4f:51:5f:64:
5b:1d:24:ff:fd:2d:66:62:b0:f6:db:e7:bc:c0:dd:83:a0:99:
ca:51:f8:eb:c4:77:54:3d:d7:b8:80:ad:ed:ca:99:cf:c2:47:
e9:ab:b6:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ66atx7oJu3gTMSEDGSBLNLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMDY3MmM5OWY4N2YwNWNkODNmMGI2MjdkMzE4NzFmZTgw
YmUwMWYwHhcNMjYwNjEyMDYwMDI1WhcNMjYwNjEzMDYwMDI1WjAzMTEwLwYDVQQD
Eyg4NGIyZDRjNGNjNjEyNzkyMmNlMGUwZDQwNTcxNzhiZWRlNTE5MmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqSfYtkmv6X+pyStYMOD/IXZiJOu
dU90FdIbIWZ4D+50sR2WbBPVLxjh19KSh6SSla8cDHHjwmN4N0GsrYAjX3hjcK6H
lXydEWHN7cBWvcLAOubNIDjUO8yJHt0Kvl+osKXKGGaBaEkQU8bDkoTFEAf9tFIl
ZXtNzfZ/fDMz119VB5k6qpPwU28BoHLep9TBiFPJFZW55z0688obWa3WH8xCWE2m
9puY+dZoGmnPegGlvNBbpC131UnGUYvGh1yFjwTPzWxAfQrVTrsZsIdyAU3ORAoK
iI/Em1+zCqgCBmDCTtR+vfRNZSNMNebP0xh/jg9aKhatFVGYEJrSK3B03wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISy1MTMYSeSLODg1AVxeL7eUZKiMB8GA1UdIwQY
MBaAFB0Gcsmfh/Bc2D8LYn0xhx/oC+AfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83ZTRmMDgtNjczMC00MDUxLTk3OTIt
NDk0ZjRjNGRhNDI2LzEvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi83ZTRmMDgtNjczMC00MDUxLTk3OTItNDk0ZjRjNGRhNDI2
LzEvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGtYOhFR
Kv9SaaumYZ308UhuM1p72PYE1w52yX2nQUEvpu0OMX9dLY+QcYd9bU4TLl6z7ksL
eDPaPJZ9fN6DBQfsHmEkogsj0c2eTWwLE4H6t5TOXHziRS+6fox8rwTCl5bnS8xX
spmtemfa6oloV1pvJtdT0vDrGnWAz4H/x94LcpCm5SEt7N3xxD9s9VeTT9/T3JC7
/WI+K++ZybFHYNy9Z7zDmyI0H4ZEN/D9EqY2Nugdyb9My2l2Otv60FbFhsdWii9Y
6IOeGDJqOdG9wuGPKbdPUV9kWx0k//0tZmKw9tvnvMDdg6CZylH468R3VD3XuICt
7cqZz8JH6au2fQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 10:10:16 2026 by rpki-client