Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
File: HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json)
Hash identifier: xFXEj4O/oOlzfepQxlAPXjR8WUGOcQO4rfDFbtJPeWQ=
Subject key identifier: 4C:03:04:5A:18:23:5E:D3:00:0D:DF:55:A4:DA:C7:89:FD:30:4B:2E
Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
Certificate issuer: /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Certificate serial: 01A1965721A7FD7DE9FAB1C032B53EA77FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
Manifest number: 1640
Signing time: Sun 01 Nov 2026 09:00:54 +0000
Manifest this update: Sun 01 Nov 2026 09:00:54 +0000
Manifest next update: Mon 02 Nov 2026 09:00:54 +0000
Files and hashes: 1: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: 9O5lDyhCnA9ju9+zHCc2YPJU2SXjZiRUDEVA3c6ehMQ=)
2: kMtugILpiPzEeW8OKVlItHoOS1w.roa (hash: lAQ2ZT9NHZiz0srqLkoDG7be21LY+uZcdjIbYN8bvbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:57:21:a7:fd:7d:e9:fa:b1:c0:32:b5:3e:a7:7f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Validity
Not Before: Nov 1 09:00:54 2026 GMT
Not After : Nov 2 09:00:54 2026 GMT
Subject: CN=4c03045a18235ed3000ddf55a4dac789fd304b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:0e:e8:eb:cc:ef:80:ba:d7:83:84:f4:a1:
97:a0:89:f8:49:47:9b:79:37:6d:dc:c2:1d:de:f7:
51:c3:19:1e:c6:8a:ae:d5:4e:2f:14:ef:07:60:6c:
ea:36:89:37:d4:39:41:38:b7:21:d9:ce:9a:b6:27:
ed:3e:88:a8:28:fb:4f:9b:0a:03:20:77:77:cd:49:
ec:89:42:2c:5f:84:78:c7:91:3b:8f:62:1e:b0:d6:
2a:c0:a2:62:fb:cd:ff:31:5d:47:e6:1d:de:70:d2:
81:d9:52:82:52:8d:e8:f4:8d:01:01:ff:3b:9e:84:
77:2b:c8:78:83:de:c4:d3:41:c1:a4:3c:e9:df:f7:
1e:7f:c3:2d:83:e1:14:3d:e3:c5:b3:f9:54:34:fc:
13:c0:af:1c:b1:d3:ac:a3:47:bc:2b:51:b7:f0:88:
4e:57:00:0e:9a:f7:dd:1e:cf:64:80:91:bf:3a:3a:
6a:28:de:74:51:4f:fb:1a:b5:e6:ad:1c:30:97:d2:
d6:4c:09:83:e9:19:51:9f:df:bd:43:c1:cd:2d:10:
88:dc:68:fb:86:fa:15:9e:89:7c:65:92:d6:8b:a5:
ae:60:b2:50:e9:3e:10:e7:06:67:48:f6:d1:5c:70:
ed:a5:f2:d5:16:2c:45:11:58:97:0d:b9:37:02:ff:
f8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:03:04:5A:18:23:5E:D3:00:0D:DF:55:A4:DA:C7:89:FD:30:4B:2E
X509v3 Authority Key Identifier:
keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5c:05:38:ec:0a:e7:35:4d:8c:49:c2:8d:c3:c1:b9:ad:76:
02:a3:4f:c6:9b:46:a6:81:b6:a8:30:b9:05:16:39:cb:bb:40:
fd:3f:0e:31:a4:69:57:73:ee:a1:c6:61:9f:28:cd:42:aa:07:
9f:46:6f:90:f0:8f:ae:cb:39:72:9a:e4:23:ca:f7:93:7f:f4:
b9:da:6a:38:f4:5a:19:0e:72:51:ed:00:6f:f9:ca:e2:fa:88:
7d:48:17:fe:2a:db:0f:61:f7:76:df:3a:0a:2a:64:2d:2f:33:
f4:79:49:12:f6:a7:a9:a6:aa:48:fd:40:22:63:e6:31:e6:57:
30:6c:98:d9:20:b2:1a:f9:d6:49:f2:c6:2e:8f:af:94:91:da:
8b:81:74:e1:e6:06:4e:f8:2f:bc:ed:3f:4d:cc:cf:9e:2e:45:
2b:73:d2:e8:ba:6a:f6:69:b9:a6:c6:69:0e:7a:d3:8f:8d:67:
46:7b:bb:59:20:18:b1:87:ff:77:d7:3f:c4:41:bb:a1:c5:e9:
b3:56:86:e9:5e:0b:e2:c7:8a:60:6a:39:ae:b9:03:67:7a:e1:
b3:2b:f0:47:bb:b1:52:02:d1:28:91:7c:61:50:8b:d6:2c:4f:
2e:ea:1f:67:3d:ed:13:44:29:29:cf:4b:b1:8e:33:e9:1a:ef:
bc:b9:9c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 18:38:57 2026 by rpki-client