Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
File: HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json)
Hash identifier: i0QznKYH0cGr0ztkKyPEa/9xMSqeczYEav0hdCmwbag=
Subject key identifier: 38:82:9A:8C:84:EF:18:A5:43:D7:05:9B:CC:CF:BE:0D:55:BD:0B:87
Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
Certificate issuer: /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Certificate serial: 01A08BD5AAA1B0A569A8202B6D505D7894C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
Manifest number: 15B6
Signing time: Thu 10 Sep 2026 15:00:30 +0000
Manifest this update: Thu 10 Sep 2026 15:00:30 +0000
Manifest next update: Fri 11 Sep 2026 15:00:30 +0000
Files and hashes: 1: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: qv7YIRaQQ92woH4Fs/v8CYDo5TbRMmWfQYqd2eJY7Ek=)
2: kMtugILpiPzEeW8OKVlItHoOS1w.roa (hash: lAQ2ZT9NHZiz0srqLkoDG7be21LY+uZcdjIbYN8bvbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:aa:a1:b0:a5:69:a8:20:2b:6d:50:5d:78:94:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Validity
Not Before: Sep 10 15:00:30 2026 GMT
Not After : Sep 11 15:00:30 2026 GMT
Subject: CN=38829a8c84ef18a543d7059bcccfbe0d55bd0b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:88:3e:c4:ad:b9:05:4d:38:b2:bd:11:c4:2d:
fb:66:0e:87:c8:a6:eb:a7:f3:11:c7:e1:e6:7b:3a:
df:2b:4b:21:af:70:b7:b4:2b:99:5d:ad:ef:64:fa:
3c:74:5a:97:78:b9:cd:2d:f9:80:2a:f2:9a:67:07:
b8:5a:c1:f2:00:21:5a:91:f7:7e:09:8f:a6:00:cc:
8b:4c:e0:c1:ca:38:ab:18:84:20:c5:4f:2a:15:4b:
6e:0d:60:0b:b3:b2:e5:ac:da:d6:1e:49:f1:46:48:
e5:06:ff:49:47:93:08:7d:09:86:c0:1c:d6:0a:d9:
e3:93:95:be:72:99:c5:2e:9e:6e:15:a5:80:6e:20:
10:1c:03:ab:94:ca:fa:aa:f4:19:f8:a6:3d:3d:4a:
ca:34:25:b2:15:f3:ac:a2:df:1a:a9:e9:7d:3a:9a:
2f:cb:44:29:b4:db:af:41:6c:cf:5a:1d:33:40:37:
43:cd:33:ec:40:c8:b1:93:cc:21:4a:e0:82:e4:6f:
6b:9f:10:98:3f:c4:19:7a:fe:0a:9c:40:a1:23:5d:
eb:e1:8f:a3:c4:54:16:93:0c:46:4f:db:bc:de:28:
e4:16:35:58:bb:71:23:10:6e:fb:72:a4:00:55:af:
3f:50:00:96:33:f0:18:fa:0e:ef:e1:f6:1c:90:d0:
f0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:82:9A:8C:84:EF:18:A5:43:D7:05:9B:CC:CF:BE:0D:55:BD:0B:87
X509v3 Authority Key Identifier:
keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:8f:08:72:8e:5a:e0:ef:06:84:f3:75:5b:b3:fe:f1:73:a4:
2d:6e:3d:ea:60:30:0b:71:64:20:e0:9f:6f:24:9a:0d:2f:69:
e4:3a:23:d2:07:a4:ef:96:f7:4c:2c:30:5b:61:31:29:85:99:
29:17:a2:88:a5:ab:56:d1:d3:74:25:7d:56:8a:7a:fd:1f:c0:
3e:4e:0a:1a:33:bd:55:a7:7b:af:ba:cd:e8:18:7e:03:67:ea:
51:7e:11:93:4f:06:07:20:fc:87:11:89:3d:0a:d0:67:20:d0:
23:8c:6d:69:c0:46:c2:bc:39:f3:b9:ac:d3:43:a4:b3:d1:ae:
5a:10:43:66:8b:ff:80:88:c9:bd:6a:69:ab:fc:a0:df:1d:94:
4a:dd:c8:78:02:ed:c5:9d:db:45:a7:3b:64:d8:1e:58:84:b6:
76:93:d7:0d:5d:a5:95:4e:f4:d1:ee:be:5e:58:d0:4a:a7:4e:
48:9c:cb:e1:b7:8f:93:64:0b:03:21:68:aa:52:7b:5e:a5:86:
03:73:6b:a0:63:eb:cc:d4:42:f4:99:76:5f:5a:51:a3:0e:0d:
d6:5f:ca:d8:63:fa:d6:6c:af:26:f2:bf:f9:91:95:ee:6a:b3:
d4:bd:1e:6e:ea:c6:20:b4:74:f4:e5:a5:61:37:ef:83:ef:62:
02:e1:ea:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:40:40 2026 by rpki-client