Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
File: HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json)
Hash identifier: Ops9EVAoALj2igtxXlypXPmjLnFaEhS63lbCIFpV+6I=
Subject key identifier: 4F:C8:B1:58:D7:B2:EF:36:61:07:E3:A6:F9:C7:A8:46:01:26:8C:FF
Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
Certificate issuer: /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Certificate serial: 019D382E082CEEA1A338178CD350B8DC1448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
Manifest number: 13FD
Signing time: Sun 29 Mar 2026 06:00:33 +0000
Manifest this update: Sun 29 Mar 2026 06:00:33 +0000
Manifest next update: Mon 30 Mar 2026 06:00:33 +0000
Files and hashes: 1: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: gBTtu8iEU5RdI9FJKo36gEbUfnPeZfh9jhU0QgNij/o=)
2: kMtugILpiPzEeW8OKVlItHoOS1w.roa (hash: lAQ2ZT9NHZiz0srqLkoDG7be21LY+uZcdjIbYN8bvbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:08:2c:ee:a1:a3:38:17:8c:d3:50:b8:dc:14:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Validity
Not Before: Mar 29 06:00:33 2026 GMT
Not After : Mar 30 06:00:33 2026 GMT
Subject: CN=4fc8b158d7b2ef366107e3a6f9c7a84601268cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e7:58:1a:80:77:52:31:44:f8:b8:64:71:4a:
d3:45:91:58:d8:37:8e:1d:0a:cf:8c:27:d3:5c:6e:
71:5a:46:2f:f9:a8:e3:e0:10:54:dc:bd:f0:cf:52:
cd:3b:0e:93:47:ef:4e:a3:0f:f8:18:f1:d3:e5:f1:
e2:83:77:43:9a:2c:ca:60:c8:fc:dc:3d:b1:62:6a:
d0:bd:f1:d7:0a:55:64:0b:bc:70:ae:e3:1d:15:9c:
ec:cc:ae:01:7b:3b:46:25:b3:c9:7b:c7:80:a9:7e:
80:46:d3:a5:ff:17:fc:17:82:b4:3c:e0:6b:b6:56:
2f:d1:a2:b3:be:7e:dd:82:22:2c:b4:30:9c:d9:5e:
6d:46:2d:e2:d6:a9:a1:ff:84:50:37:5b:3b:67:81:
1c:55:b9:38:60:41:b7:fe:2e:29:9b:fa:b1:d9:71:
ea:ae:39:8d:d1:6c:35:1e:23:ad:82:2d:b3:76:79:
c2:d9:fd:a7:c3:0f:fe:fa:de:4d:ff:85:82:1e:22:
55:f8:46:6c:b3:59:29:61:06:65:39:5c:ef:a0:1a:
6d:ff:3c:ba:d6:53:2b:83:ee:54:8e:2d:91:c4:9d:
a2:f6:19:71:eb:d5:c2:15:a7:20:84:da:6c:6d:df:
7d:80:d4:14:4a:1b:db:9f:2b:63:11:9d:44:7d:ae:
92:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C8:B1:58:D7:B2:EF:36:61:07:E3:A6:F9:C7:A8:46:01:26:8C:FF
X509v3 Authority Key Identifier:
keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ff:ec:0d:f1:00:80:65:3c:b3:8b:9b:91:37:49:44:5f:73:
74:75:f3:b2:ac:b6:b0:0c:83:58:c1:96:dc:43:35:91:f9:78:
1b:c1:b6:ff:89:dd:a9:fd:8a:7d:0e:02:10:41:14:06:79:33:
2d:be:48:ac:23:36:7f:52:89:6e:c3:ab:2b:3f:69:8b:c5:60:
6a:7b:d1:e2:56:d2:e8:4b:39:2d:ba:80:40:c9:85:ce:74:52:
7c:d2:3c:3b:77:c3:fd:e8:cf:65:4f:dd:c2:d3:31:00:c9:14:
84:c0:f7:b9:6c:a9:34:c2:0d:7d:0e:6f:39:70:55:3d:f3:50:
0d:ca:c0:c1:fd:77:4f:44:de:cd:d0:b1:fb:9c:47:27:a0:37:
e6:3b:6a:c5:74:41:d5:74:7f:e7:84:c7:03:ac:24:12:f5:52:
23:67:03:8e:17:b2:c7:03:96:94:41:9e:a8:01:d7:ec:3b:d2:
fb:95:c7:7d:b9:05:e3:bf:cf:36:92:b6:6c:b1:31:26:3f:6b:
25:16:c6:b0:0c:9d:04:ce:4b:bc:91:10:81:9c:4a:34:60:d9:
32:61:96:6b:9a:19:57:4a:d6:97:97:54:80:72:90:ee:6a:15:
6b:99:88:de:85:1c:2e:dc:44:b3:c3:ce:b2:3d:73:27:30:c7:
ca:07:9a:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lggs7qGjOBeM01C43BRIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMDY3MmM5OWY4N2YwNWNkODNmMGI2MjdkMzE4NzFmZTgw
YmUwMWYwHhcNMjYwMzI5MDYwMDMzWhcNMjYwMzMwMDYwMDMzWjAzMTEwLwYDVQQD
Eyg0ZmM4YjE1OGQ3YjJlZjM2NjEwN2UzYTZmOWM3YTg0NjAxMjY4Y2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+dYGoB3UjFE+LhkcUrTRZFY2DeO
HQrPjCfTXG5xWkYv+ajj4BBU3L3wz1LNOw6TR+9Oow/4GPHT5fHig3dDmizKYMj8
3D2xYmrQvfHXClVkC7xwruMdFZzszK4BeztGJbPJe8eAqX6ARtOl/xf8F4K0POBr
tlYv0aKzvn7dgiIstDCc2V5tRi3i1qmh/4RQN1s7Z4EcVbk4YEG3/i4pm/qx2XHq
rjmN0Ww1HiOtgi2zdnnC2f2nww/++t5N/4WCHiJV+EZss1kpYQZlOVzvoBpt/zy6
1lMrg+5Uji2RxJ2i9hlx69XCFacghNpsbd99gNQUShvbnytjEZ1Efa6SqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/IsVjXsu82YQfjpvnHqEYBJoz/MB8GA1UdIwQY
MBaAFB0Gcsmfh/Bc2D8LYn0xhx/oC+AfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83ZTRmMDgtNjczMC00MDUxLTk3OTIt
NDk0ZjRjNGRhNDI2LzEvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi83ZTRmMDgtNjczMC00MDUxLTk3OTItNDk0ZjRjNGRhNDI2
LzEvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcv/sDfEA
gGU8s4ubkTdJRF9zdHXzsqy2sAyDWMGW3EM1kfl4G8G2/4ndqf2KfQ4CEEEUBnkz
Lb5IrCM2f1KJbsOrKz9pi8VganvR4lbS6Es5LbqAQMmFznRSfNI8O3fD/ejPZU/d
wtMxAMkUhMD3uWypNMINfQ5vOXBVPfNQDcrAwf13T0TezdCx+5xHJ6A35jtqxXRB
1XR/54THA6wkEvVSI2cDjheyxwOWlEGeqAHX7DvS+5XHfbkF47/PNpK2bLExJj9r
JRbGsAydBM5LvJEQgZxKNGDZMmGWa5oZV0rWl5dUgHKQ7moVa5mI3oUcLtxEs8PO
sj1zJzDHygea+Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:32 2026 by rpki-client