Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
File: HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft (raw, json)
Hash identifier: 8h7FzJOR5h3/0C391doyDi1nZKtZ0ZyJZY+svqMUfW4=
Subject key identifier: CA:D3:51:D9:BA:6F:67:4B:CC:CE:B0:AC:75:07:15:35:E3:F0:D9:AB
Authority key identifier: 1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B
Certificate issuer: /CN=1d0260406e837ae38380fcc8d992b93d0de1a83b
Certificate serial: 01A155531856DEDC27A870D25B7E58A1D586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
Manifest number: 0FD2
Signing time: Mon 19 Oct 2026 18:01:11 +0000
Manifest this update: Mon 19 Oct 2026 18:01:11 +0000
Manifest next update: Tue 20 Oct 2026 18:01:11 +0000
Files and hashes: 1: HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl (hash: 65NSYhDoLw3JmncC82g1t2Qq+V4D19ymffOKNrVfg7Q=)
2: bdOQfAWdL7wiwVEQoYOuUBY_f9o.roa (hash: nNRgBnyPBnuWyk/W/uELLwEd7uoijhFF49TNbx1XS78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:53:18:56:de:dc:27:a8:70:d2:5b:7e:58:a1:d5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0260406e837ae38380fcc8d992b93d0de1a83b
Validity
Not Before: Oct 19 18:01:11 2026 GMT
Not After : Oct 20 18:01:11 2026 GMT
Subject: CN=cad351d9ba6f674bccceb0ac75071535e3f0d9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:75:87:42:d1:76:20:d1:93:d8:2e:d8:e1:89:
28:4e:11:7f:3c:41:27:38:6b:e3:05:24:36:06:4f:
34:43:2b:a9:c2:c0:9b:6f:24:80:fb:5c:b0:60:1a:
6b:45:de:52:c5:33:b8:e7:3c:85:b9:d0:54:bb:b2:
66:e4:c9:3e:7c:35:1e:a8:73:a9:76:52:53:87:37:
85:16:c6:09:1f:ee:22:51:d8:1d:f9:89:42:08:0c:
30:99:48:98:66:07:7e:b5:f1:74:86:ca:d3:a5:60:
ee:18:33:ed:10:60:e4:63:6a:84:e5:c3:cc:39:db:
15:2e:ea:5e:62:e0:61:fe:7c:63:a5:6e:e3:63:9a:
25:a7:92:a8:52:3a:76:e9:75:f8:db:fd:6a:15:0e:
6c:33:fd:e7:5d:14:ef:bc:d0:7a:e5:60:d9:75:b2:
a7:7c:35:4c:eb:e0:c2:87:09:ed:85:86:e1:61:5a:
bb:39:b1:e6:0d:c0:94:43:73:aa:f8:9d:ef:b4:55:
a7:62:9c:6f:ca:55:71:85:a0:90:35:b9:57:66:1f:
46:5c:a1:10:66:8a:1e:09:5a:ec:1e:37:89:b0:0f:
04:29:3f:87:86:89:40:51:5b:df:50:8d:07:6c:8f:
d5:63:a6:96:b7:a7:8d:19:9a:7d:6f:a9:75:0c:3b:
44:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D3:51:D9:BA:6F:67:4B:CC:CE:B0:AC:75:07:15:35:E3:F0:D9:AB
X509v3 Authority Key Identifier:
keyid:1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:62:a0:49:ea:5f:08:09:68:65:ce:4c:9e:65:8c:c6:b0:0c:
b1:92:26:66:8d:08:94:9f:f5:a4:7f:98:11:a6:ae:6d:35:db:
a2:5c:f3:7d:39:5a:73:fa:7e:1c:02:34:03:02:e5:a7:a1:21:
5c:9f:30:eb:f8:1d:38:51:2b:bb:7a:ef:cc:58:ae:6a:99:71:
98:e2:0d:81:cf:b5:6e:74:0a:48:ce:a5:d1:0c:d4:ef:06:94:
1c:16:51:3c:b1:6e:81:86:5e:c8:4f:3b:ce:92:3c:b7:b1:ca:
55:27:d4:b5:6d:13:a0:bf:5e:e5:0b:12:8a:7c:f5:c0:d9:d4:
df:c6:1a:76:d8:cb:6c:95:81:90:09:84:d0:f4:a1:d6:c3:4f:
4e:79:b2:58:db:48:9a:43:90:02:6b:c5:89:f2:36:c2:b5:a5:
c1:a2:55:f4:2a:87:d6:a5:18:0f:80:3d:9c:d2:17:d7:0c:d1:
5d:c1:36:9f:8b:a6:0a:e7:ba:cc:89:37:5c:58:8f:05:44:82:
9d:66:43:cc:f2:02:be:02:57:14:97:58:b0:4e:47:2f:d4:4e:
ae:4d:3a:6c:e9:81:e6:ae:7c:67:91:97:f9:67:82:ac:6d:5d:
d5:41:22:e1:64:14:8b:0c:3b:b9:36:f5:9e:43:bf:c8:b9:5e:
7a:30:29:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFVUxhW3twnqHDSW35YodWGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMDI2MDQwNmU4MzdhZTM4MzgwZmNjOGQ5OTJiOTNkMGRl
MWE4M2IwHhcNMjYxMDE5MTgwMTExWhcNMjYxMDIwMTgwMTExWjAzMTEwLwYDVQQD
EyhjYWQzNTFkOWJhNmY2NzRiY2NjZWIwYWM3NTA3MTUzNWUzZjBkOWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynWHQtF2INGT2C7Y4YkoThF/PEEn
OGvjBSQ2Bk80QyupwsCbbySA+1ywYBprRd5SxTO45zyFudBUu7Jm5Mk+fDUeqHOp
dlJThzeFFsYJH+4iUdgd+YlCCAwwmUiYZgd+tfF0hsrTpWDuGDPtEGDkY2qE5cPM
OdsVLupeYuBh/nxjpW7jY5olp5KoUjp26XX42/1qFQ5sM/3nXRTvvNB65WDZdbKn
fDVM6+DChwnthYbhYVq7ObHmDcCUQ3Oq+J3vtFWnYpxvylVxhaCQNblXZh9GXKEQ
ZooeCVrsHjeJsA8EKT+HholAUVvfUI0HbI/VY6aWt6eNGZp9b6l1DDtEKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrTUdm6b2dLzM6wrHUHFTXj8NmrMB8GA1UdIwQY
MBaAFB0CYEBug3rjg4D8yNmSuT0N4ag7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFKZ1FHNkRldU9EZ1B6STJaSzVQUTNocURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zNDAwMzEtMzY1Yi00ZmQyLTg3MzIt
OGMwZmFjYTNjYmQ4LzEvSFFKZ1FHNkRldU9EZ1B6STJaSzVQUTNocURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8zNDAwMzEtMzY1Yi00ZmQyLTg3MzItOGMwZmFjYTNjYmQ4
LzEvSFFKZ1FHNkRldU9EZ1B6STJaSzVQUTNocURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGKgSepf
CAloZc5MnmWMxrAMsZImZo0IlJ/1pH+YEaaubTXbolzzfTlac/p+HAI0AwLlp6Eh
XJ8w6/gdOFEru3rvzFiuaplxmOINgc+1bnQKSM6l0QzU7waUHBZRPLFugYZeyE87
zpI8t7HKVSfUtW0ToL9e5QsSinz1wNnU38YadtjLbJWBkAmE0PSh1sNPTnmyWNtI
mkOQAmvFifI2wrWlwaJV9CqH1qUYD4A9nNIX1wzRXcE2n4umCue6zIk3XFiPBUSC
nWZDzPICvgJXFJdYsE5HL9ROrk06bOmB5q58Z5GX+WeCrG1d1UEi4WQUiww7uTb1
nkO/yLleejApTA==
-----END CERTIFICATE-----
Generated at Tue Oct 20 06:51:59 2026 by rpki-client