Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
File: hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft (raw, json)
Hash identifier: AQJdHq55lG3fEdVsKCZDTz8OV3coh6EbDVrXjmBYKJU=
Subject key identifier: 47:7B:03:FE:88:C4:2E:F5:AF:83:3E:04:E1:BE:A3:E7:52:CF:44:C4
Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Certificate serial: 01A16AFF25C38288B1F4AFCC6245AA57076D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
Manifest number: 1ABD
Signing time: Fri 23 Oct 2026 23:01:08 +0000
Manifest this update: Fri 23 Oct 2026 23:01:08 +0000
Manifest next update: Sat 24 Oct 2026 23:01:08 +0000
Files and hashes: 1: c06039lKyV_J6xBbo-T4U-OvKpY.roa (hash: iZi7artEej/ZvwjEPmdFR6zAlAdw9xNqyuBRvLMxbow=)
2: hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl (hash: yT140/aILKMs77fexaYVWorqby4R0Vv904hBnHQff9w=)
3: mK6bLvQl-7u-M_nYRpM4NDJVzQo.roa (hash: cZU7xlc5yA0pT242ghiFqY0qb9VHzkge0cm6LlBwZs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:ff:25:c3:82:88:b1:f4:af:cc:62:45:aa:57:07:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Validity
Not Before: Oct 23 23:01:08 2026 GMT
Not After : Oct 24 23:01:08 2026 GMT
Subject: CN=477b03fe88c42ef5af833e04e1bea3e752cf44c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:85:8a:bf:39:1e:77:6c:36:e3:28:f1:db:
ce:f2:f7:5b:59:7e:1e:cd:4e:8e:be:c0:0f:16:11:
3c:c3:07:2a:23:07:db:8d:b6:e9:69:a4:2c:aa:75:
45:02:de:df:43:8d:4d:85:89:fe:0c:da:37:07:13:
df:d5:dd:37:ef:27:6c:63:02:55:ac:19:6b:37:6d:
79:18:6e:70:cc:14:a6:ba:1d:6d:ce:4a:5b:c7:26:
0b:a8:50:6b:b4:42:57:58:d2:7d:90:99:67:66:48:
ed:e8:2a:73:13:e7:b9:2e:52:ce:90:1a:97:19:2d:
c8:33:4f:5a:de:1f:ce:50:ff:32:a6:56:aa:7e:ef:
74:f3:92:96:1d:12:b9:48:62:a1:05:c5:7e:11:75:
36:87:4e:09:9b:4e:1e:ac:e2:a0:b2:3f:66:d5:6f:
69:dc:29:14:6a:3b:19:46:28:c6:35:c4:85:12:59:
2b:63:64:eb:3a:e2:0b:93:de:29:8e:26:68:de:df:
16:7a:d6:3a:2d:2e:4c:d6:3a:ac:32:1f:6b:25:af:
3b:06:f5:a8:d2:ba:0a:25:1d:4f:ca:e5:6a:84:ad:
81:90:2c:62:79:e4:81:75:69:46:71:70:78:4c:90:
d2:24:fb:33:0b:55:c4:94:f9:8a:9f:e7:1f:6c:0e:
1d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7B:03:FE:88:C4:2E:F5:AF:83:3E:04:E1:BE:A3:E7:52:CF:44:C4
X509v3 Authority Key Identifier:
keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9a:8a:51:c4:9c:18:7d:c4:f7:f1:b3:06:d4:92:be:87:43:
45:43:d9:b3:28:2f:bb:0e:ac:92:34:65:fb:b7:ed:6c:41:54:
52:48:c2:88:67:6b:d0:5d:f1:07:e6:a7:2e:57:68:3e:df:99:
e7:e9:63:4a:b5:c2:a1:8b:30:d2:12:34:6d:6a:2b:da:58:e7:
4d:7c:9a:95:a6:c4:ed:38:03:87:c4:3b:a5:03:67:69:cf:0a:
e1:70:7a:0b:87:88:26:bf:cc:3d:bc:bc:1c:6a:d7:e3:c7:5a:
07:a9:53:c5:f7:22:f9:7e:bf:20:45:75:1e:e3:7c:fc:0e:46:
5a:8d:fd:74:4f:af:f2:ed:bd:d1:db:07:b5:83:b9:1b:ae:65:
8b:d0:d1:42:c9:ea:65:e8:f1:a8:71:4c:46:87:32:3c:33:f0:
0e:79:8c:2e:8c:a5:89:70:8f:99:fe:96:3c:7d:18:00:be:2e:
e0:d0:34:67:3e:76:8f:1b:1b:42:d1:ba:d5:9b:07:83:3e:7c:
ee:0f:f5:03:36:6f:da:48:85:fb:6e:25:61:f6:e6:50:3f:f7:
cc:d2:7d:be:d7:de:b0:c1:dd:8a:b1:35:51:e2:d7:36:0c:0d:
44:54:7b:74:78:1f:7e:4b:16:06:11:ae:0e:44:e7:a2:be:f6:
5d:8e:5d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:15:22 2026 by rpki-client