Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
File: hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft (raw, json)
Hash identifier: FWQ5zTt+GAbvJv8KbsvcE0q0wcw4MY5HWqCQNNUtlEs=
Subject key identifier: A9:BE:CC:1D:B5:76:74:9A:C3:96:4E:61:2C:53:A1:26:38:67:2B:F3
Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Certificate serial: 01A06E39D7178D84FE039D950E5E6A2D6A4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
Manifest number: 1A3A
Signing time: Fri 04 Sep 2026 21:01:19 +0000
Manifest this update: Fri 04 Sep 2026 21:01:19 +0000
Manifest next update: Sat 05 Sep 2026 21:01:19 +0000
Files and hashes: 1: Xt9gim6uGZAO-XoH9YVT_sjrnmc.roa (hash: EDOq5gPDJvJThydl2Ogu3GFdpWlVfncejE+dMuzQn70=)
2: c06039lKyV_J6xBbo-T4U-OvKpY.roa (hash: iZi7artEej/ZvwjEPmdFR6zAlAdw9xNqyuBRvLMxbow=)
3: hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl (hash: PrsXC9VClBDLtyUSA6DYv6IC7tZo+8e/4O3Z8RFawOI=)
4: oEY0i9r3K2XzpeIqb_uHhC_ZJf8.roa (hash: eStOq03pWfBN0BFsIv2si494zM3pBol5A5EHh+T2UJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:d7:17:8d:84:fe:03:9d:95:0e:5e:6a:2d:6a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Validity
Not Before: Sep 4 21:01:19 2026 GMT
Not After : Sep 5 21:01:19 2026 GMT
Subject: CN=a9becc1db576749ac3964e612c53a12638672bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:3f:12:58:9e:87:90:d3:14:1d:bd:08:1f:
a4:e1:70:26:54:bf:4b:c6:b9:a5:35:9b:26:0d:8b:
d7:40:88:b2:ae:ff:f4:15:b9:c8:f8:71:c5:f6:14:
e2:4b:42:6e:c0:b5:37:e9:a1:93:70:e1:90:67:80:
f1:8c:98:c3:ac:b5:96:a4:a4:64:77:1d:5e:7f:fa:
bc:c8:84:d4:de:60:f2:09:aa:76:07:fc:29:c5:0e:
7f:30:e0:b2:ec:c2:a1:08:75:6c:40:43:31:50:c5:
ef:e4:6e:d8:75:1e:56:f9:65:42:f4:4b:de:b1:ff:
82:49:e9:b3:5f:ca:3b:35:b7:f9:82:26:60:cc:8f:
a7:6c:60:45:50:f8:5d:c9:c3:b5:ec:e3:5f:43:4c:
11:5b:5c:26:0e:ae:bd:25:e0:5b:d4:77:0c:84:4c:
47:8c:81:c0:1a:09:99:6c:21:9e:b4:cd:df:41:cf:
72:70:eb:89:4f:f3:7c:29:1c:b3:77:44:6f:79:e8:
74:66:91:b4:3b:28:73:3c:50:5b:00:41:ba:b8:f2:
dc:40:98:54:f7:b6:49:01:4a:6f:15:df:c1:e0:6a:
af:a8:c1:22:7e:10:51:6c:10:ac:5c:17:3f:b9:ea:
13:58:08:96:1a:f0:c6:75:2a:c9:53:8a:10:24:24:
47:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BE:CC:1D:B5:76:74:9A:C3:96:4E:61:2C:53:A1:26:38:67:2B:F3
X509v3 Authority Key Identifier:
keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:de:2e:9a:81:91:d0:f4:49:d0:ea:b6:94:a2:f1:cd:e5:b7:
fc:41:f2:10:cd:6b:73:3d:73:54:1a:45:c2:07:b8:1c:09:49:
bd:58:28:af:7b:9f:a6:7a:fd:ce:ca:fa:ad:e2:94:06:00:c6:
68:04:ee:97:34:e6:b6:c1:64:6d:b8:b8:8c:81:43:f5:10:71:
9f:6e:2b:a8:a6:0c:7e:b7:ee:c0:5f:30:c3:8c:52:be:83:cc:
bf:35:b8:61:ea:36:ac:2a:3d:8d:77:55:8a:c8:55:79:1d:c7:
3d:64:6f:d1:2f:40:2b:4e:c6:da:03:64:46:dc:7d:f9:7c:65:
4b:a3:7c:eb:8f:8c:19:6e:a5:28:72:d8:10:29:96:4d:c4:0b:
4d:b7:75:1e:04:8e:ff:86:9c:06:db:b9:54:06:0d:d9:c1:b4:
37:d4:0c:70:bf:f9:b8:8d:79:8d:cc:5e:02:30:70:6e:2a:2b:
cd:1d:91:b0:36:ac:39:bc:d8:34:e9:a4:3d:08:8a:0f:9d:a8:
95:3b:d7:b3:89:38:5a:9f:83:4b:40:0c:d5:4b:e0:41:9c:92:
6b:6b:2c:8a:2e:a1:2e:5c:1a:53:de:a5:37:c7:de:6d:32:50:
d7:e2:d0:45:f3:5f:0f:d4:4e:cf:53:1a:41:89:df:7d:78:35:
ca:9e:82:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:09:49 2026 by rpki-client