Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
File: hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft (raw, json)
Hash identifier: NE3Xs8C+gXalWG4KkzQJJGf0yDj/3xoL5DSyGyTCP38=
Subject key identifier: B7:F4:BD:5A:03:2A:CE:5A:A6:0A:A9:AE:69:95:78:59:7A:54:9A:B7
Authority key identifier: 86:AF:AA:E2:E3:E0:54:07:3A:38:AA:B6:35:DC:96:46:0E:EF:48:7E
Certificate issuer: /CN=86afaae2e3e054073a38aab635dc96460eef487e
Certificate serial: 019EB98F36EA3BF1C448E2C8340C595A552F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
Manifest number: 1612
Signing time: Fri 12 Jun 2026 02:00:31 +0000
Manifest this update: Fri 12 Jun 2026 02:00:31 +0000
Manifest next update: Sat 13 Jun 2026 02:00:31 +0000
Files and hashes: 1: RU_UuRETls46VjhGYbgF61QltwU.roa (hash: sHTczNIle1k6tQFdcTEb3DGjeRRmo8cAmzWwk836Wyg=)
2: hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl (hash: a2ULDJb2PRIgwx/u3x0NO/t4YFPV1Cja4XaJHQMohzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:36:ea:3b:f1:c4:48:e2:c8:34:0c:59:5a:55:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86afaae2e3e054073a38aab635dc96460eef487e
Validity
Not Before: Jun 12 02:00:31 2026 GMT
Not After : Jun 13 02:00:31 2026 GMT
Subject: CN=b7f4bd5a032ace5aa60aa9ae699578597a549ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9c:52:55:dd:96:95:45:46:f0:86:3b:98:00:
9d:d0:3d:26:f5:a6:be:09:82:7c:99:58:ee:3b:4e:
81:c7:d1:35:13:e9:fd:0d:88:99:7c:90:3a:74:5a:
18:bf:18:2a:7f:0d:5b:85:99:2c:bb:1a:99:7a:fe:
93:35:37:c0:2e:7a:99:7a:fb:ce:cd:ae:4f:09:24:
94:f5:50:cb:35:ff:1b:97:c4:f2:9d:c0:1b:8c:79:
3c:47:4f:94:e1:fe:57:82:ff:83:d0:62:6f:36:c0:
9e:73:c3:b0:cd:29:35:d5:2d:55:11:34:34:7a:5f:
0a:d7:c1:cc:e0:fe:ca:12:92:07:ca:af:62:76:05:
a6:76:6f:b1:7c:07:1b:9b:8b:c5:af:b9:0a:15:63:
70:b5:b8:32:f6:ae:a4:63:23:99:53:8a:cc:64:64:
b9:3f:32:e5:51:a6:63:8f:b5:13:9e:03:73:6e:08:
bd:07:be:26:25:61:4d:d9:51:6f:ad:f1:28:1e:14:
e9:ea:fd:30:1c:eb:e0:61:c0:da:45:0a:12:15:03:
89:1e:74:5c:4a:07:35:26:36:ad:f2:b5:1b:ce:28:
12:38:db:17:b4:d8:6a:5c:36:bf:01:af:a3:43:64:
78:20:30:b1:b5:bd:39:8c:be:3a:d7:cb:b8:e9:13:
68:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F4:BD:5A:03:2A:CE:5A:A6:0A:A9:AE:69:95:78:59:7A:54:9A:B7
X509v3 Authority Key Identifier:
keyid:86:AF:AA:E2:E3:E0:54:07:3A:38:AA:B6:35:DC:96:46:0E:EF:48:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:15:7d:dd:2d:6f:47:94:93:3c:9e:c6:5b:37:09:53:71:3d:
8f:e9:72:79:c8:c5:ee:e0:9e:3f:23:ab:08:c3:68:17:f4:38:
fe:17:d4:a4:eb:92:c6:46:f0:79:f4:f6:6f:d6:a5:92:8a:13:
f0:dd:f5:5e:b4:cd:73:ff:bf:43:9a:b5:1f:35:c8:46:89:68:
2f:9c:24:c3:10:f1:44:78:0b:4b:42:da:e8:45:91:7a:bf:86:
57:76:ed:b5:99:d0:cc:6e:5f:d3:5e:91:1b:47:b1:80:6c:52:
b7:22:9e:1c:7d:bd:0d:be:d4:75:e2:85:a0:ee:1f:ca:9f:ac:
6c:fc:61:8a:54:88:47:50:b3:75:31:d5:8a:4a:70:16:35:9b:
5b:9c:b1:a2:81:04:64:eb:0a:78:50:b4:31:1c:da:83:14:ad:
49:89:15:c7:93:ec:c3:f5:58:cb:84:60:37:3f:5c:80:6d:40:
94:6b:d2:67:91:ab:32:eb:f8:82:5e:fd:95:3c:56:da:d5:f4:
c2:78:4b:35:dd:05:21:84:a5:4c:32:b2:2f:73:63:ed:0d:97:
1a:d3:e2:12:18:62:23:5b:e5:48:e9:19:e6:66:9e:4c:2c:1f:
43:2f:41:b5:ff:8f:29:9b:e2:f2:00:73:04:74:6f:3e:85:f2:
88:73:47:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:21:30 2026 by rpki-client