Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
File: hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft (raw, json)
Hash identifier: OCTd/AAL8USMkpBxwiIYi9lh7BVL39Fe4o9GlTrvR88=
Subject key identifier: 2C:88:65:18:50:1B:A4:ED:1F:04:CA:FA:F2:15:D1:4E:BA:8F:EF:0A
Authority key identifier: 86:AF:AA:E2:E3:E0:54:07:3A:38:AA:B6:35:DC:96:46:0E:EF:48:7E
Certificate issuer: /CN=86afaae2e3e054073a38aab635dc96460eef487e
Certificate serial: 01A180745D8DF8A37389C0225151B40AAC98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
Manifest number: 1783
Signing time: Wed 28 Oct 2026 03:01:12 +0000
Manifest this update: Wed 28 Oct 2026 03:01:12 +0000
Manifest next update: Thu 29 Oct 2026 03:01:12 +0000
Files and hashes: 1: 5f3Xl8FDf6Q5twHpBdywBs_xLj4.roa (hash: +Uv9uFKbDZR84p5KdUOEDt/daH6pg4lfrqKdR8QwARk=)
2: hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl (hash: 7gj9v3rA4P0A5b0xD6sud2tOOYrAIW2Ug/iruGR+VU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:74:5d:8d:f8:a3:73:89:c0:22:51:51:b4:0a:ac:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86afaae2e3e054073a38aab635dc96460eef487e
Validity
Not Before: Oct 28 03:01:12 2026 GMT
Not After : Oct 29 03:01:12 2026 GMT
Subject: CN=2c886518501ba4ed1f04cafaf215d14eba8fef0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:70:4d:ef:6b:f2:a8:52:d0:5d:b5:b8:66:eb:
13:18:47:0c:02:81:76:6d:2a:51:f0:9f:3b:29:0d:
26:4d:27:c4:fc:bd:00:ea:a0:c2:63:ce:fa:2b:13:
19:32:fa:4e:93:3e:a5:ad:f0:94:ab:0e:df:8d:c4:
59:17:1e:40:bc:a7:d8:eb:fa:95:49:7c:ca:b0:74:
41:b9:ed:46:8b:b5:37:50:ed:ca:10:8b:cb:d0:8f:
f8:aa:73:ae:5d:c7:2a:b0:6e:3f:d9:35:f2:62:93:
31:bd:b1:5b:ee:05:cf:75:d0:89:a4:a8:b6:a7:d3:
6d:6d:96:1d:34:30:67:3a:58:05:22:9d:64:67:0d:
42:84:83:c1:26:3e:de:1a:f6:e2:15:84:ca:66:1b:
69:02:2d:78:f4:e1:ca:ef:8d:3f:c0:69:d5:1b:57:
c5:19:ac:b3:37:5c:05:25:61:01:e7:6e:19:52:cc:
96:7f:5f:31:ae:0c:5f:97:a5:91:13:4c:99:d5:6d:
1c:b1:40:04:b2:42:c6:98:ea:8b:9b:5e:a2:62:71:
16:d5:a7:1a:60:92:87:34:8e:70:60:53:1f:f5:3c:
50:d9:d5:a7:9c:0f:20:64:fc:f7:b4:87:e7:bd:b6:
25:1f:20:9b:35:02:da:1f:fe:fc:a4:e4:9b:a3:bf:
41:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:88:65:18:50:1B:A4:ED:1F:04:CA:FA:F2:15:D1:4E:BA:8F:EF:0A
X509v3 Authority Key Identifier:
keyid:86:AF:AA:E2:E3:E0:54:07:3A:38:AA:B6:35:DC:96:46:0E:EF:48:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:05:97:9c:d9:de:f7:a6:bd:1e:ac:5d:5c:26:71:f3:24:74:
de:4b:60:cf:a9:fb:57:96:07:4e:3a:5e:fe:36:ed:16:47:e3:
8a:a5:e8:1e:48:87:7f:8f:2d:57:48:98:b1:71:af:cd:76:c4:
2b:33:d4:97:17:62:83:e1:f0:a2:45:27:47:4c:33:c4:6e:cf:
41:11:60:c7:cd:66:15:36:cf:08:43:38:ec:e6:16:92:97:18:
b4:87:b6:ff:b3:92:86:54:97:99:e3:3d:d4:ee:bb:28:a8:d8:
ed:90:86:78:15:42:88:28:4d:76:6a:b2:44:7a:35:28:63:29:
f4:76:0c:89:df:68:c3:2d:3e:46:ab:15:f1:a3:68:2e:80:f9:
83:30:1f:bb:fd:3d:7a:54:eb:02:29:02:7c:38:0b:1d:40:91:
ad:63:2f:04:98:62:ac:5e:42:57:ca:d0:e4:a1:6f:44:8b:6e:
3e:c9:78:67:03:25:36:42:56:3a:7a:fb:4b:28:35:ba:4a:70:
af:35:6c:80:eb:24:30:b3:fa:8a:95:3f:6a:4d:5c:1c:f6:c2:
66:10:3f:06:7d:37:3e:e2:5e:38:ff:4b:49:3c:77:9b:25:1d:
50:3a:23:fa:e1:34:cf:d0:9d:d9:89:2c:98:9f:55:cf:19:86:
37:df:6c:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGAdF2N+KNzicAiUVG0CqyYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YWZhYWUyZTNlMDU0MDczYTM4YWFiNjM1ZGM5NjQ2MGVl
ZjQ4N2UwHhcNMjYxMDI4MDMwMTEyWhcNMjYxMDI5MDMwMTEyWjAzMTEwLwYDVQQD
EygyYzg4NjUxODUwMWJhNGVkMWYwNGNhZmFmMjE1ZDE0ZWJhOGZlZjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nBN72vyqFLQXbW4ZusTGEcMAoF2
bSpR8J87KQ0mTSfE/L0A6qDCY876KxMZMvpOkz6lrfCUqw7fjcRZFx5AvKfY6/qV
SXzKsHRBue1Gi7U3UO3KEIvL0I/4qnOuXccqsG4/2TXyYpMxvbFb7gXPddCJpKi2
p9NtbZYdNDBnOlgFIp1kZw1ChIPBJj7eGvbiFYTKZhtpAi149OHK740/wGnVG1fF
GayzN1wFJWEB524ZUsyWf18xrgxfl6WRE0yZ1W0csUAEskLGmOqLm16iYnEW1aca
YJKHNI5wYFMf9TxQ2dWnnA8gZPz3tIfnvbYlHyCbNQLaH/78pOSbo79BZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyIZRhQG6TtHwTK+vIV0U66j+8KMB8GA1UdIwQY
MBaAFIavquLj4FQHOjiqtjXclkYO70h+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHEtcTR1UGdWQWM2T0txMk5keVdSZzd2U0g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNzZhMWEtMzcyNC00OTViLWFjNzIt
NDcyMDQwYjI0N2Y2LzEvaHEtcTR1UGdWQWM2T0txMk5keVdSZzd2U0g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9lNzZhMWEtMzcyNC00OTViLWFjNzItNDcyMDQwYjI0N2Y2
LzEvaHEtcTR1UGdWQWM2T0txMk5keVdSZzd2U0g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgWXnNne
96a9HqxdXCZx8yR03ktgz6n7V5YHTjpe/jbtFkfjiqXoHkiHf48tV0iYsXGvzXbE
KzPUlxdig+HwokUnR0wzxG7PQRFgx81mFTbPCEM47OYWkpcYtIe2/7OShlSXmeM9
1O67KKjY7ZCGeBVCiChNdmqyRHo1KGMp9HYMid9owy0+RqsV8aNoLoD5gzAfu/09
elTrAikCfDgLHUCRrWMvBJhirF5CV8rQ5KFvRItuPsl4ZwMlNkJWOnr7Syg1ukpw
rzVsgOskMLP6ipU/ak1cHPbCZhA/Bn03PuJeOP9LSTx3myUdUDoj+uE0z9Cd2Yks
mJ9VzxmGN99sjA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:36:20 2026 by rpki-client