Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
File: hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft (raw, json)
Hash identifier: 9SadJj/rv0eE6n1urcdKjr19TbuVQd5V/G/wP5K+QEk=
Subject key identifier: 5A:62:E8:C1:7A:D7:0B:AB:28:2E:D4:49:8B:B2:D1:CC:D1:DB:67:24
Authority key identifier: 86:AF:AA:E2:E3:E0:54:07:3A:38:AA:B6:35:DC:96:46:0E:EF:48:7E
Certificate issuer: /CN=86afaae2e3e054073a38aab635dc96460eef487e
Certificate serial: 019FA18438242ECAD4020118F60F5EE6CF9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
Manifest number: 168B
Signing time: Mon 27 Jul 2026 03:00:24 +0000
Manifest this update: Mon 27 Jul 2026 03:00:24 +0000
Manifest next update: Tue 28 Jul 2026 03:00:24 +0000
Files and hashes: 1: 5f3Xl8FDf6Q5twHpBdywBs_xLj4.roa (hash: +Uv9uFKbDZR84p5KdUOEDt/daH6pg4lfrqKdR8QwARk=)
2: hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl (hash: 4Mo1TcwiuAmPqrFAsIowmE6PR+btU1B0ARJZ0FhFuY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:38:24:2e:ca:d4:02:01:18:f6:0f:5e:e6:cf:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86afaae2e3e054073a38aab635dc96460eef487e
Validity
Not Before: Jul 27 03:00:24 2026 GMT
Not After : Jul 28 03:00:24 2026 GMT
Subject: CN=5a62e8c17ad70bab282ed4498bb2d1ccd1db6724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:61:21:aa:58:82:11:a9:4c:47:7f:2d:c7:2b:
09:23:52:27:f3:c7:ff:79:a1:7b:67:5f:e8:c7:a7:
2f:89:35:33:63:df:51:5d:88:54:c0:bf:10:b6:62:
da:32:ba:7b:56:7a:72:7c:d8:e0:d6:13:2c:b1:c8:
45:d0:d6:fd:a2:9d:40:a7:1d:08:53:91:bb:62:86:
ec:14:f6:85:ae:02:47:4a:5e:e0:74:74:d1:72:df:
e1:80:19:41:bb:0d:6f:b8:85:3a:92:c6:56:67:d8:
d2:2c:31:b6:14:fb:4e:1f:b7:c7:b0:1f:0c:31:6a:
75:d1:66:91:39:3d:af:7f:64:bf:8a:4c:34:f7:df:
15:85:77:00:45:7a:52:5d:22:bf:fa:bd:41:4d:8c:
e3:c2:4e:47:fc:5f:dd:71:4a:cc:b2:fd:e5:b1:93:
68:e4:6a:22:fc:e3:b7:c1:0a:5e:2e:78:d9:8b:8d:
1d:03:31:52:41:dd:e8:5e:27:7f:06:97:93:89:f5:
9b:be:87:6b:8f:b4:19:e3:e3:9f:a4:4f:ff:58:d3:
dd:5b:c3:e9:e0:5b:50:da:ea:d7:51:cc:41:61:97:
49:f9:f6:73:b4:1f:7b:ce:19:f7:d9:98:b5:2c:1b:
1a:59:d5:8a:e6:f9:cb:82:82:62:08:41:c8:c8:eb:
e8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:62:E8:C1:7A:D7:0B:AB:28:2E:D4:49:8B:B2:D1:CC:D1:DB:67:24
X509v3 Authority Key Identifier:
keyid:86:AF:AA:E2:E3:E0:54:07:3A:38:AA:B6:35:DC:96:46:0E:EF:48:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:6c:11:f8:27:7b:21:c2:b3:ee:d8:02:c8:13:90:52:7a:d0:
38:97:58:bb:2e:59:39:58:9f:24:c7:b6:9c:57:0e:8e:77:77:
e0:76:81:52:81:b5:c9:2e:43:fd:16:3f:99:19:03:77:12:d4:
13:e1:76:6a:cf:31:56:36:9e:cc:bb:8b:12:11:2a:0a:fd:8c:
82:17:ec:1a:84:5b:c9:0e:19:cb:cc:ba:96:8a:ae:ae:91:16:
5a:f1:c4:4e:eb:c1:de:c4:3e:e4:87:d8:ff:fa:95:13:86:00:
09:3a:d4:97:11:18:59:65:9f:da:da:8b:bd:6e:4d:a8:5c:3a:
9f:45:d4:51:63:71:e8:88:36:72:23:d0:fe:0e:9b:be:cf:96:
16:08:62:86:87:96:fb:7c:b2:84:7b:20:c3:bd:77:fd:c6:17:
10:74:1e:d8:87:97:e7:b7:16:37:15:5d:a1:8a:30:ec:06:04:
1c:c6:8b:f1:b9:69:fb:9a:fc:00:69:cf:71:f9:e1:e4:57:d4:
dd:86:6f:ae:46:92:61:3a:2c:e3:85:04:cd:28:ca:88:67:96:
5b:85:b8:68:c7:a9:7d:43:a3:80:36:23:85:e9:c5:bc:bb:3e:
6a:78:98:58:2b:a1:13:e2:d6:06:bc:45:26:ee:8c:4b:3f:2e:
d4:d5:b8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:29:29 2026 by rpki-client