Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
File: HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft (raw, json)
Hash identifier: 7claZ6tJbY3GWodP+Hg/et3OIDoA/D4i26g2UWQBxiA=
Subject key identifier: C5:67:73:2E:41:9A:A6:3F:F8:8D:05:78:52:1D:16:F7:74:53:0D:BE
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial: 01A1833E38F27229373A7DD78EE5D57B2D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
Manifest number: 1A3B
Signing time: Wed 28 Oct 2026 16:00:55 +0000
Manifest this update: Wed 28 Oct 2026 16:00:55 +0000
Manifest next update: Thu 29 Oct 2026 16:00:55 +0000
Files and hashes: 1: HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl (hash: I8fFZZWQ7e1TEA0n7Aw+xwVLxCXk3H5REmIkxs+cO74=)
2: W_mPbXQdWoE3DWEm89aYtTyvXdM.roa (hash: Cuy5C/uLsNnCjQnpl1ezzAhceftWpl5e4uiEK2a9oas=)
3: kohaMOAFUb9m1qAoziqxSlDrzkI.roa (hash: zLdUfaZkNbzAb9CiXssBadeUcauoRp2vZNfyu16dqgA=)
4: oOubWaz2meS0_8Fp_zkutkVpQhY.roa (hash: pSmKXeOqsuxy538KjTVMIn4xkuzCLTfsM1rAsvfnG68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:3e:38:f2:72:29:37:3a:7d:d7:8e:e5:d5:7b:2d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Validity
Not Before: Oct 28 16:00:55 2026 GMT
Not After : Oct 29 16:00:55 2026 GMT
Subject: CN=c567732e419aa63ff88d0578521d16f774530dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ed:d1:7f:35:e6:25:e7:11:1f:4b:d0:93:07:
29:bb:70:d7:9b:5e:d0:e5:de:ed:61:bd:c5:ea:bb:
20:86:ba:70:15:f2:96:e2:76:fb:dd:ac:cd:bf:f9:
25:11:19:64:e6:24:24:af:c3:11:d8:d4:88:25:02:
42:47:9e:9b:8f:e3:17:70:4a:73:69:ea:67:1d:29:
6e:ed:c4:c0:d8:72:2d:4d:d8:73:08:a5:c3:ec:a4:
39:85:24:db:cf:8f:b9:d9:88:93:7e:42:a6:95:b6:
96:55:01:d6:66:5d:50:07:ec:08:bf:a2:c1:d4:75:
ef:b8:85:df:ae:ac:8d:6e:53:bf:68:b4:80:08:af:
d5:bb:2a:f0:46:88:22:83:34:f5:90:e2:3b:83:01:
e8:ec:5d:e5:55:9a:3f:1e:c0:c0:d1:2f:00:5e:6b:
d9:c3:d5:2b:93:e1:9f:53:5a:1e:63:ef:4a:e6:5e:
bf:2f:0d:f8:7a:b0:fb:39:be:ce:dd:41:d0:b8:eb:
0e:58:4b:9c:bd:d4:4f:41:7f:16:16:9c:dd:e9:ae:
80:71:fb:94:48:03:d6:32:6c:98:63:ed:2f:d5:0a:
6e:89:bb:26:8a:5a:0f:b4:d4:d7:86:99:70:39:53:
50:dd:1e:f2:4e:c8:13:e4:80:af:ff:cb:83:e9:bb:
88:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:67:73:2E:41:9A:A6:3F:F8:8D:05:78:52:1D:16:F7:74:53:0D:BE
X509v3 Authority Key Identifier:
keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:70:ac:6e:b3:18:6d:e2:41:76:f2:62:d8:eb:f5:4c:c4:d5:
83:68:b2:44:12:92:5e:3f:26:b1:d9:77:f6:89:e4:aa:0a:2d:
54:46:a2:fd:41:cd:9a:db:ac:ca:d5:a8:17:1d:8e:14:5c:78:
99:03:a0:e0:91:2a:44:61:b3:b7:ec:69:f9:e3:27:89:d4:8a:
0a:16:0c:29:ec:34:0a:36:96:d8:88:7b:6d:32:b9:63:8f:15:
94:fe:64:fe:90:72:40:ca:e1:31:dc:00:78:7c:86:f7:b6:46:
b7:26:4c:6a:98:3f:8b:e5:a9:f2:f0:5a:0b:60:fd:be:34:76:
c6:65:e9:52:19:b4:20:c4:cc:86:29:e0:f4:a1:c7:5f:28:26:
ff:85:89:d7:fe:d8:5f:26:3f:08:e9:67:a9:5b:b4:cf:dc:c4:
3c:9e:84:a0:e2:7e:0a:e4:fc:a8:d1:26:b1:61:4c:1c:51:2b:
1a:e9:ca:41:78:bc:6d:da:75:b9:91:33:8b:c8:27:9a:6a:2a:
d1:30:64:b1:af:d8:e7:56:4c:3e:4a:6b:ff:bd:cd:09:5a:dc:
f9:2c:5f:76:33:d0:67:17:26:b3:45:0c:9c:23:7c:48:d6:d5:
35:f0:e2:2b:5f:46:df:fb:01:13:ae:d0:4a:8a:c4:74:0a:5c:
79:6a:a3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:54:22 2026 by rpki-client