Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
File: HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft (raw, json)
Hash identifier: yaTWzcWPjdTSb5Q7UoywkKD/rqMl1WK8aYIosMowzFo=
Subject key identifier: E7:9E:4A:E0:FB:FD:70:FF:FE:9F:71:6C:26:0A:3D:85:57:F0:D6:AC
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial: 019DCD194EEF00297832C9F77F1B59D50B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
Manifest number: 184F
Signing time: Mon 27 Apr 2026 04:01:21 +0000
Manifest this update: Mon 27 Apr 2026 04:01:21 +0000
Manifest next update: Tue 28 Apr 2026 04:01:21 +0000
Files and hashes: 1: HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl (hash: +guFM4NFR0acIcJqxzIy/KNxU4pdapknLAY8tWTj0Eg=)
2: W_mPbXQdWoE3DWEm89aYtTyvXdM.roa (hash: Cuy5C/uLsNnCjQnpl1ezzAhceftWpl5e4uiEK2a9oas=)
3: kohaMOAFUb9m1qAoziqxSlDrzkI.roa (hash: zLdUfaZkNbzAb9CiXssBadeUcauoRp2vZNfyu16dqgA=)
4: oOubWaz2meS0_8Fp_zkutkVpQhY.roa (hash: pSmKXeOqsuxy538KjTVMIn4xkuzCLTfsM1rAsvfnG68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:19:4e:ef:00:29:78:32:c9:f7:7f:1b:59:d5:0b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Validity
Not Before: Apr 27 04:01:21 2026 GMT
Not After : Apr 28 04:01:21 2026 GMT
Subject: CN=e79e4ae0fbfd70fffe9f716c260a3d8557f0d6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:17:e2:c6:e4:42:74:08:2f:76:ff:68:bb:75:
19:c6:5c:42:df:a7:73:44:a7:c8:20:89:2c:0d:2b:
4a:81:6d:99:d3:eb:55:6d:49:3b:51:8b:28:5f:11:
0f:18:d7:b2:4e:d6:68:64:40:cf:4f:c4:91:b8:2d:
05:c7:e2:b9:59:16:c9:da:e9:27:2d:e3:fd:42:d6:
07:65:b6:7e:82:73:11:e1:41:fa:16:6d:02:5c:2c:
7e:17:20:6b:5e:f6:35:1f:8c:59:cf:69:e0:84:63:
5a:e9:d3:41:cb:e5:28:36:fd:20:a5:df:e6:6d:0e:
ed:57:82:ee:05:0f:0d:5f:08:c8:02:f6:63:4a:4d:
c0:6f:e5:be:57:4d:c6:5e:47:37:e0:82:23:39:ea:
03:d7:de:19:f2:68:c4:3a:44:75:e1:c0:43:99:23:
0f:63:8d:8c:73:94:cf:a0:dd:08:2d:37:d4:d4:fb:
68:46:d4:60:6c:5e:5c:1e:8f:d9:b8:40:26:6e:74:
21:c5:3b:bc:35:02:b0:b0:6a:36:aa:62:46:99:47:
d6:bd:80:fd:9b:8b:30:60:5a:26:ca:9a:9c:61:40:
f9:9d:7b:b5:83:6e:42:13:77:e2:21:8e:16:5f:a4:
04:d1:ba:1e:fa:8e:d7:84:6c:5f:12:cf:ee:17:3d:
1d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9E:4A:E0:FB:FD:70:FF:FE:9F:71:6C:26:0A:3D:85:57:F0:D6:AC
X509v3 Authority Key Identifier:
keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a1:9c:f4:6c:0f:9e:9e:49:f2:b5:7b:f3:2d:55:d3:6b:f5:
24:2c:a9:ef:ab:25:f4:a6:e9:ec:b0:f8:d3:a0:d5:f8:44:fb:
53:67:b2:c5:8e:1a:60:aa:f9:57:7b:93:25:47:a4:6c:35:e4:
cd:93:aa:ed:ae:4e:ab:e6:75:e2:43:9c:97:90:70:56:a7:6b:
1b:81:13:80:40:dc:02:39:50:0a:64:38:2d:69:8d:d8:62:aa:
19:04:0a:d4:7f:2a:2d:86:6f:4d:87:d5:29:69:ca:ba:ff:c4:
7a:a5:e2:d8:44:8c:b0:aa:ec:73:49:31:94:a1:91:28:6a:ce:
39:bc:75:10:f9:40:41:b9:d0:05:fa:05:72:45:25:31:3c:14:
e5:76:2d:9a:14:8e:fb:9c:10:ee:a4:48:fb:11:76:c8:34:41:
8d:1f:b5:d3:de:a2:1e:ce:a0:45:54:66:87:92:f5:c2:b5:77:
6f:d5:cb:ac:88:c8:51:4a:ab:90:bc:fe:46:87:fc:e5:83:77:
1f:e7:f2:28:c3:ca:bf:1e:fd:fb:5b:00:23:ee:6b:30:63:6c:
dc:a6:3d:ba:d2:a2:17:99:e0:98:5f:fc:85:77:3b:b3:41:e5:
27:76:5b:20:ac:cb:ee:1c:5b:c7:45:14:7d:8d:fc:77:db:41:
0a:ea:dc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:40:44 2026 by rpki-client