Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
File: HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft (raw, json)
Hash identifier: 7oZf7UrmrBFEGBDV5B+4RlyHyUjc0f27kRi/bMVG5T0=
Subject key identifier: CA:83:66:BF:A7:C2:F7:85:41:D3:AC:9E:98:3E:9E:67:DD:26:92:72
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial: 019CE36C766FEC6F83171D6BC87037B7143E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
Manifest number: 17D6
Signing time: Thu 12 Mar 2026 19:01:02 +0000
Manifest this update: Thu 12 Mar 2026 19:01:02 +0000
Manifest next update: Fri 13 Mar 2026 19:01:02 +0000
Files and hashes: 1: HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl (hash: 525U7xC5AMkZ1MmXs+vkfzmPtBk8n7IWPb8x1S99cZ8=)
2: W_mPbXQdWoE3DWEm89aYtTyvXdM.roa (hash: Cuy5C/uLsNnCjQnpl1ezzAhceftWpl5e4uiEK2a9oas=)
3: kohaMOAFUb9m1qAoziqxSlDrzkI.roa (hash: zLdUfaZkNbzAb9CiXssBadeUcauoRp2vZNfyu16dqgA=)
4: oOubWaz2meS0_8Fp_zkutkVpQhY.roa (hash: pSmKXeOqsuxy538KjTVMIn4xkuzCLTfsM1rAsvfnG68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:6c:76:6f:ec:6f:83:17:1d:6b:c8:70:37:b7:14:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Validity
Not Before: Mar 12 19:01:02 2026 GMT
Not After : Mar 13 19:01:02 2026 GMT
Subject: CN=ca8366bfa7c2f78541d3ac9e983e9e67dd269272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e7:10:0d:ea:4b:cd:b1:99:c7:a5:c4:3a:4c:
2a:73:f5:e0:3a:99:9a:ba:d0:8d:3b:82:49:92:e1:
bb:07:86:bf:94:41:ad:26:15:76:a3:73:e7:ab:bf:
64:11:57:8c:20:78:00:99:5b:b1:7b:77:19:10:20:
e2:60:f1:a8:d2:d5:19:74:e8:c8:24:6b:9a:65:54:
09:8c:25:f8:ae:16:6f:5b:f5:9a:58:15:27:97:1c:
b1:3b:76:61:30:4a:2c:b8:65:8f:ba:7f:79:83:1c:
25:4f:e3:6c:8b:5f:a0:fa:7f:40:cd:80:e4:4d:33:
60:2e:6b:0a:9d:47:e5:44:db:f9:ea:e4:ff:2f:e3:
b5:64:3c:24:f0:6f:ba:61:36:7d:a9:55:f6:38:22:
6d:a8:ad:fc:4e:9d:f1:c1:fb:8d:7e:30:61:12:86:
aa:ed:c9:8a:3a:a1:6f:ee:b5:45:65:22:41:99:a4:
6c:c3:53:c4:4f:5d:a6:ed:bd:bd:b9:34:24:8b:55:
9a:f2:cd:05:52:6a:64:5c:e4:ac:7d:76:4e:76:b1:
bc:6a:f0:21:78:a5:a0:0e:ef:49:62:48:20:98:e8:
e3:9a:e4:0d:82:2b:59:96:35:12:a4:0d:99:5d:d4:
f4:70:7b:2b:48:95:64:6b:b1:cd:de:52:d8:dd:92:
5e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:83:66:BF:A7:C2:F7:85:41:D3:AC:9E:98:3E:9E:67:DD:26:92:72
X509v3 Authority Key Identifier:
keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f6:45:58:85:c3:35:4b:b1:b1:d5:0c:0d:b7:41:f0:a6:6c:
61:68:44:98:03:be:29:bf:d0:8b:ba:25:d3:80:cf:e6:00:02:
32:17:8b:71:35:49:10:44:fe:81:3f:87:a2:19:12:da:95:61:
e3:52:4d:2f:f6:fd:31:8d:08:70:8d:36:06:61:e9:41:85:e5:
fe:ce:54:40:5b:58:35:6c:83:3b:47:0b:9b:7f:91:4e:50:ec:
30:b9:f0:9e:51:8f:fe:1d:44:72:0a:e9:15:7e:94:91:c9:c3:
f9:fd:28:02:7c:81:b2:58:df:a7:28:10:c2:6f:96:07:08:51:
dd:24:3a:1d:9d:19:dd:80:25:98:f3:42:2b:a3:72:f2:ec:73:
02:58:1b:ca:3b:1f:af:63:1c:e1:f7:70:83:10:cb:b2:89:23:
db:33:91:ae:7a:56:ec:b5:e2:f0:82:e6:1d:d2:d0:52:fd:8e:
52:6e:d6:46:8c:58:65:97:a8:63:10:c6:30:d8:f9:f9:e1:02:
f9:a0:a7:76:f5:08:7a:0b:a8:2d:48:a0:cd:34:fa:1e:d7:16:
f8:63:c3:37:73:00:9a:5f:b6:23:d0:d7:de:9d:d1:14:b3:6f:
d3:c2:6d:d4:29:89:9c:87:7e:1e:dc:c7:b9:51:ea:00:2e:10:
fb:2c:9f:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzjbHZv7G+DFx1ryHA3txQ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNzQzM2ZhZmE1OWYwZDUxMmEyYmViYjA5N2U2OTQ2M2Nj
MDY3NTkwHhcNMjYwMzEyMTkwMTAyWhcNMjYwMzEzMTkwMTAyWjAzMTEwLwYDVQQD
EyhjYTgzNjZiZmE3YzJmNzg1NDFkM2FjOWU5ODNlOWU2N2RkMjY5MjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlecQDepLzbGZx6XEOkwqc/XgOpma
utCNO4JJkuG7B4a/lEGtJhV2o3Pnq79kEVeMIHgAmVuxe3cZECDiYPGo0tUZdOjI
JGuaZVQJjCX4rhZvW/WaWBUnlxyxO3ZhMEosuGWPun95gxwlT+Nsi1+g+n9AzYDk
TTNgLmsKnUflRNv56uT/L+O1ZDwk8G+6YTZ9qVX2OCJtqK38Tp3xwfuNfjBhEoaq
7cmKOqFv7rVFZSJBmaRsw1PET12m7b29uTQki1Wa8s0FUmpkXOSsfXZOdrG8avAh
eKWgDu9JYkggmOjjmuQNgitZljUSpA2ZXdT0cHsrSJVka7HN3lLY3ZJe0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqDZr+nwveFQdOsnpg+nmfdJpJyMB8GA1UdIwQY
MBaAFBx0M/r6WfDVEqK+uwl+aUY8wGdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhRei12cFo4TlVTb3I2N0NYNXBSanpBWjFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zOWE1YjUtM2M1MS00NmUyLTk0Nzkt
MTJmNDFhMGNjMGMxLzEvSEhRei12cFo4TlVTb3I2N0NYNXBSanpBWjFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zOWE1YjUtM2M1MS00NmUyLTk0NzktMTJmNDFhMGNjMGMx
LzEvSEhRei12cFo4TlVTb3I2N0NYNXBSanpBWjFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/ZFWIXD
NUuxsdUMDbdB8KZsYWhEmAO+Kb/Qi7ol04DP5gACMheLcTVJEET+gT+HohkS2pVh
41JNL/b9MY0IcI02BmHpQYXl/s5UQFtYNWyDO0cLm3+RTlDsMLnwnlGP/h1Ecgrp
FX6UkcnD+f0oAnyBsljfpygQwm+WBwhR3SQ6HZ0Z3YAlmPNCK6Ny8uxzAlgbyjsf
r2Mc4fdwgxDLsokj2zORrnpW7LXi8ILmHdLQUv2OUm7WRoxYZZeoYxDGMNj5+eEC
+aCndvUIeguoLUigzTT6HtcW+GPDN3MAml+2I9DX3p3RFLNv08Jt1CmJnId+HtzH
uVHqAC4Q+yyfTQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 03:25:02 2026 by rpki-client