Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
File: HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft (raw, json)
Hash identifier: gS4WAyjPExY8cTw+VI54Aes1Ldsnv2x3isTRiCac9Gs=
Subject key identifier: 71:F8:98:25:45:F6:47:11:DF:74:64:EF:B6:82:A4:77:0A:7F:3E:89
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial: 019FA260D6A9588E8DE1791C7012A3CD5FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
Manifest number: 1942
Signing time: Mon 27 Jul 2026 07:01:22 +0000
Manifest this update: Mon 27 Jul 2026 07:01:22 +0000
Manifest next update: Tue 28 Jul 2026 07:01:22 +0000
Files and hashes: 1: HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl (hash: Ru/IlpUCiwq3tjRHvWN2w61nYrhIdQ1uySxEI4H/lhA=)
2: W_mPbXQdWoE3DWEm89aYtTyvXdM.roa (hash: Cuy5C/uLsNnCjQnpl1ezzAhceftWpl5e4uiEK2a9oas=)
3: kohaMOAFUb9m1qAoziqxSlDrzkI.roa (hash: zLdUfaZkNbzAb9CiXssBadeUcauoRp2vZNfyu16dqgA=)
4: oOubWaz2meS0_8Fp_zkutkVpQhY.roa (hash: pSmKXeOqsuxy538KjTVMIn4xkuzCLTfsM1rAsvfnG68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:d6:a9:58:8e:8d:e1:79:1c:70:12:a3:cd:5f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Validity
Not Before: Jul 27 07:01:22 2026 GMT
Not After : Jul 28 07:01:22 2026 GMT
Subject: CN=71f8982545f64711df7464efb682a4770a7f3e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7c:a9:b0:c0:80:a6:a3:98:76:95:87:7c:d2:
1c:5b:36:43:f0:00:e5:14:5b:f5:50:2e:5a:95:bd:
34:fd:40:3c:f6:1e:ef:74:f0:60:3f:8e:1b:97:46:
f7:1a:56:9b:e0:a8:6d:23:57:10:06:d4:a7:c7:0f:
5f:48:6d:16:7a:1a:8e:d4:02:1a:a1:eb:31:d7:6d:
84:e2:22:26:4d:89:e5:4f:fe:18:a8:16:54:2a:ac:
09:48:64:d1:bf:e9:98:06:92:03:b9:d1:69:7a:2d:
bc:93:dc:aa:00:80:cd:08:32:61:26:c6:f7:d6:4c:
7f:04:0d:ec:5a:9d:30:72:9c:9d:0a:b8:4c:2e:5c:
78:99:21:d3:20:94:8f:3e:eb:ef:2e:c7:ec:99:33:
ef:86:7a:ac:7d:a2:88:9b:27:e2:ba:3b:1e:59:d5:
79:94:50:d9:40:f6:e6:2e:b3:d0:92:2e:11:b2:b3:
ca:ce:15:22:d7:c5:ca:7c:67:27:c6:33:57:37:34:
73:04:85:86:b4:f9:f5:19:1c:01:c4:dc:2d:fe:1e:
4e:e5:46:9d:00:32:13:30:a8:a1:84:29:31:8d:cf:
5d:7a:1e:a2:cd:b5:36:a5:0c:df:1d:63:a0:37:df:
e4:1f:1d:84:3b:d3:9e:46:ad:21:1a:e7:02:26:89:
ff:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F8:98:25:45:F6:47:11:DF:74:64:EF:B6:82:A4:77:0A:7F:3E:89
X509v3 Authority Key Identifier:
keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:2a:65:26:65:8e:26:40:0a:3e:5b:5d:a8:60:cb:32:46:79:
95:35:bf:e9:1e:29:d0:98:78:38:d5:c4:df:84:11:c4:e0:49:
4b:97:dc:08:5d:29:8d:5d:8b:d4:ce:3d:91:15:ac:e9:d9:a4:
95:ff:62:2e:bb:a3:a8:67:b9:6e:9a:35:e0:a6:e6:67:52:60:
57:73:7e:4e:d0:91:52:20:86:31:62:b7:a9:a6:68:26:a3:22:
7b:da:44:85:bd:02:b9:1d:0f:bb:69:f4:d4:f1:f6:a2:a1:0a:
54:66:99:e9:06:3e:c9:2f:09:75:42:7c:0c:22:be:45:f9:d5:
04:15:94:f0:dc:66:04:21:c9:cf:09:8b:fd:9c:c4:3d:29:5a:
85:89:3d:41:d0:ea:81:29:27:3f:62:f4:6d:9a:dd:de:77:17:
de:80:c2:f6:d2:cc:2f:4e:75:9a:d5:ce:8f:89:49:90:85:f6:
3e:8b:29:d2:21:f5:e8:0d:2c:e7:c9:89:3a:ff:ae:9f:8e:0f:
39:2e:0f:48:18:ab:b9:47:d8:02:e1:f1:b0:f9:c9:55:3c:b3:
3e:10:cc:b2:a7:da:1d:3b:0c:0c:8a:3f:21:86:e8:b4:26:74:
ff:da:b7:b1:05:cb:c6:d4:1e:59:99:06:31:38:a4:fc:b0:3e:
52:b5:a7:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iYNapWI6N4XkccBKjzV+sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNzQzM2ZhZmE1OWYwZDUxMmEyYmViYjA5N2U2OTQ2M2Nj
MDY3NTkwHhcNMjYwNzI3MDcwMTIyWhcNMjYwNzI4MDcwMTIyWjAzMTEwLwYDVQQD
Eyg3MWY4OTgyNTQ1ZjY0NzExZGY3NDY0ZWZiNjgyYTQ3NzBhN2YzZTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXypsMCApqOYdpWHfNIcWzZD8ADl
FFv1UC5alb00/UA89h7vdPBgP44bl0b3Glab4KhtI1cQBtSnxw9fSG0WehqO1AIa
oesx122E4iImTYnlT/4YqBZUKqwJSGTRv+mYBpIDudFpei28k9yqAIDNCDJhJsb3
1kx/BA3sWp0wcpydCrhMLlx4mSHTIJSPPuvvLsfsmTPvhnqsfaKImyfiujseWdV5
lFDZQPbmLrPQki4RsrPKzhUi18XKfGcnxjNXNzRzBIWGtPn1GRwBxNwt/h5O5Uad
ADITMKihhCkxjc9deh6izbU2pQzfHWOgN9/kHx2EO9OeRq0hGucCJon/bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHH4mCVF9kcR33Rk77aCpHcKfz6JMB8GA1UdIwQY
MBaAFBx0M/r6WfDVEqK+uwl+aUY8wGdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhRei12cFo4TlVTb3I2N0NYNXBSanpBWjFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zOWE1YjUtM2M1MS00NmUyLTk0Nzkt
MTJmNDFhMGNjMGMxLzEvSEhRei12cFo4TlVTb3I2N0NYNXBSanpBWjFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zOWE1YjUtM2M1MS00NmUyLTk0NzktMTJmNDFhMGNjMGMx
LzEvSEhRei12cFo4TlVTb3I2N0NYNXBSanpBWjFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSplJmWO
JkAKPltdqGDLMkZ5lTW/6R4p0Jh4ONXE34QRxOBJS5fcCF0pjV2L1M49kRWs6dmk
lf9iLrujqGe5bpo14KbmZ1JgV3N+TtCRUiCGMWK3qaZoJqMie9pEhb0CuR0Pu2n0
1PH2oqEKVGaZ6QY+yS8JdUJ8DCK+RfnVBBWU8NxmBCHJzwmL/ZzEPSlahYk9QdDq
gSknP2L0bZrd3ncX3oDC9tLML051mtXOj4lJkIX2Posp0iH16A0s58mJOv+un44P
OS4PSBiruUfYAuHxsPnJVTyzPhDMsqfaHTsMDIo/IYbotCZ0/9q3sQXLxtQeWZkG
MTik/LA+UrWn9w==
-----END CERTIFICATE-----
Generated at Mon Jul 27 16:27:03 2026 by rpki-client