Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
File: HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft (raw, json)
Hash identifier: 3HJt6ElX5LmPUjMxZcqiRwi4ur5U3W2ZYHlxaJK3qw4=
Subject key identifier: DB:D9:EF:75:A6:43:0C:93:95:73:C8:A2:08:2B:6D:CA:09:9C:CE:8F
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial: 01A189097E6702695C7669374F4D7A7325E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
Manifest number: 1A3E
Signing time: Thu 29 Oct 2026 19:01:03 +0000
Manifest this update: Thu 29 Oct 2026 19:01:03 +0000
Manifest next update: Fri 30 Oct 2026 19:01:03 +0000
Files and hashes: 1: HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl (hash: V2MaO5tIh3TfcjzePHOjDQyKWsP3VtkuBqAOtEXJgMs=)
2: W_mPbXQdWoE3DWEm89aYtTyvXdM.roa (hash: Cuy5C/uLsNnCjQnpl1ezzAhceftWpl5e4uiEK2a9oas=)
3: kohaMOAFUb9m1qAoziqxSlDrzkI.roa (hash: zLdUfaZkNbzAb9CiXssBadeUcauoRp2vZNfyu16dqgA=)
4: oOubWaz2meS0_8Fp_zkutkVpQhY.roa (hash: pSmKXeOqsuxy538KjTVMIn4xkuzCLTfsM1rAsvfnG68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:09:7e:67:02:69:5c:76:69:37:4f:4d:7a:73:25:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Validity
Not Before: Oct 29 19:01:03 2026 GMT
Not After : Oct 30 19:01:03 2026 GMT
Subject: CN=dbd9ef75a6430c939573c8a2082b6dca099cce8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2b:53:9a:16:ed:e2:84:dd:d4:fd:b5:21:7d:
69:7d:08:1e:c4:a1:ee:21:7b:1e:3e:3f:59:f1:2e:
ad:e9:23:58:09:f1:df:ec:b3:69:07:6d:f7:0a:a7:
64:9f:86:73:af:fc:15:6e:44:74:42:c3:0f:76:4f:
fe:29:3e:3e:7c:40:d4:ba:ea:8a:5d:32:6b:76:97:
af:1a:d2:c3:37:60:49:5f:26:1c:9a:b3:d0:a2:a6:
ec:12:ec:d9:b0:31:92:85:88:72:a0:ee:04:e7:68:
e0:e9:a8:ef:07:2d:c8:fd:7d:eb:36:f2:9c:55:e2:
ed:c6:ab:c2:9e:a9:17:02:2b:4b:d4:0c:a3:fe:a3:
c6:ea:40:d0:cc:d3:dc:92:1f:cc:de:68:a9:44:a8:
d5:8a:ef:83:8b:fe:bd:ec:44:0a:c5:28:4c:ca:8b:
aa:e8:a3:4b:04:2f:ac:35:77:96:aa:a3:49:1c:31:
ae:86:9c:e7:e9:d8:93:0d:17:d3:c5:af:fb:0b:dd:
7e:d6:46:bb:d6:37:85:be:65:63:dd:00:c8:00:9d:
1b:cb:04:47:af:c4:8e:0f:be:4e:3e:67:79:c9:07:
c2:2a:7e:b4:18:4d:e6:63:75:fd:f7:06:f0:e0:28:
44:17:be:b2:24:62:0d:e5:13:2b:be:9a:0a:3d:50:
c0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D9:EF:75:A6:43:0C:93:95:73:C8:A2:08:2B:6D:CA:09:9C:CE:8F
X509v3 Authority Key Identifier:
keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f2:28:b4:e8:0b:20:87:56:2d:59:13:a1:31:e9:6c:5f:b2:
7c:4f:3c:8d:b4:13:17:1c:e4:9b:02:ef:44:25:3c:be:a3:75:
f7:52:6a:64:86:42:e1:67:41:9e:f5:1c:8b:eb:b4:24:b5:ed:
85:64:8a:b8:fa:7c:0c:53:e4:ba:46:79:8d:c5:d4:8a:58:61:
a7:19:eb:fb:72:2f:5b:25:09:45:6b:3e:de:70:6c:df:71:2c:
ba:a0:45:c3:9e:fc:cc:a1:37:b9:8e:82:52:b2:ad:57:05:0f:
5c:50:9e:41:bc:9d:6c:e0:a3:9d:8f:34:71:6b:e7:f4:57:2e:
bd:49:be:16:8a:e2:29:1e:c8:d3:8f:11:1f:c8:ec:82:23:a7:
7e:14:b7:ee:a9:e9:39:7b:ca:dd:0c:d2:53:c8:12:a3:6f:c9:
2a:70:7d:92:d0:99:c6:ae:be:e6:59:bd:83:da:78:fc:61:d4:
17:12:89:ae:ce:22:88:47:81:1b:57:a7:40:41:73:41:a4:15:
6b:c7:94:88:2b:e3:45:f4:b7:5d:5a:87:e1:96:af:c9:4a:3a:
1b:25:14:c9:1e:3b:1e:f4:68:ca:d9:08:62:37:9c:a8:f1:68:
65:9c:38:c2:82:f5:c4:99:42:19:4e:24:04:59:9f:11:89:f6:
22:fb:b8:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGJCX5nAmlcdmk3T016cyXkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNzQzM2ZhZmE1OWYwZDUxMmEyYmViYjA5N2U2OTQ2M2Nj
MDY3NTkwHhcNMjYxMDI5MTkwMTAzWhcNMjYxMDMwMTkwMTAzWjAzMTEwLwYDVQQD
EyhkYmQ5ZWY3NWE2NDMwYzkzOTU3M2M4YTIwODJiNmRjYTA5OWNjZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCtTmhbt4oTd1P21IX1pfQgexKHu
IXsePj9Z8S6t6SNYCfHf7LNpB233Cqdkn4Zzr/wVbkR0QsMPdk/+KT4+fEDUuuqK
XTJrdpevGtLDN2BJXyYcmrPQoqbsEuzZsDGShYhyoO4E52jg6ajvBy3I/X3rNvKc
VeLtxqvCnqkXAitL1Ayj/qPG6kDQzNPckh/M3mipRKjViu+Di/697EQKxShMyouq
6KNLBC+sNXeWqqNJHDGuhpzn6diTDRfTxa/7C91+1ka71jeFvmVj3QDIAJ0bywRH
r8SOD75OPmd5yQfCKn60GE3mY3X99wbw4ChEF76yJGIN5RMrvpoKPVDAdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvZ73WmQwyTlXPIoggrbcoJnM6PMB8GA1UdIwQY
MBaAFBx0M/r6WfDVEqK+uwl+aUY8wGdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhRei12cFo4TlVTb3I2N0NYNXBSanpBWjFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zOWE1YjUtM2M1MS00NmUyLTk0Nzkt
MTJmNDFhMGNjMGMxLzEvSEhRei12cFo4TlVTb3I2N0NYNXBSanpBWjFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zOWE1YjUtM2M1MS00NmUyLTk0NzktMTJmNDFhMGNjMGMx
LzEvSEhRei12cFo4TlVTb3I2N0NYNXBSanpBWjFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/IotOgL
IIdWLVkToTHpbF+yfE88jbQTFxzkmwLvRCU8vqN191JqZIZC4WdBnvUci+u0JLXt
hWSKuPp8DFPkukZ5jcXUilhhpxnr+3IvWyUJRWs+3nBs33EsuqBFw578zKE3uY6C
UrKtVwUPXFCeQbydbOCjnY80cWvn9FcuvUm+ForiKR7I048RH8jsgiOnfhS37qnp
OXvK3QzSU8gSo2/JKnB9ktCZxq6+5lm9g9p4/GHUFxKJrs4iiEeBG1enQEFzQaQV
a8eUiCvjRfS3XVqH4ZavyUo6GyUUyR47HvRoytkIYjecqPFoZZw4woL1xJlCGU4k
BFmfEYn2Ivu4PQ==
-----END CERTIFICATE-----
Generated at Fri Oct 30 04:56:20 2026 by rpki-client