Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
File: HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft (raw, json)
Hash identifier: F70loiHwlxi0XBgKDavg+LZ1cin4M3cPIKohC5zLheA=
Subject key identifier: D8:D5:03:D9:41:5D:3F:F3:62:C6:F2:D0:44:32:A3:CE:06:30:10:80
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial: 01A08C0D36887C085944078CA3BC9E1E08BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
Manifest number: 19BB
Signing time: Thu 10 Sep 2026 16:01:11 +0000
Manifest this update: Thu 10 Sep 2026 16:01:11 +0000
Manifest next update: Fri 11 Sep 2026 16:01:11 +0000
Files and hashes: 1: HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl (hash: J5Mci6tGhMsl/XskHTaRtHuC5jsWTdbNgmpRmQt0agk=)
2: W_mPbXQdWoE3DWEm89aYtTyvXdM.roa (hash: Cuy5C/uLsNnCjQnpl1ezzAhceftWpl5e4uiEK2a9oas=)
3: kohaMOAFUb9m1qAoziqxSlDrzkI.roa (hash: zLdUfaZkNbzAb9CiXssBadeUcauoRp2vZNfyu16dqgA=)
4: oOubWaz2meS0_8Fp_zkutkVpQhY.roa (hash: pSmKXeOqsuxy538KjTVMIn4xkuzCLTfsM1rAsvfnG68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:36:88:7c:08:59:44:07:8c:a3:bc:9e:1e:08:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Validity
Not Before: Sep 10 16:01:11 2026 GMT
Not After : Sep 11 16:01:11 2026 GMT
Subject: CN=d8d503d9415d3ff362c6f2d04432a3ce06301080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:dd:d5:cf:fc:d1:67:cd:71:12:b5:61:18:
07:ca:04:bc:b2:f5:cb:71:25:1d:84:b9:47:29:ce:
0d:1e:19:43:38:bf:29:e5:5d:36:cd:de:0f:3f:d0:
b3:54:00:88:a4:df:07:f2:fd:b5:c5:2a:7a:a8:dc:
34:d8:35:59:e3:64:15:b8:70:e5:ef:e0:20:d3:7a:
e4:c7:09:19:82:5e:49:2b:39:a4:86:ae:88:d5:3d:
59:0b:5b:75:51:ef:33:9c:78:7f:16:7a:8f:53:b9:
0a:8e:48:e1:9c:ce:52:10:7b:50:c6:91:e7:b5:77:
c5:dd:0a:48:72:16:fe:a2:46:a6:9b:3e:3d:71:c2:
fd:2f:70:34:cf:23:3c:1c:6f:8a:6d:1b:6d:3e:0f:
ad:54:b5:f9:7f:98:ad:82:d3:ab:63:72:f3:e1:62:
ac:1b:31:a7:5e:25:b1:64:da:f1:ba:f9:20:5c:0f:
a7:d0:9c:fb:65:a8:28:46:d7:d6:18:67:9c:64:1d:
73:c7:df:f7:a7:03:b0:2e:82:2b:e4:fd:fa:35:cb:
9f:8c:ce:c5:6c:7f:dc:23:f9:25:44:0d:61:85:cc:
a7:66:42:fc:03:da:94:c1:5c:4c:8c:4f:2a:43:2f:
b5:dc:35:ac:90:f7:a4:13:18:53:bd:f7:61:fc:b4:
4e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D5:03:D9:41:5D:3F:F3:62:C6:F2:D0:44:32:A3:CE:06:30:10:80
X509v3 Authority Key Identifier:
keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:33:c6:35:68:f7:ab:ae:8d:8e:09:bb:45:a3:ba:2e:c9:20:
55:a0:6a:6b:50:8f:09:40:72:7a:a0:8e:22:74:6e:ce:ec:5a:
49:4f:e3:ea:8a:17:f8:fc:db:3f:89:3f:2b:ca:36:0c:d5:61:
0b:97:0a:71:38:fc:c3:db:ff:ee:34:a6:99:c8:c3:14:f1:72:
fb:23:e7:ae:94:03:b6:df:e9:87:7b:52:c1:40:ac:1f:59:20:
5e:bc:04:5a:24:4e:5d:88:29:ff:de:cc:f5:c7:f0:e2:e4:8f:
7d:4a:f0:0f:22:75:2d:63:0a:f2:6f:3f:ba:bb:e9:9d:a9:96:
9d:48:1b:b5:17:ef:c1:51:a8:df:ae:95:72:b5:3c:f6:b8:d0:
0b:9f:45:e2:78:d2:2d:b4:8d:97:e5:66:8e:4d:63:58:9e:24:
5c:53:05:75:5a:f2:3f:c1:d8:ee:42:78:84:11:e5:62:d2:57:
db:02:02:7f:26:19:81:1a:b3:c4:8d:34:07:bb:78:75:38:2a:
67:dc:e5:be:91:6d:7e:29:67:fd:fa:ab:78:c7:aa:7f:64:4f:
db:63:06:6d:91:b2:a9:f8:cf:45:63:0e:4a:42:5d:9b:5b:57:
23:7e:13:cb:56:e5:04:77:d8:b1:1d:77:cc:87:bd:39:80:2e:
4f:88:c3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:15:37 2026 by rpki-client