Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
File: HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft (raw, json)
Hash identifier: wXxuEXC5PdHstTKsTStJA9XITRQHmtpjgVIS2/8e/j0=
Subject key identifier: 36:2B:0C:0D:F2:D0:28:E3:0B:65:44:47:F9:40:A9:B0:85:6B:F7:A9
Authority key identifier: 1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE
Certificate issuer: /CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
Certificate serial: 019FA1F2840BC046EC2DF48E6F2CB08A4B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
Manifest number: 02A3
Signing time: Mon 27 Jul 2026 05:00:53 +0000
Manifest this update: Mon 27 Jul 2026 05:00:53 +0000
Manifest next update: Tue 28 Jul 2026 05:00:53 +0000
Files and hashes: 1: HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl (hash: x9tM9h6Wazr/FrQDbi0m+vW6DfHq9979eOdKLtj2r8U=)
2: X01IfSkC0_7ntZbrUIkZ_L-D4vE.asa (hash: aZEncQf/BAdEF1bttJTpzCCc9CG56JQeD1jy67NOedw=)
3: alFC4352ujfylmeJv44dIFDrX8I.roa (hash: EyvWXf/Mudgwkv08n9JwLU88K529FLdo5Jy2xLKZhDY=)
4: qYc1GDRHdMKB8iddli8zkMN3RVY.roa (hash: Raz+vndSPY3IPBLJicVFRGraRf1O/aOAmmwEA/V9D9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:84:0b:c0:46:ec:2d:f4:8e:6f:2c:b0:8a:4b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
Validity
Not Before: Jul 27 05:00:53 2026 GMT
Not After : Jul 28 05:00:53 2026 GMT
Subject: CN=362b0c0df2d028e30b654447f940a9b0856bf7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f3:65:50:61:e8:0b:76:e2:13:27:30:5f:27:
d4:d6:26:17:ff:53:ae:04:44:4d:a6:5d:35:94:64:
04:78:83:03:a5:73:d1:fa:94:61:45:c2:a1:6b:7f:
4d:d1:78:ea:b5:b4:23:a0:ac:df:00:63:33:dc:3a:
fd:25:6c:6c:71:8f:69:aa:aa:5d:49:07:12:99:5c:
63:3f:4e:32:3b:fa:65:17:5b:c0:44:be:91:0b:f8:
be:ce:77:13:06:80:c2:df:4a:77:c0:c1:3f:55:79:
33:7c:8c:d0:d6:d4:0b:ff:e6:80:0f:ce:c4:f2:b8:
11:fc:54:4b:4f:b2:b7:8b:1d:30:01:5a:ad:f0:97:
a1:50:90:2f:77:be:84:43:a4:95:bb:30:65:5a:39:
62:7b:f8:18:8d:2d:56:14:0b:85:d5:e2:3f:38:5d:
43:8f:f5:8c:34:d3:b6:19:5d:5f:47:92:4c:9e:4f:
fc:f1:63:2f:dd:87:6f:77:76:56:26:5e:b3:b8:b7:
43:e6:55:39:65:e5:6e:37:86:da:f4:b1:db:a3:e6:
f5:3a:e0:2f:73:7e:0d:1b:91:8e:05:71:21:d6:c3:
c4:8c:a8:14:3e:76:d3:eb:74:8d:9b:a2:3f:3d:1d:
4a:62:00:bf:9b:0c:63:9b:50:47:6d:b6:71:50:4e:
d2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2B:0C:0D:F2:D0:28:E3:0B:65:44:47:F9:40:A9:B0:85:6B:F7:A9
X509v3 Authority Key Identifier:
keyid:1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d0:ec:49:e9:1f:e9:63:52:4c:e9:7a:fc:66:5d:46:56:c3:
b9:d2:7d:a3:41:6a:a9:0c:0a:21:4e:5c:32:ca:6f:e3:1c:5b:
f2:c9:72:f8:5e:f3:b5:01:05:17:70:9e:48:fe:43:eb:75:04:
c4:99:50:c9:cb:1e:6a:51:bc:21:46:f1:e0:ae:a1:8a:56:20:
60:fa:10:91:35:f3:c2:9f:f6:df:f6:35:c6:8f:95:ad:59:bf:
dd:5a:04:2b:6f:22:f6:c4:05:7c:b2:f6:61:ea:d5:89:33:77:
60:18:d7:20:2f:c7:b7:88:4d:64:11:9e:76:1a:32:92:af:f9:
ec:60:62:cf:cc:61:31:58:02:4f:5b:8e:70:e2:96:37:7d:ec:
f1:17:b0:d9:a2:e1:4b:a6:08:54:11:13:8c:21:b0:e0:dc:77:
dc:7f:62:d2:bb:f1:97:c9:44:5a:9c:de:6d:c4:95:de:23:b0:
41:d1:45:50:06:0f:b9:84:d1:cc:83:8c:ea:e6:13:b7:9f:b2:
d9:46:ac:f2:bf:29:f4:70:28:4d:08:42:eb:f6:b8:90:33:f1:
a2:e9:15:86:b6:b8:2e:1c:21:89:f4:0f:78:12:d2:5d:72:78:
4b:e6:cf:c0:44:86:a5:a8:a4:f2:df:2f:f7:f3:d9:80:c8:17:
01:32:fa:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+h8oQLwEbsLfSObyywikuTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMDRhZjI4ZjhmN2FhODU4ZTI3ZDhlMmM3NjExNGM2ZmY0
OWJhY2UwHhcNMjYwNzI3MDUwMDUzWhcNMjYwNzI4MDUwMDUzWjAzMTEwLwYDVQQD
EygzNjJiMGMwZGYyZDAyOGUzMGI2NTQ0NDdmOTQwYTliMDg1NmJmN2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfNlUGHoC3biEycwXyfU1iYX/1Ou
BERNpl01lGQEeIMDpXPR+pRhRcKha39N0XjqtbQjoKzfAGMz3Dr9JWxscY9pqqpd
SQcSmVxjP04yO/plF1vARL6RC/i+zncTBoDC30p3wME/VXkzfIzQ1tQL/+aAD87E
8rgR/FRLT7K3ix0wAVqt8JehUJAvd76EQ6SVuzBlWjlie/gYjS1WFAuF1eI/OF1D
j/WMNNO2GV1fR5JMnk/88WMv3Ydvd3ZWJl6zuLdD5lU5ZeVuN4ba9LHbo+b1OuAv
c34NG5GOBXEh1sPEjKgUPnbT63SNm6I/PR1KYgC/mwxjm1BHbbZxUE7SAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYrDA3y0CjjC2VER/lAqbCFa/epMB8GA1UdIwQY
MBaAFB0Eryj496qFjifY4sdhFMb/SbrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFTdktQajNxb1dPSjlqaXgyRVV4djlKdXM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hNmQ0MDAtOGM0My00NGNjLTkzNTUt
NzBiNGUwYjNmYzllLzEvSFFTdktQajNxb1dPSjlqaXgyRVV4djlKdXM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hNmQ0MDAtOGM0My00NGNjLTkzNTUtNzBiNGUwYjNmYzll
LzEvSFFTdktQajNxb1dPSjlqaXgyRVV4djlKdXM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtDsSekf
6WNSTOl6/GZdRlbDudJ9o0FqqQwKIU5cMspv4xxb8sly+F7ztQEFF3CeSP5D63UE
xJlQycsealG8IUbx4K6hilYgYPoQkTXzwp/23/Y1xo+VrVm/3VoEK28i9sQFfLL2
YerViTN3YBjXIC/Ht4hNZBGedhoykq/57GBiz8xhMVgCT1uOcOKWN33s8Rew2aLh
S6YIVBETjCGw4Nx33H9i0rvxl8lEWpzebcSV3iOwQdFFUAYPuYTRzIOM6uYTt5+y
2Uas8r8p9HAoTQhC6/a4kDPxoukVhra4LhwhifQPeBLSXXJ4S+bPwESGpaik8t8v
9/PZgMgXATL6Vg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 12:45:15 2026 by rpki-client