Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
File: HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json)
Hash identifier: LtWLBYN53MAqO9nR1nzrSyha1B0FXgIEb8lzqqGFvUI=
Subject key identifier: B0:4F:35:52:0D:76:2E:A0:C3:8A:59:38:3D:5C:6A:D5:F9:FD:94:AE
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 01A151E467FE670123AA85446DAC4FAEF3BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
Manifest number: 1AC1
Signing time: Mon 19 Oct 2026 02:01:25 +0000
Manifest this update: Mon 19 Oct 2026 02:01:25 +0000
Manifest next update: Tue 20 Oct 2026 02:01:25 +0000
Files and hashes: 1: 1-zqC4HhQSozydEfSsWMeVRvX4Ag.roa (hash: YCbMIIG2MrUDfBfXlLOUYihuI+nwLwGzroFonhJo9+c=)
2: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: eWRNJuWnGu6bCRuqPpp0aI7giFUjQxBfPyGmZISwsJA=)
3: eQBqd8VSQ_-EDmCXW9sFFYDeMQk.roa (hash: dEI6v24yV0EpcI35EHdwZC8mHRo0m2mxSHgvKT9A5+8=)
4: xZQQ0CvgvGISAk0eT_rFmazBHWc.roa (hash: 2uo51y4FTldRjelw7bQ2s6OQpSKwuYg+UN+zR4NJjsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:e4:67:fe:67:01:23:aa:85:44:6d:ac:4f:ae:f3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Oct 19 02:01:25 2026 GMT
Not After : Oct 20 02:01:25 2026 GMT
Subject: CN=b04f35520d762ea0c38a59383d5c6ad5f9fd94ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:a8:7b:83:99:41:a1:96:f5:46:c7:75:a1:
83:12:63:9d:70:fd:3a:e9:5b:59:30:3f:a3:f8:2d:
69:cd:30:f6:ac:f7:b5:e3:bb:5f:b5:e1:1e:cd:0f:
1e:a5:6d:f2:e6:1b:fc:f9:49:88:ae:42:64:f0:52:
43:0e:2c:90:3b:b1:32:8a:98:b0:37:94:4e:ee:f2:
fd:bd:42:f4:c9:8f:4d:f5:53:8f:73:0a:96:a8:1c:
a6:07:24:48:e1:dd:c4:9f:7e:5e:7c:39:0b:40:0b:
a6:a9:23:64:de:5b:6f:8a:bc:4f:b6:c5:53:51:50:
26:d2:9a:3c:ba:31:2e:76:d2:a1:21:16:5d:eb:9a:
62:6b:09:e1:b8:3d:04:af:46:40:b0:ae:c8:cc:97:
e5:b4:cf:73:81:c7:dd:02:3b:85:6f:fc:3f:53:9a:
8e:86:ee:00:e4:5b:93:f1:8d:a3:99:c9:62:02:0f:
f5:7d:8d:76:7e:c9:56:41:36:4a:7f:ed:92:5a:49:
e5:b6:3b:44:ff:c4:0d:47:c3:47:9c:3d:20:7e:36:
9e:70:1b:23:ea:87:db:e3:26:e1:68:58:9b:cd:97:
71:14:c9:2d:62:29:c6:58:21:0f:d3:0c:7b:d0:a3:
5f:a8:9f:1f:a1:02:a2:a7:c1:fe:68:32:d3:6e:0a:
06:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4F:35:52:0D:76:2E:A0:C3:8A:59:38:3D:5C:6A:D5:F9:FD:94:AE
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c1:d2:57:ae:be:59:ce:64:5f:91:3c:3c:b7:02:7a:78:28:
26:6b:01:c1:16:09:63:56:2f:91:6d:47:02:9b:54:b6:16:ef:
1a:eb:c7:1f:c9:9b:9d:1b:e7:30:95:8e:b3:af:5b:20:b2:c7:
79:25:d9:52:5b:83:fe:85:40:ef:30:ce:fb:9b:25:f5:a2:98:
15:f7:8d:2c:97:74:19:72:98:8d:3b:17:f3:50:fc:44:cc:d0:
77:dd:b7:e0:f3:00:b4:85:7b:ba:1b:17:75:7a:f3:2b:bd:7f:
b4:3d:d7:61:a5:13:c6:18:70:2d:14:cb:a2:ce:5b:c8:29:9a:
87:99:d5:04:15:ef:5b:92:fc:72:6b:69:d6:b5:fa:ee:88:6e:
24:80:78:27:c2:81:06:52:4d:e4:c8:91:d6:47:76:c9:f7:24:
63:70:4e:81:c3:3c:2b:bf:24:5b:93:21:af:c7:4e:92:a5:3f:
6d:e5:c4:f9:5d:3f:04:be:7c:34:48:0e:6f:38:79:6e:12:1f:
5b:a5:bb:85:b4:07:29:8a:50:3f:9b:55:fb:86:18:24:8e:db:
24:9c:90:d7:25:c3:5d:89:1d:95:82:29:ba:1b:37:9c:65:06:
d1:68:e2:8f:8b:c5:e9:39:ce:b8:7b:99:7c:76:8c:11:52:0f:
89:ce:c5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:38:29 2026 by rpki-client