Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
File: HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json)
Hash identifier: SoShZkINury1iTsf0O/TvioSDPiIe2R9DSXjDBbOZbQ=
Subject key identifier: A3:42:71:6A:14:79:8A:73:98:32:F5:97:6D:11:23:41:E7:C4:C1:48
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 019D389BCA0AAF71E80935DB7913781D1C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
Manifest number: 18A1
Signing time: Sun 29 Mar 2026 08:00:27 +0000
Manifest this update: Sun 29 Mar 2026 08:00:27 +0000
Manifest next update: Mon 30 Mar 2026 08:00:27 +0000
Files and hashes: 1: 1-zqC4HhQSozydEfSsWMeVRvX4Ag.roa (hash: YCbMIIG2MrUDfBfXlLOUYihuI+nwLwGzroFonhJo9+c=)
2: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: P0Vvhkx5PPW/PaLqtgHDLPETi+arMUF4F/urv+gQNcw=)
3: eQBqd8VSQ_-EDmCXW9sFFYDeMQk.roa (hash: dEI6v24yV0EpcI35EHdwZC8mHRo0m2mxSHgvKT9A5+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ca:0a:af:71:e8:09:35:db:79:13:78:1d:1c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Mar 29 08:00:27 2026 GMT
Not After : Mar 30 08:00:27 2026 GMT
Subject: CN=a342716a14798a739832f5976d112341e7c4c148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:95:37:48:5e:44:4a:01:79:86:0a:17:77:aa:
d8:13:15:b0:dc:d9:cb:76:23:9d:98:ca:68:73:2b:
0f:7d:3b:ac:15:1a:a6:7d:00:ee:b2:5a:1b:d6:cb:
0b:10:6b:83:10:fb:e0:8d:04:3d:5a:de:18:96:c0:
94:6e:10:1e:3d:a0:82:4a:f7:41:17:03:13:07:83:
d4:53:2c:33:3b:50:d2:02:26:46:7b:11:45:37:a6:
fe:6c:ea:dd:33:f4:ee:60:f9:a0:9f:f7:6c:14:9e:
0e:1f:f0:9f:49:77:59:db:56:34:76:83:7d:4d:9a:
5f:24:33:dc:58:09:d6:4b:6d:13:ab:aa:b3:63:88:
c4:dd:cd:55:82:04:37:22:d0:95:56:a3:8c:e7:84:
96:6f:c6:85:28:ed:e6:0d:14:72:39:cd:e8:d7:aa:
d8:00:03:0d:48:b6:21:45:f5:a6:e5:97:3f:23:90:
9f:b3:f7:03:22:2e:38:9c:1e:c5:1b:58:e5:ce:5f:
85:99:ab:d8:ad:da:b4:2d:f4:81:92:16:91:20:64:
60:16:34:c5:3b:a9:4f:90:03:15:f8:75:ac:54:f1:
7a:fc:83:e7:5b:3b:9b:1a:77:be:98:06:f7:7b:f9:
33:c3:95:25:72:c6:82:42:04:27:5a:8d:2c:79:c9:
07:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:42:71:6A:14:79:8A:73:98:32:F5:97:6D:11:23:41:E7:C4:C1:48
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:eb:95:61:8d:4f:3e:d5:11:8d:39:f6:95:75:cf:e5:44:4e:
79:7e:7e:c6:4a:ce:91:a6:80:84:49:ed:c1:fc:0a:8c:35:36:
53:dd:34:86:b7:7f:b4:b1:3f:60:b9:db:36:a8:ce:a8:73:bf:
c3:b3:91:15:32:44:cc:eb:10:c1:2c:7e:66:5f:03:ed:02:59:
49:af:9d:95:b4:e8:06:ce:11:a3:1c:4f:0d:a7:a7:0f:22:68:
98:25:f7:f4:30:e8:b3:c2:88:dc:cf:d0:59:75:05:19:e9:88:
5b:1a:a2:ac:cf:57:85:da:de:46:9e:08:2a:08:10:fc:ea:ca:
aa:64:27:66:e9:26:bb:e1:82:88:b0:4b:16:d5:83:45:24:f0:
f6:3b:ca:db:b0:75:b5:50:a3:8a:42:1f:e1:cb:b5:67:d2:07:
79:02:10:ab:58:65:d4:f8:4c:ac:9c:dd:17:f2:1d:50:2f:7d:
02:6a:7e:32:fd:ff:d7:40:47:6c:51:26:25:fe:6e:7b:05:1d:
64:6e:b2:22:14:fb:fe:b9:7f:db:af:81:c8:d7:ac:64:ba:b7:
55:d3:17:bf:89:13:63:6c:71:b1:59:8d:d5:78:f0:b6:28:01:
f8:07:f5:55:58:df:52:52:d8:de:03:06:9e:02:59:d5:3f:9f:
ec:3d:b2:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m8oKr3HoCTXbeRN4HRxyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMGM3ZTdiYjI3YzUzM2E5OTdkMjc3Y2FkZDQxN2VjN2Jk
Mjg0ZjAwHhcNMjYwMzI5MDgwMDI3WhcNMjYwMzMwMDgwMDI3WjAzMTEwLwYDVQQD
EyhhMzQyNzE2YTE0Nzk4YTczOTgzMmY1OTc2ZDExMjM0MWU3YzRjMTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35U3SF5ESgF5hgoXd6rYExWw3NnL
diOdmMpocysPfTusFRqmfQDuslob1ssLEGuDEPvgjQQ9Wt4YlsCUbhAePaCCSvdB
FwMTB4PUUywzO1DSAiZGexFFN6b+bOrdM/TuYPmgn/dsFJ4OH/CfSXdZ21Y0doN9
TZpfJDPcWAnWS20Tq6qzY4jE3c1VggQ3ItCVVqOM54SWb8aFKO3mDRRyOc3o16rY
AAMNSLYhRfWm5Zc/I5Cfs/cDIi44nB7FG1jlzl+FmavYrdq0LfSBkhaRIGRgFjTF
O6lPkAMV+HWsVPF6/IPnWzubGne+mAb3e/kzw5UlcsaCQgQnWo0seckHowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNCcWoUeYpzmDL1l20RI0HnxMFIMB8GA1UdIwQY
MBaAFB0MfnuyfFM6mX0nfK3UF+x70oTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9kZGQzNDktYWM1MC00M2U1LWE4OGEt
YjI4ZjA3YjJmNDViLzEvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9kZGQzNDktYWM1MC00M2U1LWE4OGEtYjI4ZjA3YjJmNDVi
LzEvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0OuVYY1P
PtURjTn2lXXP5UROeX5+xkrOkaaAhEntwfwKjDU2U900hrd/tLE/YLnbNqjOqHO/
w7ORFTJEzOsQwSx+Zl8D7QJZSa+dlbToBs4RoxxPDaenDyJomCX39DDos8KI3M/Q
WXUFGemIWxqirM9XhdreRp4IKggQ/OrKqmQnZukmu+GCiLBLFtWDRSTw9jvK27B1
tVCjikIf4cu1Z9IHeQIQq1hl1PhMrJzdF/IdUC99Amp+Mv3/10BHbFEmJf5uewUd
ZG6yIhT7/rl/26+ByNesZLq3VdMXv4kTY2xxsVmN1XjwtigB+Af1VVjfUlLY3gMG
ngJZ1T+f7D2ysg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:39 2026 by rpki-client