Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
File: HqVZ2L9qwtho0GZa1X0sasFHIZM.mft (raw, json)
Hash identifier: k8SVOnkOGMUCYU3KSuiEuiZ0kkE9F1OFu9TCrtdHnow=
Subject key identifier: E1:FA:DD:83:31:EC:52:5A:01:21:4A:55:48:4B:44:82:29:F6:CA:A5
Authority key identifier: 1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
Certificate issuer: /CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Certificate serial: 01A08F0DC51824C16D33770750221A83DAC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
Manifest number: 19DB
Signing time: Fri 11 Sep 2026 06:00:39 +0000
Manifest this update: Fri 11 Sep 2026 06:00:39 +0000
Manifest next update: Sat 12 Sep 2026 06:00:39 +0000
Files and hashes: 1: HqVZ2L9qwtho0GZa1X0sasFHIZM.crl (hash: tRFHphGZna/WBkJa84zg8adMPtdJDier7uoj8FlYUgY=)
2: h2Pj0fup6PmGgboIXfm183EEF9c.roa (hash: eferMGwRa6YXz1Q8h3PiGClbC5vOEBn3msIVlW/jo08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:0d:c5:18:24:c1:6d:33:77:07:50:22:1a:83:da:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Validity
Not Before: Sep 11 06:00:39 2026 GMT
Not After : Sep 12 06:00:39 2026 GMT
Subject: CN=e1fadd8331ec525a01214a55484b448229f6caa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f0:96:eb:1a:31:ca:e6:1b:20:b4:1d:27:9d:
a5:7a:54:b9:29:ac:38:eb:29:52:d3:b5:ed:33:c8:
6d:7d:b0:a4:79:84:3d:e8:78:d8:bd:ee:ee:23:2f:
09:7a:52:ee:35:a3:76:f4:a4:de:85:02:d7:b9:2e:
09:d9:29:f2:76:84:22:f6:00:c0:21:07:2f:10:71:
bf:2e:03:2d:b6:f8:b5:d7:7b:4c:58:52:2b:02:b3:
e2:7e:56:6d:4d:f6:3f:55:de:44:b6:c1:87:db:30:
ec:13:c3:58:e3:8a:25:88:a0:db:50:ab:ce:6b:08:
02:8f:b9:c8:a1:ce:b8:de:5c:68:71:36:29:ff:a5:
d8:e6:15:30:82:82:12:64:68:54:de:e6:6a:66:bc:
dc:ae:8c:fc:a1:2c:aa:8b:6b:c9:bb:fe:54:c4:1f:
6d:ba:68:14:94:9d:23:19:9a:85:33:b4:9c:df:69:
3c:f2:30:e6:19:7f:eb:a2:6d:33:12:ad:69:46:7e:
4c:25:b0:c3:70:e0:fb:2f:00:fd:17:da:21:de:d0:
7f:dd:91:c1:6f:8f:f4:6a:f4:5f:ce:20:95:d1:9f:
51:7e:ce:08:cf:cc:c5:2e:09:67:97:94:a7:69:3d:
99:be:7e:8e:70:df:e5:7d:5f:b6:48:65:62:8c:be:
27:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FA:DD:83:31:EC:52:5A:01:21:4A:55:48:4B:44:82:29:F6:CA:A5
X509v3 Authority Key Identifier:
keyid:1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:28:91:5a:cb:1a:86:f2:f9:02:7d:eb:3e:18:0e:ea:47:c5:
e8:95:69:69:38:a0:41:24:63:5d:fa:eb:98:f1:12:9a:59:a7:
a9:3e:9a:b8:84:ad:f0:55:7e:7e:1f:16:39:63:c1:70:26:80:
86:0a:1d:1d:ba:bf:da:4b:93:b5:c3:0d:a1:6a:6e:64:4a:2c:
d7:1b:90:96:eb:9f:63:79:57:f2:c2:bd:bb:06:b1:72:56:4a:
6b:60:d7:12:cb:b1:9a:7d:a9:e5:8f:8f:b9:61:d1:13:88:3e:
57:a3:31:dd:20:74:31:17:ae:a1:d6:d6:7d:5d:34:b5:e4:44:
70:d9:06:ee:46:93:58:b7:b1:3c:67:c0:24:47:8d:69:f1:f2:
f2:39:ca:86:ef:9f:34:85:a4:6c:b5:38:42:9b:1d:23:d2:b7:
08:60:5e:cd:2f:94:d3:61:0e:4c:2d:a9:a2:34:df:75:be:3f:
f5:62:18:c6:c3:81:68:37:64:e9:27:4f:c9:2a:57:e2:33:2b:
3a:6b:0a:a0:0e:db:64:0c:2b:af:0d:15:24:51:99:af:2e:06:
77:4a:ab:c8:32:52:33:ab:de:e1:98:f3:70:31:9f:a9:86:81:
83:fa:20:a9:43:9a:d8:0d:c3:71:d9:bf:02:55:46:79:d1:17:
b7:c7:5b:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCPDcUYJMFtM3cHUCIag9rBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTU1OWQ4YmY2YWMyZDg2OGQwNjY1YWQ1N2QyYzZhYzE0
NzIxOTMwHhcNMjYwOTExMDYwMDM5WhcNMjYwOTEyMDYwMDM5WjAzMTEwLwYDVQQD
EyhlMWZhZGQ4MzMxZWM1MjVhMDEyMTRhNTU0ODRiNDQ4MjI5ZjZjYWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPCW6xoxyuYbILQdJ52lelS5Kaw4
6ylS07XtM8htfbCkeYQ96HjYve7uIy8JelLuNaN29KTehQLXuS4J2SnydoQi9gDA
IQcvEHG/LgMttvi113tMWFIrArPiflZtTfY/Vd5EtsGH2zDsE8NY44oliKDbUKvO
awgCj7nIoc643lxocTYp/6XY5hUwgoISZGhU3uZqZrzcroz8oSyqi2vJu/5UxB9t
umgUlJ0jGZqFM7Sc32k88jDmGX/rom0zEq1pRn5MJbDDcOD7LwD9F9oh3tB/3ZHB
b4/0avRfziCV0Z9Rfs4Iz8zFLglnl5SnaT2Zvn6OcN/lfV+2SGVijL4nqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOH63YMx7FJaASFKVUhLRIIp9sqlMB8GA1UdIwQY
MBaAFB6lWdi/asLYaNBmWtV9LGrBRyGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80ZmI3ODUtZmZmMS00M2EzLWFmZDEt
NWZmY2M0NmFlN2I1LzEvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80ZmI3ODUtZmZmMS00M2EzLWFmZDEtNWZmY2M0NmFlN2I1
LzEvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSiRWssa
hvL5An3rPhgO6kfF6JVpaTigQSRjXfrrmPESmlmnqT6auISt8FV+fh8WOWPBcCaA
hgodHbq/2kuTtcMNoWpuZEos1xuQluufY3lX8sK9uwaxclZKa2DXEsuxmn2p5Y+P
uWHRE4g+V6Mx3SB0MReuodbWfV00teREcNkG7kaTWLexPGfAJEeNafHy8jnKhu+f
NIWkbLU4QpsdI9K3CGBezS+U02EOTC2pojTfdb4/9WIYxsOBaDdk6SdPySpX4jMr
OmsKoA7bZAwrrw0VJFGZry4Gd0qryDJSM6ve4ZjzcDGfqYaBg/ogqUOa2A3Dcdm/
AlVGedEXt8dbMQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 10:37:57 2026 by rpki-client