Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
File: HqVZ2L9qwtho0GZa1X0sasFHIZM.mft (raw, json)
Hash identifier: fEsK9CjZwvgTfcCHULK2gSxj4jxb3rp9Ercn4BOIDeM=
Subject key identifier: 13:4E:F7:38:15:B7:D3:F3:12:4D:1C:F8:E4:AE:54:26:15:9C:03:05
Authority key identifier: 1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
Certificate issuer: /CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Certificate serial: 019FA372C33542C634879C551225F3D7B7F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
Manifest number: 1961
Signing time: Mon 27 Jul 2026 12:00:35 +0000
Manifest this update: Mon 27 Jul 2026 12:00:35 +0000
Manifest next update: Tue 28 Jul 2026 12:00:35 +0000
Files and hashes: 1: HqVZ2L9qwtho0GZa1X0sasFHIZM.crl (hash: PlHOLUkfpSrsRjluPeWpBlD8gBMx3uYLBUz2nbscEUg=)
2: h2Pj0fup6PmGgboIXfm183EEF9c.roa (hash: eferMGwRa6YXz1Q8h3PiGClbC5vOEBn3msIVlW/jo08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:72:c3:35:42:c6:34:87:9c:55:12:25:f3:d7:b7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Validity
Not Before: Jul 27 12:00:35 2026 GMT
Not After : Jul 28 12:00:35 2026 GMT
Subject: CN=134ef73815b7d3f3124d1cf8e4ae5426159c0305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:0d:5c:0f:4e:fc:ad:e7:1c:a9:a2:b7:24:c5:
6a:0e:68:1b:1e:7f:68:0c:56:4c:9a:1a:10:40:99:
f5:c1:e6:4c:46:8c:d5:2b:6a:5e:e4:6d:b0:b7:2d:
d3:c9:98:3e:b2:a7:09:1c:3f:c0:0e:78:4e:35:4d:
85:5a:6a:69:91:77:2f:cd:98:b2:08:66:42:87:68:
23:64:43:f9:c9:e1:2b:70:ef:70:b5:53:c9:37:63:
32:60:3b:36:e8:c0:8d:ec:16:e6:0b:53:de:ae:81:
13:a3:22:a1:ae:5a:d0:f1:14:fd:7f:a0:79:d5:58:
f0:08:04:49:fb:b4:04:91:db:db:4e:2c:71:0a:80:
21:9e:e5:5a:ab:44:67:88:34:48:81:1d:c6:38:55:
a6:73:8f:c2:ba:74:e0:8a:d9:4b:20:e4:5c:de:50:
3f:b0:c8:85:4b:a7:f7:9b:b6:cf:de:8b:be:c4:27:
5a:ee:a3:4c:25:94:04:76:f6:25:59:0d:63:bf:15:
35:ef:5c:bb:33:b3:b5:d5:17:ef:01:9f:5f:f6:34:
34:1d:6a:48:67:f5:10:d1:5c:fa:d9:1f:61:3c:ba:
4b:14:04:ab:54:d5:ff:4b:e9:28:04:44:b6:7f:58:
b5:73:b5:d3:2f:a7:f7:93:85:62:92:6c:d9:15:b7:
67:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4E:F7:38:15:B7:D3:F3:12:4D:1C:F8:E4:AE:54:26:15:9C:03:05
X509v3 Authority Key Identifier:
keyid:1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e7:9b:c4:e0:67:62:b4:75:01:8f:6f:f6:5b:f4:6d:d0:04:
e8:e9:dd:80:e3:9d:95:7e:c4:6f:b5:b4:76:e4:38:46:af:a8:
f9:6d:9f:9b:34:50:b5:87:27:1d:1d:82:61:03:5f:b1:6f:84:
aa:5f:fc:14:52:69:de:a9:18:43:38:6c:51:b7:4c:18:67:1d:
90:c3:05:e0:cc:87:d7:48:e1:53:27:e2:0a:8c:6b:b1:7a:e0:
d0:93:44:5e:89:f8:62:c4:f0:3a:c7:96:78:dc:fd:cc:a8:da:
10:d4:38:31:fc:e8:40:c2:ad:ad:0a:2e:6a:27:87:02:70:4b:
a7:69:22:f7:53:87:88:29:62:09:9a:b3:3f:26:fe:fd:c2:1f:
c8:c6:4b:ca:83:fb:06:9b:24:ba:87:36:32:3b:74:09:e7:48:
06:4d:b2:52:a1:1e:27:68:33:ce:8e:8f:57:15:b6:38:94:0d:
93:c9:af:4b:31:59:03:64:71:8e:b4:d8:7d:a6:95:0c:73:05:
c8:7c:bf:0c:2f:7e:9d:03:17:18:92:80:00:88:93:25:13:b7:
0b:8d:fd:e1:d4:bd:75:85:e5:60:9d:01:9e:73:5e:5b:0d:65:
8c:c8:03:86:93:5d:3c:fd:eb:84:1b:71:da:e2:25:41:de:df:
97:65:0c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:57:34 2026 by rpki-client