Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
File: HQhx_C6ZiS6hEVowITjh0ypiGCw.mft (raw, json)
Hash identifier: hfMBIX9ttILFim+agVvPfhanrQdgFkNyq4hLgeBEsbI=
Subject key identifier: 25:36:B5:A9:7C:0F:12:43:83:3C:FA:88:B6:5E:F0:14:3F:D3:5F:F0
Authority key identifier: 1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
Certificate issuer: /CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Certificate serial: 019EF94BB29FEA2DCD28144D9CFD7B8D24B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
Manifest number: 197C
Signing time: Wed 24 Jun 2026 11:02:28 +0000
Manifest this update: Wed 24 Jun 2026 11:02:28 +0000
Manifest next update: Thu 25 Jun 2026 11:02:28 +0000
Files and hashes: 1: CWhgnMt-ss9B8-btHZoqc3CLkvE.roa (hash: E3kIV5fo174JAQ+/2CA5CLbdIf038voHzxoXiPQe6Z8=)
2: HQhx_C6ZiS6hEVowITjh0ypiGCw.crl (hash: vGqm1HAeIKNP4KNnJPuK1GYXrs0QeZu7iSWRSmipnDU=)
3: RS-DcQuebpqY8Culr_rM9_XKltU.roa (hash: D72/49kWrpo5EEjDXndBWXIkpecf2+TgHDpJLb07DlU=)
4: mgGVP9w-ya_7zv7yO1xWTM7sa_0.roa (hash: CNgDgTCH1ZO1+h/LC5uHK3Xji2RJx/Y7qygtDyi4V4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 11:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:4b:b2:9f:ea:2d:cd:28:14:4d:9c:fd:7b:8d:24:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Validity
Not Before: Jun 24 11:02:28 2026 GMT
Not After : Jun 25 11:02:28 2026 GMT
Subject: CN=2536b5a97c0f1243833cfa88b65ef0143fd35ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:28:a6:30:ad:28:9c:15:90:f2:89:2c:c7:3c:
ca:1f:70:2b:f1:47:61:cc:73:c1:23:88:c2:d0:89:
f9:4d:11:1c:c9:d1:c6:7c:d5:66:28:d0:fd:8f:56:
e7:97:b2:d6:c7:a9:f9:5e:30:8a:c8:f3:2e:ed:7b:
73:95:ec:8f:a1:69:cd:17:38:39:34:5e:df:55:20:
ea:7a:1c:70:26:85:b8:1d:27:10:72:73:34:2e:c5:
33:e4:cd:7a:21:f9:49:bd:3f:b4:de:e6:58:dd:0d:
0f:e7:4a:3d:2a:d4:dd:ab:73:37:2b:a3:96:bd:4d:
8d:bc:9c:81:cf:e8:a4:a3:2b:c9:17:d4:6a:38:a3:
d9:ed:56:cf:1a:5d:ac:57:0e:4d:8b:dc:21:27:df:
82:57:2c:e9:7c:78:a5:3f:5c:53:dc:00:74:f0:17:
d3:de:93:e1:9b:76:5a:06:e5:5d:37:0e:70:db:46:
c8:b8:38:8f:fa:5e:30:ac:73:01:4e:13:2d:1c:7d:
f6:b7:b0:78:d2:a5:42:a4:6e:02:5a:f5:e9:9c:89:
ca:b2:ee:ec:fe:01:68:f9:7e:1b:85:ce:2d:96:02:
81:40:c6:d2:c2:aa:4d:28:32:a3:30:87:6e:5d:59:
3c:9a:ea:6d:75:ea:6c:44:0b:30:cb:9b:14:12:55:
56:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:36:B5:A9:7C:0F:12:43:83:3C:FA:88:B6:5E:F0:14:3F:D3:5F:F0
X509v3 Authority Key Identifier:
keyid:1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3e:51:8e:7b:40:19:f2:74:52:d7:5c:5c:c3:70:97:24:b3:
e6:37:8c:56:aa:c8:bf:ba:3a:63:e8:45:ff:7d:3e:b6:1c:66:
be:16:52:d3:a0:09:33:b9:67:b7:3f:55:36:5b:df:78:e9:70:
03:40:47:5a:b7:bb:e7:69:33:6e:c3:b7:27:a9:37:dc:3f:a8:
a7:b1:af:9d:ec:97:67:04:ee:fd:d4:24:14:72:6b:f6:93:f6:
f5:8e:9c:d6:f2:2e:a2:55:65:28:c2:05:13:9f:59:10:e1:9e:
9c:84:b7:70:d6:da:5a:8c:3d:07:5a:44:44:ba:ef:d8:ce:81:
51:06:75:77:a6:f5:bb:bb:d1:52:bf:50:10:e0:15:64:09:af:
61:41:96:60:d7:03:aa:8e:59:b4:94:79:c7:db:e7:79:c1:d4:
36:71:17:7c:0b:d1:9e:2d:af:df:b8:7a:fc:03:9d:6c:fe:29:
b5:ca:d4:9c:ca:8f:cb:be:d0:79:73:11:1d:0d:99:b5:2b:bf:
ec:84:cb:05:3e:da:76:10:a5:fc:66:9e:bf:da:b6:5b:a5:27:
cd:cb:ce:5c:74:5e:27:87:20:60:72:8e:24:2c:1e:aa:21:52:
60:67:6c:fb:d3:55:d2:0b:47:0d:88:a6:2a:7c:34:65:17:18:
aa:27:3a:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ75S7Kf6i3NKBRNnP17jSS3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMDg3MWZjMmU5OTg5MmVhMTExNWEzMDIxMzhlMWQzMmE2
MjE4MmMwHhcNMjYwNjI0MTEwMjI4WhcNMjYwNjI1MTEwMjI4WjAzMTEwLwYDVQQD
EygyNTM2YjVhOTdjMGYxMjQzODMzY2ZhODhiNjVlZjAxNDNmZDM1ZmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SimMK0onBWQ8oksxzzKH3Ar8Udh
zHPBI4jC0In5TREcydHGfNVmKND9j1bnl7LWx6n5XjCKyPMu7XtzleyPoWnNFzg5
NF7fVSDqehxwJoW4HScQcnM0LsUz5M16IflJvT+03uZY3Q0P50o9KtTdq3M3K6OW
vU2NvJyBz+ikoyvJF9RqOKPZ7VbPGl2sVw5Ni9whJ9+CVyzpfHilP1xT3AB08BfT
3pPhm3ZaBuVdNw5w20bIuDiP+l4wrHMBThMtHH32t7B40qVCpG4CWvXpnInKsu7s
/gFo+X4bhc4tlgKBQMbSwqpNKDKjMIduXVk8muptdepsRAswy5sUElVW9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCU2tal8DxJDgzz6iLZe8BQ/01/wMB8GA1UdIwQY
MBaAFB0IcfwumYkuoRFaMCE44dMqYhgsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yMDUyNzUtMmNlZC00YTRlLWI5MDAt
NGYzZTViMmUwYzU2LzEvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8yMDUyNzUtMmNlZC00YTRlLWI5MDAtNGYzZTViMmUwYzU2
LzEvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMz5RjntA
GfJ0UtdcXMNwlySz5jeMVqrIv7o6Y+hF/30+thxmvhZS06AJM7lntz9VNlvfeOlw
A0BHWre752kzbsO3J6k33D+op7GvneyXZwTu/dQkFHJr9pP29Y6c1vIuolVlKMIF
E59ZEOGenIS3cNbaWow9B1pERLrv2M6BUQZ1d6b1u7vRUr9QEOAVZAmvYUGWYNcD
qo5ZtJR5x9vnecHUNnEXfAvRni2v37h6/AOdbP4ptcrUnMqPy77QeXMRHQ2ZtSu/
7ITLBT7adhCl/Gaev9q2W6UnzcvOXHReJ4cgYHKOJCweqiFSYGds+9NV0gtHDYim
Knw0ZRcYqic6Dg==
-----END CERTIFICATE-----
Generated at Wed Jun 24 21:18:27 2026 by rpki-client