Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
File: HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json)
Hash identifier: 7ryvBKREPYMwy8oIxLN+Hopa2j1GJKmYQ4wovwMTcyg=
Subject key identifier: 74:04:00:C7:64:A8:7D:3C:E4:8B:44:CD:7D:C0:51:5E:F2:50:1B:CF
Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
Certificate issuer: /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Certificate serial: 01A0DB044C9C365466B8625B52B2F9869274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
Manifest number: 15DF
Signing time: Sat 26 Sep 2026 00:01:26 +0000
Manifest this update: Sat 26 Sep 2026 00:01:26 +0000
Manifest next update: Sun 27 Sep 2026 00:01:26 +0000
Files and hashes: 1: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: qK3174N9gZ1UvFnGAuInFWsEvVpg81EPYAf4PYZw8fk=)
2: kMtugILpiPzEeW8OKVlItHoOS1w.roa (hash: lAQ2ZT9NHZiz0srqLkoDG7be21LY+uZcdjIbYN8bvbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:4c:9c:36:54:66:b8:62:5b:52:b2:f9:86:92:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Validity
Not Before: Sep 26 00:01:26 2026 GMT
Not After : Sep 27 00:01:26 2026 GMT
Subject: CN=740400c764a87d3ce48b44cd7dc0515ef2501bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:de:2a:df:18:ec:07:19:4e:4b:a7:a1:43:
f4:44:5c:7b:d1:4f:d9:e0:a4:d0:9d:06:7e:12:57:
6d:e1:5c:e0:f5:37:b0:83:a9:aa:70:4d:6b:82:52:
26:4b:9a:83:a3:f4:5e:53:d2:cc:2c:f4:7d:d8:ff:
75:e5:e0:38:ec:73:0c:29:cc:11:73:da:31:9a:1d:
8b:0a:e1:21:00:ba:dc:32:6d:d5:11:9c:31:2c:f1:
36:02:24:06:d8:8a:3a:86:d0:40:40:32:10:61:a7:
1d:c6:d9:4f:fd:ea:3f:d5:6c:e8:9c:8a:21:89:28:
69:82:06:37:61:a5:2f:12:db:0a:8d:c1:c3:b5:85:
5b:21:a2:7e:04:0b:f3:37:f6:6c:51:a4:f3:f4:2a:
f1:7a:f9:b4:16:52:84:0b:88:41:54:d6:78:0d:38:
f2:70:97:6e:6f:db:a4:0b:60:f8:53:51:26:1a:96:
07:38:df:73:f8:bf:4b:84:b8:13:3d:eb:f9:ea:04:
89:32:2b:0f:81:1d:f7:9f:cf:3f:04:e1:4d:52:18:
e8:64:9e:d0:00:31:91:25:98:61:64:c9:7f:16:d6:
d9:7a:ab:29:2f:54:64:1f:4d:70:8a:74:7c:16:e5:
6d:84:04:73:9e:90:e9:fa:55:64:c3:73:92:ea:f8:
df:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:04:00:C7:64:A8:7D:3C:E4:8B:44:CD:7D:C0:51:5E:F2:50:1B:CF
X509v3 Authority Key Identifier:
keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e1:60:d5:38:ff:df:57:a9:7d:81:29:4f:a1:75:c1:f1:da:
83:bf:14:e3:d1:d1:47:d4:f6:63:4b:3a:0c:d2:61:e9:df:41:
09:47:7e:26:6b:d4:68:93:64:a2:7a:cf:8b:ea:e4:e7:11:93:
7a:0e:b0:9c:3f:09:7e:85:22:91:44:84:d8:32:ca:8a:bf:8c:
56:52:ef:9e:e2:e6:1f:70:69:69:03:f2:50:a2:14:b0:82:38:
82:4d:f7:45:a4:3a:10:38:72:4c:0f:c4:2f:42:23:6d:f0:8f:
64:75:9e:9b:2b:e9:a2:a5:0a:c5:14:8e:20:65:c5:98:8f:23:
ff:7c:dc:6f:a3:38:1f:68:3f:08:4f:5f:1a:eb:99:70:47:73:
b4:36:1b:96:92:8c:2d:ef:01:dd:90:a0:2e:56:d5:a7:55:4e:
76:6c:52:06:f5:1f:c1:30:09:20:ef:be:6e:e0:18:f0:a7:7c:
b8:af:9f:4c:79:ab:e2:d9:58:e9:65:55:11:d4:b0:b9:b7:1a:
10:02:bc:5f:e2:15:e1:69:a5:fa:06:6d:74:d8:72:c3:95:c7:
e9:85:4d:e1:f0:f3:14:e3:39:df:63:60:aa:20:56:2b:af:ea:
f8:0d:8d:87:0e:32:fe:35:49:2a:86:53:cf:82:69:9e:cc:34:
f2:38:72:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:07:50 2026 by rpki-client