Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
File: HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json)
Hash identifier: HRxzQ0LNornf8xVvq1rb0vfxY2ZYpegEQHN3bZ/a/7s=
Subject key identifier: 11:41:D0:6D:0F:48:21:89:F8:D3:5C:59:3E:FF:A4:EE:76:FB:17:13
Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
Certificate issuer: /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Certificate serial: 019ED574D0F97AEC9591B1D3C17B678AC239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
Manifest number: 14D3
Signing time: Wed 17 Jun 2026 12:01:02 +0000
Manifest this update: Wed 17 Jun 2026 12:01:02 +0000
Manifest next update: Thu 18 Jun 2026 12:01:02 +0000
Files and hashes: 1: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: 7/ms0PNAEs5MSTMrJUjPKsF2Xrdb+tlR1PhUClJ2Cog=)
2: kMtugILpiPzEeW8OKVlItHoOS1w.roa (hash: lAQ2ZT9NHZiz0srqLkoDG7be21LY+uZcdjIbYN8bvbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:74:d0:f9:7a:ec:95:91:b1:d3:c1:7b:67:8a:c2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Validity
Not Before: Jun 17 12:01:02 2026 GMT
Not After : Jun 18 12:01:02 2026 GMT
Subject: CN=1141d06d0f482189f8d35c593effa4ee76fb1713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:62:07:f6:8a:c1:de:62:6a:a6:e2:e4:29:7a:
49:65:78:cd:15:27:fc:a0:81:27:43:b9:27:88:1d:
21:44:37:06:4f:96:45:ec:59:31:b3:06:03:af:39:
33:1c:01:d1:f1:6f:dc:83:b0:2b:97:50:a0:2f:fa:
e6:ca:d4:48:e1:35:f5:2d:d0:80:68:27:b6:8c:5c:
63:43:0e:1f:b7:c9:52:35:a3:a5:8a:41:fb:07:03:
58:33:90:5d:dc:4b:07:2f:a9:52:a1:12:3a:ce:ed:
eb:c2:f3:fa:41:13:9b:df:46:63:42:f3:2c:d3:6b:
fe:3c:21:46:26:4b:e0:23:59:3e:ea:d8:49:6c:bb:
1c:4f:6d:46:38:75:c5:ed:01:a9:ab:f5:f2:d3:93:
d2:9e:15:95:a5:8c:7a:a9:19:42:d7:bc:5b:50:6c:
ff:71:b6:dc:0b:4c:a6:1f:d6:a9:80:67:b7:f7:1f:
b4:d9:18:e7:81:33:5d:23:06:f7:d0:dd:1b:db:b5:
d6:e4:61:cc:cf:6d:93:90:8e:26:47:02:16:60:c5:
74:32:7c:99:bb:ee:14:81:83:5d:b1:25:98:e8:2f:
d7:86:28:29:54:b7:be:fb:bf:73:22:00:d1:8c:dc:
aa:81:e3:1b:48:73:2e:ff:36:99:67:f3:31:8e:6f:
de:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:41:D0:6D:0F:48:21:89:F8:D3:5C:59:3E:FF:A4:EE:76:FB:17:13
X509v3 Authority Key Identifier:
keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:60:e3:bf:75:93:3d:b6:ff:e7:4f:b2:de:e7:8c:fe:ce:ba:
dd:2c:45:d2:55:81:fa:43:67:a9:00:8c:6c:15:4b:37:d9:af:
42:eb:18:7c:46:cc:1e:8b:d6:be:d7:e2:af:f7:44:d2:a0:50:
4f:4d:bb:a4:f9:9d:3b:36:b0:c2:9a:3e:30:ed:fd:87:f4:87:
9d:b5:78:9f:da:80:04:b5:50:f6:4a:79:53:df:3c:d9:64:63:
f5:13:78:24:d7:3f:fe:d1:1a:5d:a6:89:c1:55:31:f7:8b:32:
69:ab:4a:1d:88:82:d4:b5:e0:f9:88:11:a0:92:34:86:f4:66:
95:67:17:5a:9c:56:bb:e7:76:ff:35:ad:96:2a:08:e0:e8:94:
31:45:d9:25:ca:a7:e7:40:6d:e2:b6:62:aa:80:b2:0a:88:c3:
44:cd:76:b6:aa:4a:31:2d:1c:82:01:61:ad:0b:21:11:b9:0d:
1c:b4:9e:d6:04:a5:01:00:27:d1:2a:3f:82:68:4d:d7:20:e1:
85:68:f2:5e:34:a4:3e:26:77:5e:4b:75:42:d6:a0:67:47:63:
78:60:79:f5:2a:db:c5:58:70:f6:bd:42:06:fb:6a:bb:b3:1c:
0e:dc:25:4f:9d:4d:34:a3:51:6f:26:3b:d9:43:9b:84:85:fb:
20:be:f6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 15:36:06 2026 by rpki-client