Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
File: HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json)
Hash identifier: doJv1tz834nWcTtuX33sQNp+yBJvVD4yE/E+3J6EwKE=
Subject key identifier: A8:29:ED:D1:C8:F6:C3:F9:5E:B9:F8:B4:52:40:DE:28:31:6E:E1:B9
Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
Certificate issuer: /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Certificate serial: 019D98BD9D066C7E2FD51C7303B8D287072C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
Manifest number: 142F
Signing time: Fri 17 Apr 2026 00:00:56 +0000
Manifest this update: Fri 17 Apr 2026 00:00:56 +0000
Manifest next update: Sat 18 Apr 2026 00:00:56 +0000
Files and hashes: 1: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: 6Guu3r/YnSz+EuzNaKTEG53ht3QoNM2OL6hKYoO7Gfs=)
2: kMtugILpiPzEeW8OKVlItHoOS1w.roa (hash: lAQ2ZT9NHZiz0srqLkoDG7be21LY+uZcdjIbYN8bvbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:9d:06:6c:7e:2f:d5:1c:73:03:b8:d2:87:07:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Validity
Not Before: Apr 17 00:00:56 2026 GMT
Not After : Apr 18 00:00:56 2026 GMT
Subject: CN=a829edd1c8f6c3f95eb9f8b45240de28316ee1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:38:d5:2d:a5:a8:2a:ff:cd:00:cf:c3:10:a6:
d9:ae:1d:b8:6d:07:8d:c7:ea:95:50:ae:b2:27:5b:
16:86:11:33:cb:5e:af:84:2c:c0:f0:f0:25:0f:ff:
23:e6:92:80:83:28:86:d5:dc:90:e4:16:84:f4:f9:
1c:bc:24:e5:44:82:46:8b:a0:8c:8f:59:17:b0:16:
16:cd:28:5b:7c:d0:2f:bb:fb:56:2c:00:30:c4:da:
d1:c0:07:85:5b:60:31:93:40:8f:86:ba:96:45:26:
e9:c1:c4:0d:14:a5:f4:f4:bb:0e:7f:69:32:dd:00:
8d:a6:88:e0:34:25:26:0d:da:cc:6e:b7:23:71:42:
14:df:b5:b6:f6:45:bd:9a:eb:33:8a:c8:0e:7d:b3:
2f:09:3c:26:f1:e9:29:c7:05:c6:ba:6e:48:a5:45:
9c:15:32:45:16:39:1c:54:77:b0:a8:10:dc:e3:3d:
db:74:84:63:30:0c:42:fd:d8:c9:ef:8b:bb:c2:65:
b3:62:a3:9b:e7:ef:a3:78:79:29:72:fa:4a:fb:93:
63:6b:d5:5d:38:3c:06:65:08:86:7c:e3:30:38:4f:
34:fb:c9:5e:15:de:06:11:80:da:1d:6e:9b:e7:9b:
76:2f:56:69:52:87:a0:ab:4e:0c:a3:07:d4:65:da:
c0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:29:ED:D1:C8:F6:C3:F9:5E:B9:F8:B4:52:40:DE:28:31:6E:E1:B9
X509v3 Authority Key Identifier:
keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f6:60:80:9b:e4:ad:48:93:e4:d5:bb:99:53:6e:79:09:93:
09:d0:e9:a5:01:29:df:27:67:72:b2:39:46:58:3f:f8:28:eb:
71:07:ae:a8:a4:94:ae:5d:82:04:cf:bd:dd:1e:3b:f1:96:ef:
52:6f:25:ec:8b:22:44:35:6d:2e:c1:78:20:2b:0c:79:41:d0:
3b:54:29:7b:49:cf:42:5e:14:95:21:c1:c5:f9:55:6b:4d:97:
b6:93:82:86:e3:58:30:87:9a:93:90:e8:89:33:af:a6:37:db:
f4:54:10:be:23:0f:96:cc:ac:33:88:d0:e8:51:b5:a5:77:62:
9c:fa:66:b4:e3:34:01:85:47:79:a1:61:fe:26:df:79:8f:00:
a7:8b:a4:5a:a2:ec:48:34:b5:0f:4e:4a:fb:dc:51:ab:89:24:
6b:fe:bf:84:18:dd:fc:67:2b:59:68:e3:dd:6f:3a:5a:04:3f:
6c:27:68:71:21:a7:fb:e2:56:b7:9e:42:fa:3c:31:a2:60:c5:
54:85:55:fd:90:69:4a:6f:7c:2a:d4:bc:9e:1e:ee:56:76:42:
10:50:fe:72:68:54:8f:64:c0:c5:d5:73:6d:d2:18:4d:07:61:
1a:67:5c:72:cd:30:35:79:02:4c:8e:5a:23:ff:df:3e:24:4b:
86:50:74:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:18 2026 by rpki-client