Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
File: HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json)
Hash identifier: ni/lDmHoGKZo0C7gRs0O4y52Dh3sICOat+NUudxCnH4=
Subject key identifier: 7E:4E:C8:8D:43:7D:3E:82:FA:5B:15:F8:AD:D0:25:E1:8E:13:C3:F3
Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
Certificate issuer: /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Certificate serial: 019CAAC71E164F1B2B080308B3C3E2AB5691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
Manifest number: 13B3
Signing time: Sun 01 Mar 2026 19:01:41 +0000
Manifest this update: Sun 01 Mar 2026 19:01:41 +0000
Manifest next update: Mon 02 Mar 2026 19:01:41 +0000
Files and hashes: 1: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: 1EwUfasUtc65GTJy6Qj+NygbdANMc+2bNyn2FKXDaZ0=)
2: c-F2WweblFyg_d0Om77N1Fz0NhA.roa (hash: mryNxcdYvyAitDSF01ejR87XOcQtMw80tZRZ9uD4xtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:1e:16:4f:1b:2b:08:03:08:b3:c3:e2:ab:56:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Validity
Not Before: Mar 1 19:01:41 2026 GMT
Not After : Mar 2 19:01:41 2026 GMT
Subject: CN=7e4ec88d437d3e82fa5b15f8add025e18e13c3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:06:06:91:c3:73:3e:22:cf:e6:80:ad:7b:
40:61:fd:b9:2d:24:73:b2:0b:bc:70:49:1e:17:50:
28:cd:30:c5:8d:b3:55:3c:9f:c1:90:d6:54:ee:f9:
98:80:0f:79:10:8b:fe:56:38:72:ed:ab:a0:a3:04:
c8:ef:13:9b:fb:87:7d:fa:1c:e4:2c:3c:b8:91:ff:
5e:0c:a0:b9:e0:45:16:ca:bc:05:a5:bf:fe:45:e4:
b3:db:d4:a1:be:0f:46:6a:99:d7:41:db:99:bd:a2:
d8:c1:c0:8c:92:6c:e6:e4:42:68:21:a3:52:a8:0c:
6d:ae:8c:8e:33:f6:ee:cc:5f:35:bf:d1:e9:be:7d:
59:8c:1d:8f:53:c4:21:40:42:e5:ba:7a:36:84:c2:
b0:29:0c:81:3e:4b:b0:04:0d:f8:7b:de:d3:31:1b:
bb:2d:27:cc:fe:b3:90:ec:55:ad:d0:1f:fd:5b:c0:
e8:f6:f8:07:a1:b2:15:7c:3c:60:d3:aa:e1:8f:fe:
92:9a:2a:90:10:54:0b:29:8a:a7:f0:e8:86:91:de:
27:28:73:f9:35:35:1e:05:f8:43:b1:1d:df:f0:b4:
ec:59:d2:22:f8:dd:e9:14:ad:6f:38:fa:c5:60:07:
15:57:cf:61:8f:29:aa:01:7f:02:3b:da:74:2e:b4:
74:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4E:C8:8D:43:7D:3E:82:FA:5B:15:F8:AD:D0:25:E1:8E:13:C3:F3
X509v3 Authority Key Identifier:
keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8b:4e:5c:8d:3d:79:4e:46:07:55:46:d0:63:b5:76:27:f2:
43:9d:dd:82:1b:26:7c:85:28:ac:55:76:17:72:0d:23:8f:61:
38:21:21:a2:97:06:86:88:98:5f:a0:89:9b:1a:2b:5c:58:82:
50:c1:5f:5a:21:52:71:92:c1:32:c1:be:48:0f:81:a8:ca:f6:
8b:77:ed:fb:74:6d:cf:09:34:d1:93:93:d5:67:0f:4f:25:45:
d8:59:12:70:68:69:b3:6b:d6:19:c6:82:2f:65:db:5c:83:ab:
11:7a:ae:5b:33:a0:cc:f9:99:9b:aa:5e:1a:b4:1e:ad:0f:f1:
cf:11:6c:5a:33:4f:90:96:48:44:4b:89:d0:01:c8:0c:c2:b8:
6d:29:da:34:16:38:e7:19:4d:fe:26:ef:73:36:2a:dd:a9:2f:
c5:82:05:b2:7a:72:b6:10:48:48:d4:78:ad:39:71:87:34:43:
27:2e:b4:b0:cd:f4:cc:83:63:e5:0d:a4:f2:6d:97:3c:0e:28:
21:0f:42:5c:d3:0b:81:6d:4d:72:81:05:04:91:75:f7:cd:67:
81:46:e5:b6:5a:80:40:ae:f1:a2:4d:08:dd:a8:3a:17:5c:63:
ee:b0:71:c9:c3:32:0b:e4:c8:6c:8f:c3:4b:e4:21:8f:42:94:
a6:cc:4d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:12 2026 by rpki-client