Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
File: HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft (raw, json)
Hash identifier: ifG2XG1CajgEdV2qHkaKsqXe9ZbcEfsP4MxjkpwVclM=
Subject key identifier: 89:CD:32:E9:55:02:91:40:3E:2B:A8:98:5E:C7:F4:B8:F2:C2:5C:64
Authority key identifier: 1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B
Certificate issuer: /CN=1d0260406e837ae38380fcc8d992b93d0de1a83b
Certificate serial: 019FAC75BCD520352109C37DDD652FE4E303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
Manifest number: 0EF6
Signing time: Wed 29 Jul 2026 06:00:24 +0000
Manifest this update: Wed 29 Jul 2026 06:00:24 +0000
Manifest next update: Thu 30 Jul 2026 06:00:24 +0000
Files and hashes: 1: HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl (hash: tRFxpyeV16q2p26nCDMv8Z0dR6I7bmx8EW8H/XJYztg=)
2: bdOQfAWdL7wiwVEQoYOuUBY_f9o.roa (hash: nNRgBnyPBnuWyk/W/uELLwEd7uoijhFF49TNbx1XS78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:bc:d5:20:35:21:09:c3:7d:dd:65:2f:e4:e3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0260406e837ae38380fcc8d992b93d0de1a83b
Validity
Not Before: Jul 29 06:00:24 2026 GMT
Not After : Jul 30 06:00:24 2026 GMT
Subject: CN=89cd32e9550291403e2ba8985ec7f4b8f2c25c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:85:14:85:f6:c9:20:1d:88:9d:91:68:60:
23:d7:e5:17:ab:89:c7:c3:a0:19:fd:7f:94:30:0f:
93:40:23:a1:d2:c8:58:1b:57:e5:0a:a3:26:bc:fc:
18:43:76:76:c1:ae:c2:2d:0c:72:fa:90:4d:b8:e8:
7b:ed:1c:69:22:0d:60:3a:14:da:87:51:94:69:cc:
c8:9c:9e:1c:0d:11:54:bf:82:9b:9f:8e:6b:60:66:
e2:5e:51:5f:59:32:b6:d2:1f:d1:ec:90:75:da:e6:
f8:bf:04:7d:da:e0:4c:f7:b1:8b:66:c3:2c:82:41:
d9:11:6a:7a:5a:3f:1a:5b:7e:37:b7:58:66:9b:92:
62:b1:1d:8e:bd:f3:b3:d3:89:00:ee:16:a6:5a:1d:
6e:b3:3a:46:ea:2c:8d:2a:cf:80:e3:1a:44:77:5c:
56:42:5f:6d:ed:3d:91:c1:71:72:41:c6:f6:9a:52:
84:88:cc:47:88:06:39:46:39:a7:3a:b7:58:91:50:
2b:23:8e:6a:9c:f2:c1:67:e7:90:7e:51:e9:ef:f8:
5a:6d:a3:61:a5:30:c1:d6:50:09:8a:0c:b4:b3:62:
a2:d5:3a:84:4f:13:fe:5d:ab:4b:52:d3:18:af:9c:
fb:bf:f7:29:ad:04:8c:bb:0b:6c:9b:b8:21:f8:ab:
f7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CD:32:E9:55:02:91:40:3E:2B:A8:98:5E:C7:F4:B8:F2:C2:5C:64
X509v3 Authority Key Identifier:
keyid:1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:82:67:b0:19:68:c1:d1:75:2d:a3:59:43:e2:67:ca:e4:44:
45:c8:82:33:69:de:a7:dc:b5:94:e3:52:40:d2:ab:b3:5f:f1:
85:14:d3:b7:b7:e0:11:e0:2d:d8:b0:68:31:90:47:78:f6:d1:
3c:dc:3f:66:d6:9b:3f:83:88:48:7c:6e:0a:f0:31:51:74:bd:
95:3b:14:15:4d:79:af:49:36:97:fa:2a:be:ec:eb:87:e3:80:
a3:90:ac:56:a1:9e:4b:13:83:d5:28:ad:cd:f4:fb:52:e0:d9:
48:4f:57:5b:da:d7:85:1c:c0:e2:29:5f:21:fe:a6:61:c4:35:
45:e2:ab:2a:49:1a:fc:ac:b6:93:7d:f0:44:c1:64:10:70:a1:
0c:87:1e:7a:87:6e:98:18:df:de:9c:d5:26:80:da:5e:81:73:
f5:d2:59:c7:3a:79:56:46:ab:05:74:d3:a2:d4:c7:8c:67:c6:
00:be:eb:60:bc:c9:ec:74:a1:1e:63:0b:d5:82:78:70:c6:7e:
3e:15:b3:14:a5:89:e7:d3:96:93:0e:e4:34:09:06:cd:5f:19:
4f:cf:01:44:20:35:9c:8e:5c:b2:37:43:b4:32:9e:c5:e2:6c:
cf:80:67:cf:f3:5a:a2:7e:56:6d:fa:a5:16:96:e4:3a:3e:c5:
8f:c9:98:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:52:58 2026 by rpki-client