Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
File: hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft (raw, json)
Hash identifier: O3SYJPP5CoAlouOshyKKh7pzhJTOSkaddXlcYiXK5mI=
Subject key identifier: 3F:D0:DB:C6:6B:63:AC:D3:B9:E6:8D:DB:14:58:8D:C1:2A:1D:25:DD
Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Certificate serial: 019EBDA352BDBB98B2BF597545C25DD53FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
Manifest number: 195A
Signing time: Fri 12 Jun 2026 21:00:57 +0000
Manifest this update: Fri 12 Jun 2026 21:00:57 +0000
Manifest next update: Sat 13 Jun 2026 21:00:57 +0000
Files and hashes: 1: Xt9gim6uGZAO-XoH9YVT_sjrnmc.roa (hash: EDOq5gPDJvJThydl2Ogu3GFdpWlVfncejE+dMuzQn70=)
2: c06039lKyV_J6xBbo-T4U-OvKpY.roa (hash: iZi7artEej/ZvwjEPmdFR6zAlAdw9xNqyuBRvLMxbow=)
3: hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl (hash: 4wwu6px3+V0PlnidvTzD/Ej8Fx7dgVBNtKvY8IetNAM=)
4: oEY0i9r3K2XzpeIqb_uHhC_ZJf8.roa (hash: eStOq03pWfBN0BFsIv2si494zM3pBol5A5EHh+T2UJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a3:52:bd:bb:98:b2:bf:59:75:45:c2:5d:d5:3f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Validity
Not Before: Jun 12 21:00:57 2026 GMT
Not After : Jun 13 21:00:57 2026 GMT
Subject: CN=3fd0dbc66b63acd3b9e68ddb14588dc12a1d25dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:18:3f:d3:28:9c:66:9f:77:72:b6:d9:bc:
93:01:70:cc:ac:3b:7c:00:ae:7c:7a:f7:68:b6:38:
dd:82:2e:7a:9d:08:fc:84:6b:27:6d:51:f3:b5:b0:
17:39:1b:7b:f5:35:0c:37:47:02:10:e8:11:e3:0c:
5c:5b:5c:41:0f:c1:2b:3e:5e:d7:03:34:63:f6:b6:
cb:ca:ae:fc:fe:b3:9e:97:5f:20:8b:d7:f5:5c:ad:
b5:1c:62:c5:f4:a7:68:68:aa:af:7e:20:4d:a1:c7:
48:1b:cc:60:4e:f8:9e:71:be:0c:52:e0:dd:05:18:
b9:56:26:52:56:a4:c7:b5:95:15:dc:10:62:b5:e0:
14:ea:3c:ed:b7:3b:d6:0d:4b:88:44:30:e2:42:f9:
56:65:04:44:72:fb:04:10:05:d4:0b:a2:56:91:20:
8d:2b:a9:f9:a1:3a:64:c6:40:56:e2:a2:ff:78:b1:
07:d6:6e:82:56:d8:b5:32:92:ce:56:df:b9:8b:27:
7c:96:c1:59:c5:77:c6:cf:be:ec:46:7c:44:66:68:
8f:9a:91:ac:ab:31:97:d1:25:7c:90:fd:70:d8:26:
83:9f:12:10:75:e6:20:f3:aa:1d:fb:c0:6b:9a:93:
76:34:c2:85:79:ff:1b:2c:d8:64:7f:87:59:a1:07:
0e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D0:DB:C6:6B:63:AC:D3:B9:E6:8D:DB:14:58:8D:C1:2A:1D:25:DD
X509v3 Authority Key Identifier:
keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:47:dd:13:8f:6b:7e:af:fc:8d:72:13:5a:cc:d6:1a:66:11:
bf:0a:bd:0d:b5:e2:bd:6c:7f:21:20:cf:4e:5c:82:2f:70:ec:
5e:b8:a4:06:a4:c3:bc:72:a9:5b:3c:43:37:0b:aa:e1:dd:f8:
79:ce:40:a6:d3:4f:a5:9f:d1:25:cf:0a:40:c5:e2:e0:fa:ff:
4b:ca:fd:32:48:88:97:60:25:7d:cf:dc:10:8c:af:5d:9b:51:
3a:1f:1f:b2:c7:4e:12:b9:cf:b3:18:82:ee:7a:34:91:38:b4:
d1:ac:13:e1:2f:1c:fd:17:9c:ad:90:07:dc:e6:4e:3d:ed:7a:
39:3c:6c:80:f5:72:ae:32:a1:6e:fa:d5:07:14:09:b7:70:d9:
9b:05:1f:a0:25:9e:e8:b7:14:e9:72:8a:ae:78:de:b1:a7:79:
6e:44:c8:55:8f:44:94:1d:77:1a:99:c0:33:46:42:58:20:f6:
a2:72:be:91:12:3f:86:e9:03:50:60:9d:f2:6e:8a:b9:aa:c3:
98:c0:7c:23:45:fb:70:b6:ae:93:36:c6:4c:57:8d:ec:ae:af:
1f:fe:d1:10:20:7c:2c:ae:30:7e:2d:94:f8:70:76:fa:29:26:
b5:dc:52:45:53:0b:e9:f4:b9:52:54:4c:8b:87:d7:fc:57:b3:
98:27:60:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:23:09 2026 by rpki-client