Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
File: HSXQyIRbeYhsGZNFuJD16KzVFtg.mft (raw, json)
Hash identifier: dQeJb7T409y5C3+gP7h2xVLBrYzF0p3LBVN1tI0PNGI=
Subject key identifier: 9C:9D:46:47:9D:AF:8F:87:C7:40:96:13:23:3E:EE:EB:D1:92:D5:6A
Authority key identifier: 1D:25:D0:C8:84:5B:79:88:6C:19:93:45:B8:90:F5:E8:AC:D5:16:D8
Certificate issuer: /CN=1d25d0c8845b79886c199345b890f5e8acd516d8
Certificate serial: 019FAF7744CEB909ECB4A7CC5AA5D2FF657D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
Manifest number: 19D3
Signing time: Wed 29 Jul 2026 20:00:56 +0000
Manifest this update: Wed 29 Jul 2026 20:00:56 +0000
Manifest next update: Thu 30 Jul 2026 20:00:56 +0000
Files and hashes: 1: ACAlli7g0O4SaAuBMEG33oqVDNg.roa (hash: LR3cThLmPZU74WiY2Hs/Bqsbtxc4sKTKodU0FrsSnhI=)
2: HSXQyIRbeYhsGZNFuJD16KzVFtg.crl (hash: r9XwlBslV6ipXpGRcyRpGvMrCbQrSUi794/LYxOG5cs=)
3: fn4zzf2P7WlF_T3nuMRC7T2bgIM.roa (hash: 7qSjgY4PIPvMkUzYF/SCHnCfOJSbqzIxeuFxHsWJbOo=)
4: rGcSVw4JD2TsggxvzCf49t06ktI.roa (hash: N2TX307/s4VGRh8knONcDQ4y4hYb3c4Kd8kYYSngeNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:af:77:44:ce:b9:09:ec:b4:a7:cc:5a:a5:d2:ff:65:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d25d0c8845b79886c199345b890f5e8acd516d8
Validity
Not Before: Jul 29 20:00:56 2026 GMT
Not After : Jul 30 20:00:56 2026 GMT
Subject: CN=9c9d46479daf8f87c7409613233eeeebd192d56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:77:22:aa:65:cf:36:18:35:86:47:a3:af:
65:d6:8f:34:8d:2e:b9:eb:1c:b0:b2:a7:ee:88:53:
ce:e4:c5:c5:65:c8:5c:38:12:e8:2f:8d:60:c3:95:
cc:20:aa:cc:7e:4d:7f:65:17:41:b8:4c:de:34:80:
df:04:02:f3:2e:9e:8c:cc:74:eb:1d:11:8b:7f:74:
17:5a:c7:32:67:ca:ad:8b:81:ef:b0:fe:67:1b:e4:
f3:da:0c:d4:5d:f5:0f:c2:0e:8a:e6:9a:3e:1d:77:
d5:2a:42:f6:42:53:04:e2:b5:53:57:66:41:43:68:
f1:eb:f2:c7:71:84:1a:9f:44:a4:32:07:2d:24:d0:
c1:5d:ed:88:22:3b:c7:ee:d4:a7:7a:4d:d1:2f:a0:
df:95:98:5a:02:7b:dc:31:cf:65:01:31:46:00:8f:
e2:33:36:fa:63:8d:7d:c6:5a:fa:b0:60:c8:ae:7f:
d7:af:2a:25:6a:0f:53:a9:c5:5e:f4:0a:0f:8e:56:
bc:84:da:73:ee:77:29:6c:cd:9f:aa:63:5b:5a:49:
4d:47:08:34:81:42:96:00:3f:62:ba:70:40:e4:de:
da:d7:14:ba:df:97:7f:1f:9f:1a:e6:bf:e0:18:b2:
f7:57:5d:b0:4d:d3:90:c8:eb:51:44:8d:db:b5:e3:
be:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9D:46:47:9D:AF:8F:87:C7:40:96:13:23:3E:EE:EB:D1:92:D5:6A
X509v3 Authority Key Identifier:
keyid:1D:25:D0:C8:84:5B:79:88:6C:19:93:45:B8:90:F5:E8:AC:D5:16:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:17:ff:9d:75:b2:bd:42:80:54:cd:a3:d3:71:d0:d4:28:bd:
0f:9f:b7:34:a1:84:4f:90:e6:ee:65:bd:76:43:46:d6:1e:75:
bd:91:ec:7a:b2:f6:02:6c:14:4a:75:98:08:23:00:27:7f:e3:
db:1c:57:23:40:2b:34:1e:59:55:f6:06:6e:09:2c:bf:d0:75:
83:a1:8b:11:6c:1b:2f:53:a7:5f:c9:49:87:56:11:4a:fe:8b:
f1:4e:87:1b:2d:25:0c:ae:31:b6:f2:d4:0c:82:ee:89:8f:39:
36:ac:0e:7c:04:83:6e:e7:70:f7:89:29:3f:5f:98:75:2a:0a:
98:c4:78:a4:ce:36:69:33:fa:bf:5a:b7:cb:94:de:c0:d8:99:
ff:f1:5f:c3:2d:a9:68:72:c6:17:62:a9:e3:d6:11:45:8b:7b:
64:2a:fd:d6:72:00:df:be:ea:20:12:65:23:90:49:a3:d3:95:
ed:c3:df:dc:b3:af:ae:bf:74:52:66:10:0f:93:e3:8b:04:d6:
4b:40:77:ed:0f:b5:12:ca:f7:53:3b:46:f2:32:15:dd:f1:36:
8d:76:c2:21:24:b1:ba:cb:17:30:f6:39:90:36:86:96:4e:76:
0d:72:98:9b:35:03:dc:47:7f:71:f7:97:09:dd:37:01:72:17:
91:8a:b2:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+vd0TOuQnstKfMWqXS/2V9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMjVkMGM4ODQ1Yjc5ODg2YzE5OTM0NWI4OTBmNWU4YWNk
NTE2ZDgwHhcNMjYwNzI5MjAwMDU2WhcNMjYwNzMwMjAwMDU2WjAzMTEwLwYDVQQD
Eyg5YzlkNDY0NzlkYWY4Zjg3Yzc0MDk2MTMyMzNlZWVlYmQxOTJkNTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgt3IqplzzYYNYZHo69l1o80jS65
6xywsqfuiFPO5MXFZchcOBLoL41gw5XMIKrMfk1/ZRdBuEzeNIDfBALzLp6MzHTr
HRGLf3QXWscyZ8qti4HvsP5nG+Tz2gzUXfUPwg6K5po+HXfVKkL2QlME4rVTV2ZB
Q2jx6/LHcYQan0SkMgctJNDBXe2IIjvH7tSnek3RL6DflZhaAnvcMc9lATFGAI/i
Mzb6Y419xlr6sGDIrn/Xryolag9TqcVe9AoPjla8hNpz7ncpbM2fqmNbWklNRwg0
gUKWAD9iunBA5N7a1xS635d/H58a5r/gGLL3V12wTdOQyOtRRI3bteO+pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJydRkedr4+Hx0CWEyM+7uvRktVqMB8GA1UdIwQY
MBaAFB0l0MiEW3mIbBmTRbiQ9eis1RbYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFNYUXlJUmJlWWhzR1pORnVKRDE2S3pWRnRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy81NTc1MjQtMjk3ZC00ODQ5LWI0YmUt
YzUyZWI1NmJmYTViLzEvSFNYUXlJUmJlWWhzR1pORnVKRDE2S3pWRnRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy81NTc1MjQtMjk3ZC00ODQ5LWI0YmUtYzUyZWI1NmJmYTVi
LzEvSFNYUXlJUmJlWWhzR1pORnVKRDE2S3pWRnRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQBf/nXWy
vUKAVM2j03HQ1Ci9D5+3NKGET5Dm7mW9dkNG1h51vZHserL2AmwUSnWYCCMAJ3/j
2xxXI0ArNB5ZVfYGbgksv9B1g6GLEWwbL1OnX8lJh1YRSv6L8U6HGy0lDK4xtvLU
DILuiY85NqwOfASDbudw94kpP1+YdSoKmMR4pM42aTP6v1q3y5TewNiZ//Ffwy2p
aHLGF2Kp49YRRYt7ZCr91nIA377qIBJlI5BJo9OV7cPf3LOvrr90UmYQD5PjiwTW
S0B37Q+1Esr3UztG8jIV3fE2jXbCISSxussXMPY5kDaGlk52DXKYmzUD3Ed/cfeX
Cd03AXIXkYqyew==
-----END CERTIFICATE-----
Generated at Thu Jul 30 00:56:32 2026 by rpki-client