
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
File: HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft (raw, json)
Hash identifier: CkilWxgLONaiLLKEP5avEkp3NuSu22TFKDOvuLifV1U=
Subject key identifier: 0F:42:07:EB:0F:54:8C:00:91:87:FF:78:41:3F:6F:56:B7:2A:22:B5
Authority key identifier: 1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE
Certificate issuer: /CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
Certificate serial: 019FA7BDE682FF8706D8A5183E6F5D476AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
Manifest number: 02A6
Signing time: Tue 28 Jul 2026 08:01:08 +0000
Manifest this update: Tue 28 Jul 2026 08:01:08 +0000
Manifest next update: Wed 29 Jul 2026 08:01:08 +0000
Files and hashes: 1: HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl (hash: UEuyKAe0WDO49laDfJChkG/1NpXkgioQM8ZffQ1TEgY=)
2: X01IfSkC0_7ntZbrUIkZ_L-D4vE.asa (hash: aZEncQf/BAdEF1bttJTpzCCc9CG56JQeD1jy67NOedw=)
3: alFC4352ujfylmeJv44dIFDrX8I.roa (hash: EyvWXf/Mudgwkv08n9JwLU88K529FLdo5Jy2xLKZhDY=)
4: qYc1GDRHdMKB8iddli8zkMN3RVY.roa (hash: Raz+vndSPY3IPBLJicVFRGraRf1O/aOAmmwEA/V9D9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:e6:82:ff:87:06:d8:a5:18:3e:6f:5d:47:6a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
Validity
Not Before: Jul 28 08:01:08 2026 GMT
Not After : Jul 29 08:01:08 2026 GMT
Subject: CN=0f4207eb0f548c009187ff78413f6f56b72a22b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:f9:44:39:4b:42:04:66:fd:af:a4:cc:5f:
d3:71:82:6b:e2:7e:60:dc:a0:32:67:50:18:f1:25:
3c:7e:fc:e9:2f:43:d3:d2:47:97:01:56:db:9f:00:
69:cc:4d:24:38:0b:31:7b:78:52:fa:59:4b:62:c0:
ef:c8:d3:93:4e:fa:33:59:f4:f6:9d:60:d4:62:e0:
5a:50:71:40:be:3b:2d:46:d3:06:21:da:42:d0:98:
b1:1b:67:e6:c7:c5:f3:a0:b9:f2:39:66:1f:b3:f1:
1a:5a:72:cc:48:03:47:02:89:54:4f:41:2d:cf:e9:
b9:94:f6:d0:c3:15:47:9c:cc:a1:d7:cb:d5:e8:e7:
f0:05:44:68:68:7b:6d:9b:05:b8:ec:35:cb:9e:d6:
45:49:e8:f3:e9:6c:a5:53:c5:c7:69:a8:33:08:ed:
cc:9f:4c:25:39:c5:6d:12:72:13:ff:d8:f7:ee:d8:
4a:79:c0:0d:4a:92:e5:2e:6e:8f:e0:1b:81:1c:cd:
12:94:7e:66:82:fd:c5:39:c8:37:5f:56:d7:e6:31:
a3:3d:15:43:d3:4f:a6:bd:9c:06:3c:7b:74:b8:e8:
e3:f6:b3:e8:61:7b:f6:30:f8:71:f6:84:10:ee:64:
0f:c6:87:20:6a:fd:0b:ca:05:13:a1:06:fc:76:76:
46:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:42:07:EB:0F:54:8C:00:91:87:FF:78:41:3F:6F:56:B7:2A:22:B5
X509v3 Authority Key Identifier:
keyid:1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:3f:3b:37:a7:1f:23:98:fb:b5:96:50:1c:74:30:89:2e:38:
4b:7f:a0:84:1c:e6:cb:89:01:14:5d:91:d2:9d:74:32:c7:2c:
00:e1:e9:da:54:83:05:81:21:ac:67:9c:42:12:c3:5a:d2:4f:
f2:5f:0f:e6:08:89:84:91:f1:29:3e:94:1e:be:81:c0:d8:99:
ff:d0:40:98:95:ef:16:76:fd:7b:76:62:f7:6c:57:07:7b:a3:
23:79:a4:f3:2a:2f:3d:f0:d5:7f:f7:5e:7b:af:ea:98:9f:a4:
9a:af:b2:fb:2f:00:22:d6:16:e5:50:f3:43:de:c1:dc:8f:c3:
f9:22:44:58:76:a3:91:02:c9:9a:7d:d1:a2:36:37:c3:65:ac:
f2:7e:4b:2a:d3:2e:76:bb:8c:d8:08:9c:60:54:18:a4:8f:6f:
f2:a1:ce:62:21:27:7f:39:85:2e:e7:54:da:78:07:d8:a7:95:
6e:55:4f:c3:b0:5c:38:a5:ac:fe:9d:43:4b:f1:d2:93:3d:fc:
1a:61:20:d8:ab:b5:f7:d8:d0:76:10:ae:bc:13:dc:2c:c3:b6:
00:6d:38:82:db:1d:03:cb:24:ff:5d:57:40:3d:a8:68:0d:fc:
e8:5b:84:a9:14:1d:b4:75:32:f0:18:c3:7b:31:9b:c6:be:3e:
73:2e:bd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:46:59 2026 by rpki-client