Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
File: HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft (raw, json)
Hash identifier: uozUV4am4469eWWbDxR+aKPrTTBta49yZ8NPOFkjpUE=
Subject key identifier: 14:C7:03:73:6D:DD:90:EE:B2:F0:A0:6D:7E:D2:7B:64:28:CD:5D:83
Authority key identifier: 1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE
Certificate issuer: /CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
Certificate serial: 01A0C39FD38E19BB18CBFF99A45283C247AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
Manifest number: 0339
Signing time: Mon 21 Sep 2026 11:00:26 +0000
Manifest this update: Mon 21 Sep 2026 11:00:26 +0000
Manifest next update: Tue 22 Sep 2026 11:00:26 +0000
Files and hashes: 1: HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl (hash: xDrPRpKSZ9pBNw83RQm4KYAL7H90zw2saR4k42MBSWM=)
2: X01IfSkC0_7ntZbrUIkZ_L-D4vE.asa (hash: aZEncQf/BAdEF1bttJTpzCCc9CG56JQeD1jy67NOedw=)
3: alFC4352ujfylmeJv44dIFDrX8I.roa (hash: EyvWXf/Mudgwkv08n9JwLU88K529FLdo5Jy2xLKZhDY=)
4: qYc1GDRHdMKB8iddli8zkMN3RVY.roa (hash: Raz+vndSPY3IPBLJicVFRGraRf1O/aOAmmwEA/V9D9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:d3:8e:19:bb:18:cb:ff:99:a4:52:83:c2:47:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace
Validity
Not Before: Sep 21 11:00:26 2026 GMT
Not After : Sep 22 11:00:26 2026 GMT
Subject: CN=14c703736ddd90eeb2f0a06d7ed27b6428cd5d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dc:94:71:c3:e6:d4:ab:a9:18:2b:5c:0d:d5:
59:55:10:27:3c:c5:ad:a0:57:ca:28:99:10:cb:b9:
91:24:a6:23:1f:d4:14:74:7f:14:b4:65:f0:07:bc:
70:0e:8e:15:25:b7:d1:39:36:e5:95:ba:b8:ea:28:
c9:e8:92:67:69:e8:7c:9e:73:ff:f5:54:09:0f:a4:
63:48:41:87:12:40:c9:75:4b:27:59:f0:7e:ad:15:
b7:6a:a1:89:f0:1b:eb:91:25:e8:2d:c2:77:b5:f8:
69:bd:36:4a:c8:30:b1:96:e1:49:65:dc:92:65:99:
32:bf:e0:d0:42:8d:09:21:59:a3:54:dd:ba:da:f8:
b5:d0:28:44:1d:3d:62:07:2e:44:bc:90:0a:1a:34:
f1:08:79:08:e0:90:bf:a8:7c:9a:6e:8d:db:a3:cd:
50:fe:0c:85:6f:17:71:98:9e:83:29:fb:f6:3e:01:
26:da:67:aa:13:23:dc:db:46:bc:6b:bb:60:94:37:
fd:e5:55:79:59:63:95:e6:2e:17:2a:5b:c1:a3:e3:
59:76:b7:29:08:75:f1:89:5b:c6:a5:a8:dc:3d:7c:
d8:08:ed:7c:b3:f5:fe:a0:b3:f5:3c:5b:28:43:f1:
fd:db:b6:51:85:41:6a:2f:0d:87:6b:9b:11:a6:7b:
80:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C7:03:73:6D:DD:90:EE:B2:F0:A0:6D:7E:D2:7B:64:28:CD:5D:83
X509v3 Authority Key Identifier:
keyid:1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:40:fe:07:c6:89:d1:37:ff:f6:ea:92:c7:92:94:4f:30:be:
36:b1:4d:1b:85:2b:25:d9:90:34:9e:7c:91:9b:33:c1:6f:94:
22:ce:9c:92:97:26:d0:23:b8:d3:96:76:12:22:0c:4d:e3:c4:
24:c5:15:fd:d2:3c:b3:da:39:23:36:c4:1a:0f:c9:b2:f6:7f:
21:89:09:eb:5d:57:4d:eb:a0:ba:49:d3:aa:51:44:68:72:3a:
4b:e4:2f:db:fa:c7:04:7e:f8:1f:9d:8f:42:aa:1f:9f:27:31:
6a:3b:79:70:59:27:31:c7:0a:ac:e5:0c:ce:2d:45:5a:0c:9f:
89:74:8e:86:3a:98:a4:20:df:bd:08:f0:16:68:72:6b:ca:a5:
60:7f:07:55:aa:4f:d9:e2:52:41:ff:38:76:58:cc:07:c5:e7:
11:b9:78:89:ab:8e:d2:2f:ab:40:e6:5d:1c:55:2c:a7:53:81:
9b:d1:4d:27:d6:7a:e1:7f:e7:72:1a:a4:5e:c7:2f:a5:1b:37:
ea:31:53:76:73:72:dd:64:96:ce:25:c5:f7:fd:38:70:8a:53:
07:9d:37:bf:58:14:93:41:4f:e8:61:db:c0:1b:ea:ee:c5:77:
4a:77:41:f2:58:af:43:7d:ce:12:ee:de:14:4b:0e:e1:77:6f:
6b:fc:c7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:56:28 2026 by rpki-client