Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
File: HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json)
Hash identifier: dm/qiaxICEsu0HNdy/VjtbxzV5cwQqNmX1sY3VcdLsE=
Subject key identifier: 3D:5D:F9:7C:78:65:69:44:92:D6:0A:E4:A6:AC:62:2F:E2:12:83:FB
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 01A0C6D814EF175D089FD0FC0DDCE1766943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
Manifest number: 1A79
Signing time: Tue 22 Sep 2026 02:00:44 +0000
Manifest this update: Tue 22 Sep 2026 02:00:44 +0000
Manifest next update: Wed 23 Sep 2026 02:00:44 +0000
Files and hashes: 1: 1-zqC4HhQSozydEfSsWMeVRvX4Ag.roa (hash: YCbMIIG2MrUDfBfXlLOUYihuI+nwLwGzroFonhJo9+c=)
2: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: xDl67GEzf4TTchsp6gwe1aIl59+TR3Jmfxz6fPz2K/4=)
3: eQBqd8VSQ_-EDmCXW9sFFYDeMQk.roa (hash: dEI6v24yV0EpcI35EHdwZC8mHRo0m2mxSHgvKT9A5+8=)
4: xZQQ0CvgvGISAk0eT_rFmazBHWc.roa (hash: 2uo51y4FTldRjelw7bQ2s6OQpSKwuYg+UN+zR4NJjsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:14:ef:17:5d:08:9f:d0:fc:0d:dc:e1:76:69:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Sep 22 02:00:44 2026 GMT
Not After : Sep 23 02:00:44 2026 GMT
Subject: CN=3d5df97c7865694492d60ae4a6ac622fe21283fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3c:25:3b:36:67:31:96:06:89:17:fc:04:fc:
f4:d3:fc:7c:a6:23:f5:6d:0e:4e:a1:b7:d2:ca:aa:
e8:0a:0a:4f:27:90:4c:01:48:ef:af:e9:b7:af:c9:
ba:4b:03:b5:1f:70:ca:4d:ef:bf:e0:5b:74:8b:55:
5b:1c:56:fc:3e:3a:c3:45:de:17:a1:fa:f2:ff:5f:
7e:7b:46:6a:26:70:94:f7:9e:7b:84:5d:79:3b:4b:
da:2e:e7:c3:77:ab:80:ce:11:5b:18:5d:a3:e6:1d:
4c:0a:3f:c2:60:a2:d3:03:ee:8d:31:15:ff:1c:10:
9e:7a:e6:ae:ac:a5:55:3c:72:25:ef:ca:6d:c8:21:
7d:04:73:50:15:17:01:1f:cb:09:ff:22:8a:d7:ba:
28:31:1e:b3:7c:08:c3:32:c7:13:ce:d4:c6:58:07:
7a:45:b3:ed:cc:3d:e1:1a:09:99:84:81:f2:ba:c9:
7d:54:c5:ba:6b:d6:64:53:2a:ba:e3:e7:8b:f6:56:
2a:5c:2c:7d:04:9a:3d:7f:04:ac:96:67:77:79:0d:
09:ec:f6:22:7e:28:48:ed:19:b5:a0:02:fe:73:f2:
1f:e4:37:8d:ab:24:76:bb:20:35:ab:54:6d:b2:35:
f8:fb:76:ef:0c:56:81:49:fc:b5:be:43:96:2b:77:
13:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5D:F9:7C:78:65:69:44:92:D6:0A:E4:A6:AC:62:2F:E2:12:83:FB
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5a:98:6a:f2:7b:e5:d1:da:0a:43:3d:8a:4d:ef:5b:1d:ec:
7e:d1:98:61:0d:4d:51:43:43:a7:9e:c8:75:67:46:f6:94:4c:
00:3d:d9:e7:ff:3b:1d:7f:a5:e1:43:5f:99:79:a4:4d:aa:0a:
55:ee:73:ec:08:91:f6:0c:4c:4e:de:b4:7b:4d:8a:99:6a:38:
eb:b4:e5:cb:2a:2c:40:60:77:8f:72:7d:e3:4a:88:b4:b4:c9:
27:42:2f:a7:b5:02:87:37:d7:89:88:25:30:e6:d5:97:74:6e:
87:04:04:f6:3c:c0:87:c5:f3:57:1f:9f:19:26:df:6f:be:37:
1f:9e:9c:1c:ae:5d:63:a4:74:42:ba:07:5d:7e:53:1f:71:33:
aa:38:7d:68:d4:2a:70:b5:99:1e:da:c5:61:a3:0c:47:6f:cc:
d3:23:70:70:2f:20:30:3c:c5:fb:47:d9:40:da:ef:97:e6:d5:
19:e7:64:8c:83:0f:fd:bb:56:03:36:69:21:f2:2e:33:97:22:
9e:16:b4:8a:f6:f0:83:6f:52:2c:8a:8b:c2:e9:ad:39:4c:b9:
eb:95:31:1e:c2:aa:27:3d:1e:93:bb:05:89:83:12:f7:89:30:
b0:97:4f:ac:74:93:47:7c:4a:85:8f:b8:25:e1:53:7b:d8:70:
6f:b0:3e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:17:21 2026 by rpki-client