Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
File: HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json)
Hash identifier: H+PElWtV+qONustfVPBGM927y7qGXk3Guc6dhtBj6So=
Subject key identifier: 06:93:46:CF:28:FD:E7:C4:71:0F:74:E6:FE:84:D2:C1:59:C6:BE:33
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 019CAD902D0D6444072DCB324571E5919431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
Manifest number: 1859
Signing time: Mon 02 Mar 2026 08:00:32 +0000
Manifest this update: Mon 02 Mar 2026 08:00:32 +0000
Manifest next update: Tue 03 Mar 2026 08:00:32 +0000
Files and hashes: 1: 1-zqC4HhQSozydEfSsWMeVRvX4Ag.roa (hash: YCbMIIG2MrUDfBfXlLOUYihuI+nwLwGzroFonhJo9+c=)
2: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: ClKBZaYHm8FiSKc6QESnJDghw9JB8T7GR6+exNy9OxY=)
3: eQBqd8VSQ_-EDmCXW9sFFYDeMQk.roa (hash: dEI6v24yV0EpcI35EHdwZC8mHRo0m2mxSHgvKT9A5+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:2d:0d:64:44:07:2d:cb:32:45:71:e5:91:94:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Mar 2 08:00:32 2026 GMT
Not After : Mar 3 08:00:32 2026 GMT
Subject: CN=069346cf28fde7c4710f74e6fe84d2c159c6be33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:75:77:8f:a5:38:0f:2d:1a:84:ff:a6:ef:
42:5a:b9:61:1a:6d:68:25:59:1f:59:6c:fe:2b:7a:
7e:63:95:f8:60:40:62:3d:ba:27:fe:9b:d3:2f:e8:
2e:1b:d4:33:b5:52:51:7f:7a:af:f8:01:b5:c7:68:
3b:d9:67:da:8c:7e:05:61:f7:05:11:60:c9:f2:0d:
02:eb:bd:fb:62:78:21:ab:6c:eb:7a:44:aa:8c:07:
a0:db:c9:ab:28:4c:54:8d:17:22:2e:a8:13:11:b5:
1b:4d:8a:f0:04:a9:95:48:41:b4:3e:05:2f:d8:64:
c5:b1:b2:a0:10:b2:c4:48:24:50:9f:30:03:ab:01:
95:0e:37:a2:90:65:c3:f8:6e:7d:d9:a4:bb:4c:31:
0c:9f:22:d7:4d:2c:86:c6:6e:bc:b3:83:93:98:c3:
ae:28:6f:b3:a9:cd:44:7b:ac:9b:8d:30:39:04:19:
c4:17:78:15:20:6d:c9:f4:52:ea:87:3e:8a:30:07:
33:5e:e2:68:a0:e9:2b:60:2a:9d:51:35:86:82:87:
d3:4e:9b:12:69:cc:ab:75:fe:55:7e:98:5f:57:89:
2f:f5:76:8c:24:9f:d8:35:b3:8b:37:7a:51:d3:50:
2e:29:91:f5:e1:dd:f2:b8:75:34:a3:37:d0:a3:8f:
fe:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:93:46:CF:28:FD:E7:C4:71:0F:74:E6:FE:84:D2:C1:59:C6:BE:33
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a3:2a:a8:4f:3b:55:3c:43:98:fb:4e:fd:d7:85:a6:7a:50:
67:f7:87:80:87:79:a7:2b:49:d0:06:20:02:11:bb:9c:81:c0:
f2:15:4f:cd:8a:14:32:3e:9a:3d:37:5c:9a:bf:77:c6:eb:57:
e0:9f:93:64:fe:e1:df:91:eb:04:f0:a7:3d:ca:5b:de:ba:bb:
6a:b3:b6:42:04:e1:76:ef:3d:a5:92:61:ed:ed:95:16:84:8a:
b4:09:cd:a2:ae:21:cd:38:83:4e:6e:b7:d1:9b:0e:14:dd:df:
62:34:2e:8e:2e:16:2d:39:4d:ac:97:42:c3:26:a4:37:9a:37:
42:c1:fc:8e:13:66:5b:b7:ac:8f:21:c7:57:10:79:b8:09:a7:
eb:15:d5:86:b9:17:08:90:f9:82:27:a5:80:c8:8a:a0:b9:20:
e9:14:68:74:00:52:0a:3d:15:f3:dc:a9:45:7d:07:fb:7c:ba:
c8:9a:d9:32:7a:45:83:e5:cf:07:59:04:09:bc:be:f1:15:f2:
a7:ed:28:81:7d:56:07:13:33:ed:79:34:f0:51:05:b0:db:45:
36:ca:06:1d:51:f8:40:7f:39:df:e5:67:9a:af:c1:07:5f:53:
78:f8:0c:8d:da:7a:5f:13:1d:4c:85:15:f9:c2:aa:c9:ed:2f:
e4:69:9a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:07:24 2026 by rpki-client