Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
File: HqVZ2L9qwtho0GZa1X0sasFHIZM.mft (raw, json)
Hash identifier: 7G+kouBRua8q8diQmcwmsHGD8rkMSyHKQTfNu0/nFoo=
Subject key identifier: 44:07:34:A6:06:43:D2:48:47:1D:92:06:0B:B7:69:2D:F1:B3:A0:D8
Authority key identifier: 1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
Certificate issuer: /CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Certificate serial: 019FAB2CCF43AE310A2AFB7C7ABA9EC47CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
Manifest number: 1965
Signing time: Wed 29 Jul 2026 00:01:08 +0000
Manifest this update: Wed 29 Jul 2026 00:01:08 +0000
Manifest next update: Thu 30 Jul 2026 00:01:08 +0000
Files and hashes: 1: HqVZ2L9qwtho0GZa1X0sasFHIZM.crl (hash: vB5f4qblcLuii6zMW+qYaKSFw1MQZ90hpBA8PZTxjnc=)
2: h2Pj0fup6PmGgboIXfm183EEF9c.roa (hash: eferMGwRa6YXz1Q8h3PiGClbC5vOEBn3msIVlW/jo08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:cf:43:ae:31:0a:2a:fb:7c:7a:ba:9e:c4:7c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Validity
Not Before: Jul 29 00:01:08 2026 GMT
Not After : Jul 30 00:01:08 2026 GMT
Subject: CN=440734a60643d248471d92060bb7692df1b3a0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:65:6c:32:c6:09:47:d0:61:05:e0:60:57:2c:
ed:bb:58:fd:3b:70:48:31:18:29:68:79:c1:44:4f:
2d:e9:93:7b:85:90:d8:6d:5e:c1:4f:24:20:17:75:
a8:6c:4b:fc:51:54:ca:3b:47:8e:4b:e6:3e:7c:64:
c6:a2:4f:8e:9f:6c:d4:a9:b5:4a:29:a3:29:4e:a0:
a4:91:a2:e1:7c:91:53:fe:cf:ed:34:cb:3d:00:1b:
e8:2e:2d:db:16:85:1e:0c:f3:70:0a:da:36:54:a6:
80:a4:f0:ab:61:62:f3:e3:fc:c7:56:3c:5e:3d:f3:
b6:43:ad:ec:4a:83:b4:17:c5:77:03:2d:37:3a:0e:
c1:fa:2b:cd:e7:64:84:17:86:c4:f8:15:07:39:b8:
de:0c:c7:88:ba:a0:e9:e0:20:86:4c:4f:7d:cd:7c:
cf:d6:08:80:78:72:83:cd:cd:27:ea:9f:fe:f4:8d:
af:28:e6:96:23:7e:19:88:8f:dc:5b:c3:d0:e7:98:
40:56:42:8a:79:16:b4:b1:4e:f2:4b:94:27:fe:d0:
f9:dc:d5:f6:91:f5:1b:26:51:be:82:63:ea:3c:be:
d6:6e:8c:58:a5:cd:7d:6f:2d:69:51:79:40:6a:a9:
ba:6d:87:54:ac:e6:93:94:e7:d4:64:25:24:97:f5:
7d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:07:34:A6:06:43:D2:48:47:1D:92:06:0B:B7:69:2D:F1:B3:A0:D8
X509v3 Authority Key Identifier:
keyid:1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:96:6d:0e:3d:6e:93:6e:83:e0:49:33:d9:40:c8:b7:f0:0a:
f7:fb:3a:9c:25:cb:f0:4f:2c:b0:fb:f0:92:9d:2c:67:7b:97:
26:a7:4f:cf:05:88:93:6e:00:af:b7:d3:dd:85:02:27:af:d5:
b0:8f:2a:a9:21:13:50:3b:5c:95:1d:51:ce:f6:6c:74:a6:05:
7d:c1:f9:2c:ee:4e:b4:ee:f4:99:ff:63:5e:48:16:dd:a2:59:
df:91:a0:0b:a2:3e:fb:48:23:52:0a:f6:4d:ce:df:77:97:ed:
0f:fe:ca:71:8c:2e:f8:82:f0:45:39:48:bb:7c:73:e4:4c:f4:
0f:cf:1a:99:ef:2a:7d:91:31:60:b1:c7:77:7d:f9:dc:9b:2d:
c9:c5:00:d7:62:af:33:99:9e:c1:da:f8:af:99:33:a2:bd:78:
13:53:ef:80:c5:ef:c1:c4:1e:65:0b:cb:43:95:68:51:52:17:
59:65:4c:c6:a5:aa:c9:40:b6:c6:90:2e:91:c7:69:0a:14:8f:
5a:e0:c7:8a:31:a5:51:52:d6:43:5a:60:56:1f:7f:b0:4a:ba:
1b:2f:c4:f3:4b:46:9d:9d:97:08:bc:1a:60:25:52:82:82:12:
bf:36:17:8f:1f:b6:c4:f0:32:e3:28:4d:4e:30:6a:01:1b:14:
52:3d:a5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:14:40 2026 by rpki-client