
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
File: HqVZ2L9qwtho0GZa1X0sasFHIZM.mft (raw, json)
Hash identifier: uoendX7lQMxrt9WGhTpaFaUTkFlcTFKXxSieb9knT0U=
Subject key identifier: B5:34:A7:5B:86:3F:A3:A7:5C:B2:54:6C:11:E1:F9:10:96:89:05:FA
Authority key identifier: 1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
Certificate issuer: /CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Certificate serial: 01A0C143FE60E67A33E63DEB041AFE2E1089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
Manifest number: 19F5
Signing time: Mon 21 Sep 2026 00:00:53 +0000
Manifest this update: Mon 21 Sep 2026 00:00:53 +0000
Manifest next update: Tue 22 Sep 2026 00:00:53 +0000
Files and hashes: 1: HqVZ2L9qwtho0GZa1X0sasFHIZM.crl (hash: IVEPKipRO2MAgVvyC+cSb1PSlGwetyqoDHZtSsRMdSA=)
2: h2Pj0fup6PmGgboIXfm183EEF9c.roa (hash: eferMGwRa6YXz1Q8h3PiGClbC5vOEBn3msIVlW/jo08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:43:fe:60:e6:7a:33:e6:3d:eb:04:1a:fe:2e:10:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Validity
Not Before: Sep 21 00:00:53 2026 GMT
Not After : Sep 22 00:00:53 2026 GMT
Subject: CN=b534a75b863fa3a75cb2546c11e1f910968905fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:f5:09:ac:51:26:21:33:ae:1f:64:9f:e2:
22:ae:65:a2:b2:75:d1:5d:9a:68:91:b8:8f:e4:04:
74:66:7a:55:27:f6:6a:cd:7f:3d:d0:a9:91:5a:c3:
8b:3b:1b:b8:18:b6:dd:89:23:fa:85:60:dd:a9:e9:
6e:3c:8b:70:4e:9d:aa:87:6c:36:eb:28:1a:41:ed:
0c:dd:ad:66:a0:fc:f1:95:3d:cb:ae:f2:53:aa:48:
43:1c:7c:37:3d:4c:dd:6f:fa:c8:f4:d7:2d:e8:6b:
f2:41:12:71:9d:57:6e:eb:00:0e:70:c9:68:7a:78:
56:fc:3d:0c:57:b5:8f:58:5e:eb:0d:a7:fc:5a:f3:
0e:1b:54:62:f5:24:02:c0:ac:14:9a:19:7a:e0:49:
18:d7:ba:f4:06:28:df:f7:cb:aa:c9:0b:4b:84:97:
fa:45:f3:1f:98:35:6c:4d:27:d1:89:2d:73:b3:7f:
ff:65:14:9d:7d:ec:f7:94:4b:2e:21:3e:e1:6b:cf:
12:ed:fd:a3:71:f9:07:4a:85:23:46:9b:50:7f:ee:
3a:1b:11:5c:9f:6c:08:20:b0:f4:1b:36:0c:78:c5:
85:0b:72:d0:00:8f:97:8c:46:4b:35:95:41:bf:8d:
25:6e:fb:b5:e8:41:4f:c6:e3:0f:a6:59:10:84:20:
6e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:34:A7:5B:86:3F:A3:A7:5C:B2:54:6C:11:E1:F9:10:96:89:05:FA
X509v3 Authority Key Identifier:
keyid:1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6a:12:f1:4c:7a:30:2c:a3:56:9e:f6:a4:a3:3a:d6:fd:4e:
c2:31:bb:b3:ee:05:1d:60:f3:6b:48:b1:cc:a2:30:9b:0c:81:
c8:dc:d7:b3:21:ce:95:e0:5e:62:d4:a1:e8:45:ac:ca:5e:88:
57:ee:4c:72:11:7d:b1:bf:94:5a:00:c8:b6:1f:d3:30:9c:a2:
f5:8a:d6:a7:63:88:a5:0b:0b:3b:1c:2f:7e:c4:2b:ec:36:13:
f8:9c:73:1f:1e:ed:18:b0:32:69:61:07:8a:5e:4d:e7:b9:41:
9d:91:d1:6c:0b:a2:8e:03:43:8d:17:14:a8:06:9f:43:81:d1:
90:41:be:1e:d8:0e:41:ea:25:5a:65:42:5f:7b:fa:9e:27:de:
f1:b5:68:78:54:8d:5b:22:e1:34:ed:d6:57:f3:6d:e6:1e:d3:
b4:f8:7a:ba:0c:44:dd:c5:f2:9c:5b:16:e2:d1:22:75:13:bf:
d4:70:fb:51:5a:cf:d9:e7:7b:10:ec:4e:b2:e9:c0:b4:39:ba:
42:bf:6b:26:cc:9a:eb:21:ff:5a:e0:2e:f3:6a:25:74:31:ed:
d8:29:93:03:d6:4c:30:cb:d9:8f:36:f5:69:8c:fb:0d:6e:c1:
ff:57:8b:cd:3d:02:62:38:c3:02:5b:ee:1d:f4:54:00:cc:d2:
3a:d0:3a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:35:13 2026 by rpki-client