Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
File: HqVZ2L9qwtho0GZa1X0sasFHIZM.mft (raw, json)
Hash identifier: U1bRA5NkXbNgObyTUxHvsJ5Cls67WrDfie6I3teeI8s=
Subject key identifier: 9A:47:C4:33:E6:97:5A:C5:A3:FA:AF:C1:27:85:E6:79:E4:41:07:0E
Authority key identifier: 1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
Certificate issuer: /CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Certificate serial: 019D9818E1AA428F78500A0DA781628082B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
Manifest number: 1852
Signing time: Thu 16 Apr 2026 21:01:00 +0000
Manifest this update: Thu 16 Apr 2026 21:01:00 +0000
Manifest next update: Fri 17 Apr 2026 21:01:00 +0000
Files and hashes: 1: HqVZ2L9qwtho0GZa1X0sasFHIZM.crl (hash: zp+S5jn18VNqBJTJvm+UWIxje0Opjr0JBBfWiQtn7K8=)
2: h2Pj0fup6PmGgboIXfm183EEF9c.roa (hash: eferMGwRa6YXz1Q8h3PiGClbC5vOEBn3msIVlW/jo08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:e1:aa:42:8f:78:50:0a:0d:a7:81:62:80:82:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Validity
Not Before: Apr 16 21:01:00 2026 GMT
Not After : Apr 17 21:01:00 2026 GMT
Subject: CN=9a47c433e6975ac5a3faafc12785e679e441070e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d2:72:a1:58:61:e8:61:6a:37:2e:b7:ea:07:
1e:bf:a3:85:29:07:f3:0a:93:0e:f4:67:6e:7d:13:
0d:28:d7:a5:a8:11:cb:23:80:7f:1c:bb:27:26:f5:
b8:b8:d6:b8:d3:c8:9d:6f:63:24:c6:71:4c:24:e8:
d6:20:6c:0e:3e:c9:bd:f5:5e:33:55:ce:18:a4:cf:
66:a3:57:65:64:08:57:f2:c8:c8:bc:1c:8d:71:3c:
da:4c:dc:de:b4:fc:94:4d:86:ca:1c:07:5c:c5:39:
b0:7b:38:a0:71:e1:ea:51:17:34:81:ac:83:8d:26:
6e:24:14:1c:60:be:d8:7f:a7:5c:57:87:66:a7:ab:
a3:9f:81:99:8a:3e:44:cc:63:fc:dc:7f:9a:db:12:
ed:9b:34:9d:8e:db:cf:35:f7:ea:75:e4:a6:b4:73:
b0:50:65:6e:85:84:ea:82:b7:57:13:ef:95:1b:10:
0c:77:0c:ef:55:38:3c:a9:bf:73:c0:2e:b2:11:c5:
9c:9d:ea:cc:e7:96:fb:39:47:97:b8:6f:fd:5e:91:
3c:2a:ad:9e:80:7b:41:a5:9e:e2:d6:51:93:2d:9e:
ff:71:1a:55:e3:30:76:e7:77:f3:ef:c4:38:c0:9d:
05:2b:66:30:58:fd:6a:72:46:7d:56:16:b8:60:71:
17:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:47:C4:33:E6:97:5A:C5:A3:FA:AF:C1:27:85:E6:79:E4:41:07:0E
X509v3 Authority Key Identifier:
keyid:1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:be:35:15:5e:02:77:75:f9:0e:05:73:a4:87:54:45:d5:85:
e1:e8:24:c2:6a:30:a1:01:7d:74:d0:0c:a6:48:9d:09:eb:e8:
a2:ba:70:c2:c2:0d:7f:60:23:cd:0c:53:54:01:4e:c7:83:7b:
c7:4f:ab:6c:24:36:7e:2c:c8:60:fb:31:06:a5:de:03:b1:50:
57:b9:19:be:9b:26:e5:85:93:d1:58:77:af:ba:cd:72:12:bc:
76:1c:94:a5:9d:b3:5c:35:74:0d:d3:73:a0:ea:c2:6f:38:50:
fe:b2:95:68:70:bf:f6:a9:f6:c2:55:46:ef:6f:31:d6:a9:79:
80:04:7a:93:25:ba:f4:a9:12:ca:e9:e6:3d:71:11:14:b0:fe:
bf:cd:ef:ff:a4:4d:3e:24:75:a4:1c:d0:e7:cc:eb:3e:8d:7b:
12:a7:37:a0:24:e2:a8:40:21:39:f3:ab:57:46:15:e6:33:6d:
3a:78:fe:ff:b2:15:99:fb:02:4f:3a:37:ca:14:24:ad:b3:1d:
68:3d:b3:8d:99:fa:8a:e1:f3:ec:f5:0c:0a:9d:99:18:57:bf:
f1:a0:44:e3:bb:ec:db:22:f2:11:25:06:fa:9f:a6:a2:75:60:
ca:aa:6b:44:3b:a8:60:52:59:cf:6b:d2:22:48:10:72:64:fd:
b2:4a:33:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGOGqQo94UAoNp4FigIK2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTU1OWQ4YmY2YWMyZDg2OGQwNjY1YWQ1N2QyYzZhYzE0
NzIxOTMwHhcNMjYwNDE2MjEwMTAwWhcNMjYwNDE3MjEwMTAwWjAzMTEwLwYDVQQD
Eyg5YTQ3YzQzM2U2OTc1YWM1YTNmYWFmYzEyNzg1ZTY3OWU0NDEwNzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9JyoVhh6GFqNy636gcev6OFKQfz
CpMO9GdufRMNKNelqBHLI4B/HLsnJvW4uNa408idb2MkxnFMJOjWIGwOPsm99V4z
Vc4YpM9mo1dlZAhX8sjIvByNcTzaTNzetPyUTYbKHAdcxTmwezigceHqURc0gayD
jSZuJBQcYL7Yf6dcV4dmp6ujn4GZij5EzGP83H+a2xLtmzSdjtvPNffqdeSmtHOw
UGVuhYTqgrdXE++VGxAMdwzvVTg8qb9zwC6yEcWcnerM55b7OUeXuG/9XpE8Kq2e
gHtBpZ7i1lGTLZ7/cRpV4zB253fz78Q4wJ0FK2YwWP1qckZ9Vha4YHEXuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpHxDPml1rFo/qvwSeF5nnkQQcOMB8GA1UdIwQY
MBaAFB6lWdi/asLYaNBmWtV9LGrBRyGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80ZmI3ODUtZmZmMS00M2EzLWFmZDEt
NWZmY2M0NmFlN2I1LzEvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80ZmI3ODUtZmZmMS00M2EzLWFmZDEtNWZmY2M0NmFlN2I1
LzEvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdr41FV4C
d3X5DgVzpIdURdWF4egkwmowoQF9dNAMpkidCevoorpwwsINf2AjzQxTVAFOx4N7
x0+rbCQ2fizIYPsxBqXeA7FQV7kZvpsm5YWT0Vh3r7rNchK8dhyUpZ2zXDV0DdNz
oOrCbzhQ/rKVaHC/9qn2wlVG728x1ql5gAR6kyW69KkSyunmPXERFLD+v83v/6RN
PiR1pBzQ58zrPo17Eqc3oCTiqEAhOfOrV0YV5jNtOnj+/7IVmfsCTzo3yhQkrbMd
aD2zjZn6iuHz7PUMCp2ZGFe/8aBE47vs2yLyESUG+p+monVgyqprRDuoYFJZz2vS
IkgQcmT9skoztQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:56 2026 by rpki-client