Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
File: HQrO6hf1PecI-ac6vAyHFk0gfQg.mft (raw, json)
Hash identifier: AVkBe84WolxPC4/3gVHIfzXHQ9DIXZpwQfyvhI8qrgI=
Subject key identifier: D2:F6:E8:70:A0:0C:04:3C:98:F1:D5:30:C4:A9:B3:F9:5D:0D:D7:F0
Authority key identifier: 1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
Certificate issuer: /CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Certificate serial: 019FA260B3C84D90BED189652DF2A3499D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
Manifest number: 16F3
Signing time: Mon 27 Jul 2026 07:01:14 +0000
Manifest this update: Mon 27 Jul 2026 07:01:14 +0000
Manifest next update: Tue 28 Jul 2026 07:01:14 +0000
Files and hashes: 1: HQrO6hf1PecI-ac6vAyHFk0gfQg.crl (hash: 1RLQ1t8PYFzNUABHuebq18onZT2Wi4h/mkROj8+T0SQ=)
2: jYlsueQe6bTuxJo3Pao6U7_lbjM.roa (hash: xljjWi7Hj8DkN9QHcryj+ylFV/KQmtfdUgA8aZcK8mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:b3:c8:4d:90:be:d1:89:65:2d:f2:a3:49:9d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Validity
Not Before: Jul 27 07:01:14 2026 GMT
Not After : Jul 28 07:01:14 2026 GMT
Subject: CN=d2f6e870a00c043c98f1d530c4a9b3f95d0dd7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:31:b3:97:e5:55:d4:6a:b7:ac:0e:25:81:f4:
a0:18:d4:23:e9:5e:31:38:eb:d6:bc:13:16:d4:1a:
4d:18:35:c2:5b:c3:0c:5d:96:06:c9:39:d7:28:d5:
10:c9:79:97:bc:1f:a9:27:61:2a:6c:83:b3:9d:e8:
74:45:0d:05:63:40:06:92:4a:13:e6:88:bd:49:3e:
0c:d3:ac:61:26:56:91:f8:dc:c4:5f:03:19:11:74:
9a:76:b5:9f:f7:17:9f:ce:84:3c:2c:ff:86:41:30:
ba:d5:37:63:3a:32:f7:02:5d:fb:c4:af:1d:85:52:
90:60:c3:58:d3:23:c9:0b:fc:2c:92:bd:2b:12:11:
87:9f:15:77:bf:f8:a3:d6:52:0c:36:f9:aa:b4:90:
0a:e2:5c:7f:45:17:47:27:f7:82:b8:6d:8b:5d:6b:
c3:32:62:3b:ad:11:07:68:b7:e8:9c:e1:85:94:6f:
a8:9b:c0:aa:54:a1:a0:d4:2c:b1:06:73:95:8f:f3:
e1:c6:c8:5a:64:28:99:6f:fd:f6:ae:07:8d:5b:ba:
e5:11:cb:4d:e2:b7:c8:c3:62:86:3e:5a:95:aa:f4:
77:62:f4:68:44:bc:bd:d2:a9:b7:ac:b7:3c:d3:77:
d1:09:bd:41:d9:f6:28:67:96:56:2e:1b:47:5f:51:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F6:E8:70:A0:0C:04:3C:98:F1:D5:30:C4:A9:B3:F9:5D:0D:D7:F0
X509v3 Authority Key Identifier:
keyid:1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:53:82:ae:ee:d2:9f:a8:6c:7f:43:cf:08:4f:f4:59:af:f2:
7b:9c:02:34:40:3c:8b:5d:4b:f7:f0:e0:55:1f:06:e7:1d:4a:
85:fd:af:d1:9a:d4:22:54:ba:6c:3c:a9:f8:82:92:bf:94:00:
30:05:cb:4d:92:e1:0f:9b:b1:e6:a7:84:eb:ad:c5:0a:e1:4b:
85:65:cc:4e:e3:99:1d:f2:95:65:2d:13:d3:e3:6a:2a:83:bd:
5b:1d:45:8f:46:13:6f:01:8e:d4:5d:b9:d6:6f:09:b3:32:85:
1a:7e:3c:12:d3:13:b0:ab:ca:31:84:11:e8:96:8a:98:c3:6b:
4a:df:dc:34:b0:69:b8:13:5d:8f:c4:af:1f:a4:70:2c:cb:f4:
0e:d9:76:03:43:b2:1f:52:60:12:af:66:fb:34:b9:b4:28:74:
0a:44:7a:68:06:7e:17:ad:07:40:af:6d:b1:d8:5f:82:74:e5:
7c:d0:86:54:22:c8:6a:e2:57:a6:82:42:56:69:f8:d9:55:a1:
5b:24:db:e4:28:bf:74:f7:92:68:e4:bc:3a:50:df:8e:8e:59:
34:d2:0c:6f:25:4b:c5:3e:08:54:aa:89:d0:31:26:3d:aa:67:
ba:bf:cc:b5:b3:3e:d9:b1:fb:7e:db:99:14:af:7c:43:6a:56:
97:9e:0a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:47:52 2026 by rpki-client