Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
File: HQrO6hf1PecI-ac6vAyHFk0gfQg.mft (raw, json)
Hash identifier: SMbcDaZUBvC9e0Qu8wzJsKcvWzEOJGFWqsZplXKyc5g=
Subject key identifier: 7F:53:5C:17:DF:99:DC:CF:43:22:D1:D0:27:3E:61:0D:22:FA:70:26
Authority key identifier: 1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
Certificate issuer: /CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Certificate serial: 01A17F62162DC7342A0DA3F491BA3D9A0653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
Manifest number: 17EA
Signing time: Tue 27 Oct 2026 22:01:36 +0000
Manifest this update: Tue 27 Oct 2026 22:01:36 +0000
Manifest next update: Wed 28 Oct 2026 22:01:36 +0000
Files and hashes: 1: HQrO6hf1PecI-ac6vAyHFk0gfQg.crl (hash: QuYlfKnqBq5Bsv0lvYc64GYtvDSrQlFbbMxmnADDllA=)
2: jYlsueQe6bTuxJo3Pao6U7_lbjM.roa (hash: xljjWi7Hj8DkN9QHcryj+ylFV/KQmtfdUgA8aZcK8mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:62:16:2d:c7:34:2a:0d:a3:f4:91:ba:3d:9a:06:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Validity
Not Before: Oct 27 22:01:36 2026 GMT
Not After : Oct 28 22:01:36 2026 GMT
Subject: CN=7f535c17df99dccf4322d1d0273e610d22fa7026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:4c:30:9d:ae:a1:4a:21:03:97:7c:77:36:
7c:ea:9f:03:5a:3c:c8:2b:c8:70:f6:c5:f4:f1:79:
89:ae:7b:19:b8:e8:b9:1e:ee:1b:aa:36:de:0d:21:
ab:a4:d6:50:b7:c1:50:a0:0d:10:85:c5:59:c0:4e:
b0:6b:89:ff:42:08:5e:72:ab:76:2e:33:56:24:2e:
45:45:b5:89:7e:c6:19:0a:03:b5:27:ac:d7:a5:2b:
b1:b9:f6:9c:9d:7e:4a:27:0b:cf:60:ed:39:b6:a7:
56:25:70:c1:02:16:eb:df:6c:4e:5d:fc:74:df:25:
86:7f:76:c4:79:4e:b0:00:2f:0f:10:b8:a4:72:84:
32:9b:97:75:42:60:d4:a1:52:d7:b6:78:29:18:11:
21:ee:00:11:35:1c:b5:a6:ff:16:de:f2:07:28:2a:
d5:60:5e:03:4e:ab:e5:4d:df:51:f8:43:3a:62:15:
f4:36:c5:f4:2c:31:80:20:d7:4b:07:a0:37:3d:46:
39:4d:34:3a:9d:ec:fe:94:d6:ec:49:c0:16:38:f4:
be:2f:d3:5d:ed:75:87:f2:f5:ef:3f:b7:e8:ee:25:
6c:3c:fc:9c:e0:24:d6:7c:e9:23:c0:8b:83:d8:99:
fc:0b:b7:6a:b0:82:05:32:fd:5e:63:d9:70:28:7a:
bb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:53:5C:17:DF:99:DC:CF:43:22:D1:D0:27:3E:61:0D:22:FA:70:26
X509v3 Authority Key Identifier:
keyid:1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:72:b3:0a:f1:31:ad:04:de:35:6e:38:3f:39:23:0b:6d:68:
79:3d:64:25:07:4d:57:b7:6d:d3:60:58:4a:40:c1:8c:42:14:
e4:4f:8b:44:b0:03:0e:26:87:78:40:fe:c6:59:37:e2:08:be:
74:ea:02:42:10:3a:cf:a4:33:47:87:c3:9f:59:c0:d5:de:40:
2a:a2:98:21:d1:7c:d7:a1:4d:ea:8f:85:b1:e2:f7:1b:2d:98:
73:39:ab:18:e5:a8:81:45:9b:94:67:d2:71:89:68:2f:d7:ba:
6c:df:bf:3c:bd:83:39:d5:0d:99:d2:d4:ce:a5:27:73:50:52:
01:21:5c:cf:33:12:7b:19:56:cf:35:d0:88:36:60:f0:e9:7b:
6f:59:3a:7e:f2:ba:18:2e:cd:d1:b6:41:de:f9:33:ee:a7:8c:
74:c8:ce:67:05:b0:8e:bb:af:0a:6a:b5:4c:ba:4a:c0:47:3f:
8e:cd:26:d2:39:5b:10:e9:78:d1:75:88:a9:e2:c0:67:b2:65:
20:5a:88:aa:f1:c1:ec:21:d5:5b:a1:99:05:15:5f:9c:63:38:
c8:17:07:41:9e:96:25:28:fd:39:88:f1:08:1d:e0:e5:22:1b:
27:5a:93:e9:fa:27:81:59:30:16:55:0c:f0:15:4c:7c:da:70:
7c:ab:15:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:25:08 2026 by rpki-client