Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.mft
File: hatrqgL7PEIkFGQC1xNTAtSpM5w.mft (raw, json)
Hash identifier: yudTnsfq6QX4mR/XiBsIRnmRjYWtArbt9Sqtv2KqSig=
Subject key identifier: 93:0F:17:1E:CE:2E:F0:79:95:AE:9B:90:D9:FF:7E:64:59:4A:48:CE
Authority key identifier: 85:AB:6B:AA:02:FB:3C:42:24:14:64:02:D7:13:53:02:D4:A9:33:9C
Certificate issuer: /CN=85ab6baa02fb3c4224146402d7135302d4a9339c
Certificate serial: 019FA2CE8288CE6D030DEBE7EBD7E7CE8E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hatrqgL7PEIkFGQC1xNTAtSpM5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:01:10 +0000
Manifest this update: Mon 27 Jul 2026 09:01:10 +0000
Manifest next update: Tue 28 Jul 2026 09:01:10 +0000
Files and hashes: 1: Dma-Z-13sGBzUFZyDKOYpiVjyWI.roa (hash: n6evIQhFcEJ8otT9mtnc5btiAVJv5xnXSb58S3z8lOg=)
2: hatrqgL7PEIkFGQC1xNTAtSpM5w.crl (hash: Hf22WD5NBDMMR5FTGrM/6dS9vU6YPC9qLwZrwUNvHnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/hatrqgL7PEIkFGQC1xNTAtSpM5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:82:88:ce:6d:03:0d:eb:e7:eb:d7:e7:ce:8e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85ab6baa02fb3c4224146402d7135302d4a9339c
Validity
Not Before: Jul 27 09:01:10 2026 GMT
Not After : Jul 28 09:01:10 2026 GMT
Subject: CN=930f171ece2ef07995ae9b90d9ff7e64594a48ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:53:ed:fe:72:c2:13:27:a9:78:64:63:d6:2d:
4a:b9:93:66:10:ee:55:97:28:e6:4a:c0:c2:91:a9:
a3:07:42:47:94:3a:36:00:2a:8a:bd:8f:69:c2:29:
60:82:24:8e:5a:f3:e9:07:bd:76:e6:c3:2c:f6:bf:
73:d7:50:5e:7d:39:a7:b8:fc:41:ff:e8:79:16:79:
98:d7:10:20:25:0f:db:77:82:47:69:e6:58:c1:08:
1b:54:fe:d7:92:3e:eb:69:e9:14:9a:1f:4a:80:33:
77:5d:bc:ba:fe:40:2f:b8:9d:4b:0b:bf:da:a9:a8:
67:b9:87:6f:dc:f5:85:d2:87:3f:15:18:a2:7d:6b:
51:bf:1b:c5:50:c0:1a:ef:a4:89:c6:d0:aa:c6:70:
59:93:7b:89:bc:d5:b2:b8:94:58:aa:9d:01:d6:ee:
fb:bf:97:e4:11:66:56:db:29:74:82:a1:7c:ef:b9:
69:07:df:d5:d5:73:02:5a:7e:7f:ac:54:08:f0:01:
83:63:77:26:c0:d6:5b:ff:02:6b:65:67:9b:b5:7d:
59:a2:42:66:a3:f0:90:c0:06:29:a7:05:e3:cb:1b:
b4:18:39:ef:42:88:49:15:1c:c5:89:84:5a:01:a5:
cb:1e:d3:ad:cf:68:51:a2:0d:bf:97:cd:8a:f3:89:
66:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0F:17:1E:CE:2E:F0:79:95:AE:9B:90:D9:FF:7E:64:59:4A:48:CE
X509v3 Authority Key Identifier:
keyid:85:AB:6B:AA:02:FB:3C:42:24:14:64:02:D7:13:53:02:D4:A9:33:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hatrqgL7PEIkFGQC1xNTAtSpM5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fe:3b:bc:8b:dc:74:d3:92:e6:bf:35:12:91:d0:f4:94:b3:
42:24:31:a9:e6:f9:55:b1:54:53:12:27:ce:22:96:f0:a9:77:
f8:db:c7:33:51:70:c7:48:95:2a:d3:cf:18:04:23:ce:5a:7f:
7d:5b:1d:b0:07:11:8a:a4:87:0b:d3:90:4a:96:58:6d:aa:45:
2a:62:90:fa:b5:5d:36:7e:6f:d6:a0:16:55:cd:e9:32:b9:b9:
cd:b3:5b:35:57:f6:66:82:e9:2b:fe:b8:61:98:08:ac:18:0d:
9d:00:aa:1e:68:9b:8c:65:0f:6c:c7:2f:08:00:a1:9f:14:06:
63:a6:a9:c8:2a:39:00:39:0c:a7:22:58:75:67:6d:5f:05:5c:
66:c2:d4:0a:68:41:e2:90:6b:9c:cb:da:1f:73:49:bd:49:16:
7a:20:48:a2:ab:c5:d5:ca:f2:a7:21:43:68:84:58:e1:12:be:
2c:8a:4a:df:15:04:ce:73:65:98:b8:10:86:07:52:76:bc:d1:
30:9b:98:d7:58:8f:80:a6:e9:10:f3:4c:12:6b:f3:12:b7:81:
30:de:0a:e0:e9:2f:70:c5:c0:f6:28:57:61:66:c9:38:ca:a3:
8a:b6:ec:23:bc:33:b0:bf:4f:a1:d6:9f:c0:8e:74:4a:b6:cf:
ee:dd:9e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:40:27 2026 by rpki-client