Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.mft
File: hatrqgL7PEIkFGQC1xNTAtSpM5w.mft (raw, json)
Hash identifier: DDwg3VLdBrE4gCGMOOvz8wckai9C1mXCQxJtVruWOM8=
Subject key identifier: EC:6D:8C:93:0A:ED:0C:4A:3C:F4:22:2A:63:BC:C7:B1:48:EF:AB:9C
Authority key identifier: 85:AB:6B:AA:02:FB:3C:42:24:14:64:02:D7:13:53:02:D4:A9:33:9C
Certificate issuer: /CN=85ab6baa02fb3c4224146402d7135302d4a9339c
Certificate serial: 01A17DE0F8499E2A67E30B5764BAD4467C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hatrqgL7PEIkFGQC1xNTAtSpM5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.mft
Manifest number: 013F
Signing time: Tue 27 Oct 2026 15:00:57 +0000
Manifest this update: Tue 27 Oct 2026 15:00:57 +0000
Manifest next update: Wed 28 Oct 2026 15:00:57 +0000
Files and hashes: 1: Dma-Z-13sGBzUFZyDKOYpiVjyWI.roa (hash: n6evIQhFcEJ8otT9mtnc5btiAVJv5xnXSb58S3z8lOg=)
2: hatrqgL7PEIkFGQC1xNTAtSpM5w.crl (hash: nkWEUsI9tfA47RJMJvElmrCPrf6LM1oIL4iKlAftGwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/hatrqgL7PEIkFGQC1xNTAtSpM5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e0:f8:49:9e:2a:67:e3:0b:57:64:ba:d4:46:7c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85ab6baa02fb3c4224146402d7135302d4a9339c
Validity
Not Before: Oct 27 15:00:57 2026 GMT
Not After : Oct 28 15:00:57 2026 GMT
Subject: CN=ec6d8c930aed0c4a3cf4222a63bcc7b148efab9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:01:90:3c:95:e7:bf:c4:86:28:2e:1b:43:
c8:65:02:d9:46:90:46:40:ab:bd:bd:bc:37:50:48:
33:b9:73:bd:5c:76:9f:d9:0f:43:19:c3:f9:a1:84:
3e:11:1f:40:c8:61:17:66:7c:57:ef:20:f2:08:4b:
b9:22:87:18:d8:2a:a5:e0:6a:bc:08:8a:f8:b5:a8:
7b:96:7e:6f:2a:c0:d0:53:db:7e:fb:b1:45:af:85:
63:cc:71:e4:f7:45:c5:51:f6:33:fc:0b:61:3f:59:
c5:11:54:0f:de:27:7f:b1:d7:91:4b:29:a6:36:e1:
07:4e:38:74:6e:75:87:7e:44:cd:ee:95:04:96:47:
f8:0d:04:e9:71:9c:dc:a0:82:64:fa:c2:16:d2:63:
6c:65:65:7f:eb:b9:b8:1c:19:c8:70:5b:e1:34:a8:
ac:2c:cc:43:45:72:aa:2a:42:09:18:0f:af:20:ac:
af:c5:05:b8:d9:4a:81:24:a0:73:d1:ff:ca:ee:97:
47:98:32:04:00:89:2c:49:91:ad:b2:0b:96:7a:93:
9a:fa:5b:48:06:57:88:71:3e:ef:4a:23:f8:ba:dc:
46:a5:6d:95:43:5e:d1:3b:bb:c8:8e:f4:d5:5a:90:
23:d3:4f:0c:11:5f:0b:f2:41:5d:0b:1e:c2:24:d8:
b7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6D:8C:93:0A:ED:0C:4A:3C:F4:22:2A:63:BC:C7:B1:48:EF:AB:9C
X509v3 Authority Key Identifier:
keyid:85:AB:6B:AA:02:FB:3C:42:24:14:64:02:D7:13:53:02:D4:A9:33:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hatrqgL7PEIkFGQC1xNTAtSpM5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:74:5a:31:2c:67:ef:90:b4:c9:f2:bb:86:77:c2:3b:07:e5:
ff:7d:2f:ca:0f:76:7f:67:b6:fe:7e:1f:c6:75:d6:c4:b4:e8:
65:9f:28:a2:df:83:a1:56:26:a6:40:45:25:ae:91:82:5f:e8:
3d:4a:3e:11:a6:8c:f8:cb:b5:49:32:1f:54:42:5d:3b:00:2e:
96:16:07:20:e4:a2:f2:ab:80:d6:da:04:41:ab:77:82:95:5d:
9f:2e:97:ed:01:aa:67:13:b1:9d:e3:40:38:f1:21:f9:c3:29:
a3:06:1c:77:14:fd:76:d0:2b:b6:f5:2b:48:bc:b0:65:61:3f:
f0:cd:93:52:6e:9c:6a:57:5b:c5:eb:7e:3d:fe:f3:04:11:37:
4f:3f:7a:62:02:93:57:86:da:77:8d:fe:16:ed:92:37:5f:5a:
25:9d:55:b2:c1:f1:a0:8d:5d:7e:e7:80:00:94:e9:a4:3b:19:
34:ae:bb:0a:aa:92:29:4e:c7:ae:ea:94:fa:fc:2f:af:2c:ca:
fa:47:96:22:a2:0c:a1:35:f7:86:20:98:46:77:de:5a:57:ac:
f7:8b:02:a0:3e:0b:49:f8:a9:e1:45:9e:d2:52:f6:04:15:78:
6f:93:c6:18:77:56:08:0d:b8:fe:ca:f5:9a:e8:f5:e1:40:73:
d7:e6:14:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF94PhJnipn4wtXZLrURnxLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YWI2YmFhMDJmYjNjNDIyNDE0NjQwMmQ3MTM1MzAyZDRh
OTMzOWMwHhcNMjYxMDI3MTUwMDU3WhcNMjYxMDI4MTUwMDU3WjAzMTEwLwYDVQQD
EyhlYzZkOGM5MzBhZWQwYzRhM2NmNDIyMmE2M2JjYzdiMTQ4ZWZhYjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDEBkDyV57/EhiguG0PIZQLZRpBG
QKu9vbw3UEgzuXO9XHaf2Q9DGcP5oYQ+ER9AyGEXZnxX7yDyCEu5IocY2Cql4Gq8
CIr4tah7ln5vKsDQU9t++7FFr4VjzHHk90XFUfYz/AthP1nFEVQP3id/sdeRSymm
NuEHTjh0bnWHfkTN7pUElkf4DQTpcZzcoIJk+sIW0mNsZWV/67m4HBnIcFvhNKis
LMxDRXKqKkIJGA+vIKyvxQW42UqBJKBz0f/K7pdHmDIEAIksSZGtsguWepOa+ltI
BleIcT7vSiP4utxGpW2VQ17RO7vIjvTVWpAj008MEV8L8kFdCx7CJNi31wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxtjJMK7QxKPPQiKmO8x7FI76ucMB8GA1UdIwQY
MBaAFIWra6oC+zxCJBRkAtcTUwLUqTOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGF0cnFnTDdQRUlrRkdRQzF4TlRBdFNwTTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80ZDU1NTEtMDMzMC00M2VhLTgwZjEt
YmI0MzNiYTQ3NmYyLzEvaGF0cnFnTDdQRUlrRkdRQzF4TlRBdFNwTTV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi80ZDU1NTEtMDMzMC00M2VhLTgwZjEtYmI0MzNiYTQ3NmYy
LzEvaGF0cnFnTDdQRUlrRkdRQzF4TlRBdFNwTTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3RaMSxn
75C0yfK7hnfCOwfl/30vyg92f2e2/n4fxnXWxLToZZ8oot+DoVYmpkBFJa6Rgl/o
PUo+EaaM+Mu1STIfVEJdOwAulhYHIOSi8quA1toEQat3gpVdny6X7QGqZxOxneNA
OPEh+cMpowYcdxT9dtArtvUrSLywZWE/8M2TUm6caldbxet+Pf7zBBE3Tz96YgKT
V4bad43+Fu2SN19aJZ1VssHxoI1dfueAAJTppDsZNK67CqqSKU7HruqU+vwvryzK
+keWIqIMoTX3hiCYRnfeWles94sCoD4LSfip4UWe0lL2BBV4b5PGGHdWCA24/sr1
muj14UBz1+YUTA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:40:04 2026 by rpki-client