Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
File: hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft (raw, json)
Hash identifier: 5EDHLazBrXF0IDifyDCmb0xffNJAY11IJMA3OGSGVUk=
Subject key identifier: 88:2C:59:A1:DD:9C:42:4C:D5:D5:B4:86:C8:A0:B8:99:A9:3D:57:0E
Authority key identifier: 84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F
Certificate issuer: /CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f
Certificate serial: 019FA0A86FBE737AEADA2E4FDB759217381F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
Manifest number: 1482
Signing time: Sun 26 Jul 2026 23:00:20 +0000
Manifest this update: Sun 26 Jul 2026 23:00:20 +0000
Manifest next update: Mon 27 Jul 2026 23:00:20 +0000
Files and hashes: 1: hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl (hash: RxMnEbGqSeqHhWo87eCOjusVZKDrbyA6qou9JvbwNUg=)
2: zJjfRJOT22lkDtk4Md7fI6mwZxg.roa (hash: hqAeygJ8Uol5cY/fADfXwnwvoVyU7MDQFKGg1laAxik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:6f:be:73:7a:ea:da:2e:4f:db:75:92:17:38:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f
Validity
Not Before: Jul 26 23:00:20 2026 GMT
Not After : Jul 27 23:00:20 2026 GMT
Subject: CN=882c59a1dd9c424cd5d5b486c8a0b899a93d570e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:ac:69:e7:bc:f8:1b:33:fd:62:f7:9d:92:
3e:32:fe:ef:74:95:4d:ee:95:c8:5d:a3:2e:9a:93:
39:54:14:e9:0e:db:57:4b:42:1b:87:1b:00:94:42:
9d:1d:dd:16:59:87:68:8f:cb:a2:c5:9e:50:43:38:
3b:65:eb:9e:0e:f4:97:16:57:4c:52:ab:d7:6e:50:
21:0c:24:8a:4c:7f:4e:b8:95:c4:a8:a9:40:2a:b3:
96:e3:d9:d5:f9:2c:d9:98:e6:3f:f8:23:c4:a6:b7:
d6:b0:8a:a2:20:4c:20:a8:12:86:09:37:27:92:4b:
c8:28:df:9e:80:4d:20:3c:f8:05:4e:a9:7c:61:fd:
6b:e1:73:22:44:6b:a0:e4:48:65:b0:88:f5:76:10:
70:aa:32:b8:5b:32:4e:1d:11:1a:ec:07:b4:01:28:
6c:d6:cb:ef:af:bf:6c:46:09:93:cf:53:07:40:99:
1b:6c:55:c2:90:5c:26:49:5d:9c:a1:2a:46:d3:d9:
de:05:52:db:ed:59:6c:d9:a9:4d:b9:6b:92:51:18:
2c:01:28:45:32:3b:92:1b:7c:c8:82:09:17:37:3d:
06:0f:63:4c:3c:9d:51:8c:37:99:a2:d2:16:73:08:
d5:e5:3b:c5:74:3f:5c:9d:1c:c3:c8:f5:3d:6b:3a:
d8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2C:59:A1:DD:9C:42:4C:D5:D5:B4:86:C8:A0:B8:99:A9:3D:57:0E
X509v3 Authority Key Identifier:
keyid:84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:04:1c:52:09:eb:06:13:b0:d7:45:81:5e:94:07:be:7d:cd:
96:b6:4f:40:bf:d4:a7:03:07:8e:1c:45:94:b0:dc:40:16:ba:
33:5b:2d:1c:2d:ff:9e:0f:4a:3c:e2:02:9c:c7:0c:de:f6:d0:
15:8c:f7:eb:06:7c:c6:8a:76:e7:5a:93:a2:79:3c:06:25:f9:
e7:2c:25:7c:af:2e:ef:85:79:42:87:94:ca:37:5b:30:09:18:
a1:f3:d6:20:6a:5e:89:fb:ad:46:88:38:57:35:bd:7a:e3:d9:
16:da:ee:c2:71:a1:32:e7:77:99:3e:18:3f:43:c0:ce:44:a5:
32:ce:e7:d0:89:b2:4b:90:75:6f:a8:e3:18:ec:7c:58:aa:6a:
97:96:a5:6c:08:ad:a4:80:0b:ca:42:82:f5:83:16:f3:82:bd:
b7:97:25:93:7e:a4:f3:08:ea:02:83:75:94:63:df:77:31:89:
7d:8f:df:ff:62:d2:a2:a4:08:15:ca:a9:74:23:d8:6a:2c:fc:
bf:ac:86:80:41:29:6b:ef:b3:ce:b7:06:5e:01:fa:f6:f8:3e:
c9:6c:fe:32:d5:05:be:05:96:70:a0:67:68:b1:ac:68:ff:0a:
52:8d:8f:c9:c2:24:84:65:b3:74:3c:ea:ba:f5:4e:ad:01:30:
e5:5b:aa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:28:18 2026 by rpki-client