Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
File: hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft (raw, json)
Hash identifier: G0hZgcB4sUmJhR4KjZvftHRsIJksEuK6CqH9zGHjZg4=
Subject key identifier: 4F:3A:E0:FE:42:02:A9:18:74:F0:DA:F6:C1:E3:B6:17:D9:E7:5C:ED
Authority key identifier: 84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F
Certificate issuer: /CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f
Certificate serial: 01A1894016E0F3139F34E0279EA49121C517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
Manifest number: 157F
Signing time: Thu 29 Oct 2026 20:00:40 +0000
Manifest this update: Thu 29 Oct 2026 20:00:40 +0000
Manifest next update: Fri 30 Oct 2026 20:00:40 +0000
Files and hashes: 1: hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl (hash: EPDWlPIVqwK7uJPZ5k/Zw3Jdf+KyaookcV7a5L872ec=)
2: zJjfRJOT22lkDtk4Md7fI6mwZxg.roa (hash: hqAeygJ8Uol5cY/fADfXwnwvoVyU7MDQFKGg1laAxik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:40:16:e0:f3:13:9f:34:e0:27:9e:a4:91:21:c5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f
Validity
Not Before: Oct 29 20:00:40 2026 GMT
Not After : Oct 30 20:00:40 2026 GMT
Subject: CN=4f3ae0fe4202a91874f0daf6c1e3b617d9e75ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:81:43:c0:c2:4f:51:40:01:c8:fc:32:03:
b4:35:e5:a9:30:7e:de:a1:68:7a:06:b1:4e:9d:c8:
b1:8a:26:5a:90:62:79:71:38:90:d9:f1:9d:c4:10:
22:f9:07:ac:6a:ed:03:0d:00:b8:75:09:25:f3:21:
ed:7b:3f:d7:51:30:1c:ed:2a:99:e3:8f:17:31:4a:
de:4e:37:7c:8c:89:46:a5:37:94:d0:54:b1:08:0a:
ed:c8:05:24:97:7e:04:d3:c3:04:19:6a:5b:9d:0e:
40:a0:85:bd:4a:97:fa:a3:d0:ec:85:02:ef:3c:79:
ab:2f:a6:6b:96:46:6b:9b:49:c6:6e:25:3d:d4:62:
e3:0f:a3:e0:3e:a2:0c:30:4c:1b:ff:f2:31:3f:59:
7a:c9:08:74:06:fc:1a:5d:93:88:1f:db:14:06:91:
e0:ea:72:11:df:2b:19:29:d6:9f:12:ad:a2:3f:86:
3e:ae:0a:7c:d4:69:98:91:7b:8c:79:a4:e8:31:a2:
6a:dc:8b:72:99:33:fb:39:ae:95:01:67:74:fb:e3:
98:6e:82:5b:c9:52:7e:14:c1:9b:e2:cd:17:e2:1a:
2b:57:5f:70:77:22:b1:33:48:78:bb:6f:38:11:ff:
25:ee:92:d3:3e:0a:9c:1d:e3:9f:5a:76:53:43:44:
1c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3A:E0:FE:42:02:A9:18:74:F0:DA:F6:C1:E3:B6:17:D9:E7:5C:ED
X509v3 Authority Key Identifier:
keyid:84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:13:97:72:c7:51:64:c9:c2:bc:de:36:56:8c:17:ad:53:5f:
a0:04:29:cd:55:aa:2c:66:3a:c4:57:3b:2a:1b:37:42:56:de:
76:12:66:69:8d:29:e2:7e:a5:ae:13:92:b8:98:aa:f3:6d:78:
0b:cd:05:bc:fd:bd:a8:9c:a3:0a:71:10:d4:51:e4:76:60:12:
ac:98:cd:1a:0d:d1:d8:e0:00:58:a4:7b:31:79:2d:da:16:27:
9b:d0:63:38:d9:ff:d4:61:d2:ed:4b:16:31:a7:a2:b7:66:aa:
26:f6:b6:4f:fa:6a:16:43:e2:c0:f9:88:11:e6:0b:51:cb:b9:
8f:8e:7e:93:19:79:89:d3:5e:d3:14:71:52:8a:b0:88:68:9b:
08:28:11:d8:96:96:bd:d6:35:71:e9:34:32:db:94:f0:47:ac:
f3:05:ec:89:6a:04:1e:8f:d9:55:78:13:0e:b9:95:78:91:1d:
80:3f:82:8d:84:77:af:ec:4f:89:1d:aa:37:e6:c5:15:78:b5:
42:24:ea:6c:bc:42:15:93:5d:49:82:b8:ae:fd:9e:a8:22:79:
81:56:2f:4b:08:99:32:9f:15:de:e3:88:65:53:0a:34:b9:c8:
f3:a9:68:f8:4d:96:0e:c1:13:6b:14:28:d1:ab:45:c7:b2:ac:
16:1e:11:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 00:57:18 2026 by rpki-client