Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
File: HqvXZaBQUv7FmmonPV70v8ekA1o.mft (raw, json)
Hash identifier: F7ue72vv47/1cxdmS4GpA3rmTXalkMuA5mhY7EnlhJs=
Subject key identifier: C2:D6:17:7C:6C:EC:26:D2:17:3E:A7:5A:83:A8:83:09:FB:DA:5F:72
Authority key identifier: 1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A
Certificate issuer: /CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
Certificate serial: 01A180E22C21965CCF01F8B4459937885AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
Manifest number: 1AC7
Signing time: Wed 28 Oct 2026 05:01:08 +0000
Manifest this update: Wed 28 Oct 2026 05:01:08 +0000
Manifest next update: Thu 29 Oct 2026 05:01:08 +0000
Files and hashes: 1: HqvXZaBQUv7FmmonPV70v8ekA1o.crl (hash: 4t+rI3yulDJypyb3yi2r25q8JyKs9jZelW+34+gvpDQ=)
2: w0osmDfeySxstGXd2QPz-B9mx_w.roa (hash: 44dvBeQTpGg4qqAvOjd/EibsEADF1B8V+4jebvfoamM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:2c:21:96:5c:cf:01:f8:b4:45:99:37:88:5a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
Validity
Not Before: Oct 28 05:01:08 2026 GMT
Not After : Oct 29 05:01:08 2026 GMT
Subject: CN=c2d6177c6cec26d2173ea75a83a88309fbda5f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:64:75:de:60:96:b1:48:19:d3:9a:85:6a:68:
f8:5d:84:74:0b:03:96:18:85:e2:70:ca:47:6e:ba:
66:d5:ef:84:27:c1:26:9c:01:3f:84:91:6f:4d:2c:
5f:9d:fc:15:96:ca:d8:3f:75:da:1f:86:d2:67:c4:
a1:a7:b3:86:7f:d9:7e:13:55:ad:18:da:09:7e:fb:
af:4e:e3:2d:59:5e:d9:35:66:ba:1c:b8:8b:35:07:
4d:c8:24:ed:29:ae:48:e8:c1:10:74:a0:d2:8f:14:
f9:49:38:f1:df:10:7c:03:78:1b:fb:e3:9a:93:bb:
fd:d4:89:cd:2c:d9:1b:f5:3d:32:9b:6c:44:25:e1:
8a:f5:5c:21:1f:8d:a9:66:de:3f:37:79:4e:0a:d6:
fd:5c:96:bb:38:98:e1:f5:fc:0b:67:b3:4e:94:a1:
34:c3:55:c4:1f:5e:44:cd:4d:65:aa:d1:c0:1d:43:
96:64:3b:5c:e0:35:6f:27:e9:67:07:05:88:9d:79:
2d:99:e7:42:31:37:04:8a:0a:eb:af:03:2c:68:41:
3f:81:38:44:4d:36:19:93:f4:e4:7f:d5:e0:17:21:
08:6a:69:ca:a1:f7:03:3a:68:76:6a:9d:e8:fb:54:
ba:24:e3:a0:30:9a:57:48:73:37:1e:33:4c:dc:9b:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D6:17:7C:6C:EC:26:D2:17:3E:A7:5A:83:A8:83:09:FB:DA:5F:72
X509v3 Authority Key Identifier:
keyid:1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:fa:42:26:0a:73:4c:bf:78:3d:87:24:f6:e1:f7:fa:65:8a:
3c:50:08:ce:67:20:30:54:a8:cd:1b:4e:0c:1f:df:ef:d2:98:
c1:a5:95:ab:8a:c5:16:76:a5:eb:c0:55:3a:da:a0:a5:9a:db:
b5:3c:2a:42:0b:04:e3:d3:b5:40:c5:3e:44:de:cb:30:93:db:
01:cc:ef:4b:68:18:70:c5:80:c6:43:a2:f7:ed:c0:47:7d:57:
14:79:e6:f9:b7:28:4f:0d:1e:b5:98:32:fb:d6:61:34:53:ef:
8f:e1:c3:ed:72:c5:43:be:e5:eb:b8:83:eb:b9:72:c7:aa:bc:
c5:73:e0:c2:9b:77:16:d2:a0:c8:ba:b4:6b:81:a3:12:b1:c2:
70:bc:15:4c:4c:1a:3c:0d:c5:2f:c6:ce:09:ad:8e:ce:54:59:
bd:96:ba:26:8e:49:a0:bc:07:b6:a3:f7:11:a1:e9:5b:30:e2:
01:7e:f4:dd:d1:54:c3:1c:1b:8d:f4:3e:3c:2c:f6:6e:8f:2d:
9e:5b:a6:d9:5b:92:55:8f:5d:29:32:74:c1:80:a1:29:9a:71:
71:1f:62:90:4c:83:ac:b6:56:7a:99:21:d6:5e:14:3e:f9:7a:
11:78:d9:2d:4c:1d:77:cc:83:ef:16:09:b7:33:80:1b:d0:74:
54:c8:70:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:34:54 2026 by rpki-client