Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
File: HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft (raw, json)
Hash identifier: w7JZ6zs1Xz8OTDdRv/RGMboZWiK3jIgfrfGFIex2x3Q=
Subject key identifier: B4:2C:5D:CC:56:B1:A2:12:FE:A3:50:45:EB:22:13:04:3A:B1:FE:25
Authority key identifier: 1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
Certificate issuer: /CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Certificate serial: 01A12089F7FEF9395913C8093E37747A9BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
Manifest number: 1A97
Signing time: Fri 09 Oct 2026 12:01:15 +0000
Manifest this update: Fri 09 Oct 2026 12:01:15 +0000
Manifest next update: Sat 10 Oct 2026 12:01:15 +0000
Files and hashes: 1: HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl (hash: 0N0Phz+eSE8r+jrh8NBOHHPXUBWZEjpN/gtu5g4gF4k=)
2: oIEkw3PCXr1UYdRnKr9q4Q6XWcs.roa (hash: v1OkVWqraYOFjsEZ3LFnKjFEiGungWJLb2B2UAHBg6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:89:f7:fe:f9:39:59:13:c8:09:3e:37:74:7a:9b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Validity
Not Before: Oct 9 12:01:15 2026 GMT
Not After : Oct 10 12:01:15 2026 GMT
Subject: CN=b42c5dcc56b1a212fea35045eb2213043ab1fe25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:ef:d3:d7:fc:cf:c2:d2:55:df:ff:fc:ae:
d0:3c:05:fc:05:46:3f:7e:6c:bb:8c:64:92:2d:cf:
6e:83:8c:37:57:aa:b0:88:55:b6:30:1b:29:8e:a8:
7d:99:3a:e2:05:9d:3a:07:44:59:68:e6:7e:89:8b:
17:62:38:e3:d5:e8:af:02:7f:b5:07:26:d2:43:88:
a8:66:d1:7a:75:fd:04:c2:a7:12:2d:f6:32:aa:6f:
f1:cc:4a:1e:05:07:1a:07:bd:44:94:0b:1b:d8:60:
5e:75:22:78:33:74:44:1b:48:a9:66:42:5e:79:6c:
4c:81:66:26:76:99:59:1b:50:2d:32:8b:33:29:34:
6f:92:81:73:16:2c:f8:93:06:60:cd:ba:40:f8:a0:
c6:e1:13:f7:d1:c6:60:26:64:7b:e0:f3:78:15:76:
d7:3e:41:fc:71:e1:f1:bf:89:0f:5c:bf:70:ec:90:
42:d2:89:70:b8:ee:3f:4e:67:c5:0a:d7:f7:26:4f:
13:cb:9f:e7:0e:6c:8c:0f:50:a4:7e:d8:f5:f6:ea:
73:3e:ec:09:67:a9:ac:9b:49:3d:f4:1c:20:7b:79:
33:58:3c:45:b8:54:5f:a2:0e:34:bb:25:f0:3e:f3:
9e:30:69:b0:13:ee:c0:4f:6f:da:74:4b:76:1f:06:
ec:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2C:5D:CC:56:B1:A2:12:FE:A3:50:45:EB:22:13:04:3A:B1:FE:25
X509v3 Authority Key Identifier:
keyid:1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b6:df:4e:f7:ef:38:c4:fa:b0:bc:30:08:af:a3:cf:fe:61:
2e:e3:e1:be:66:1c:5c:af:51:16:c3:f4:78:ec:77:89:0d:52:
3e:91:3f:6f:0c:ef:e3:30:bd:1d:e2:2d:8d:f0:2f:6f:69:93:
56:81:2b:58:00:15:78:33:ca:bb:e2:54:2e:36:7c:ae:da:f4:
96:26:a9:26:3e:04:04:1b:e6:6c:9a:cc:f0:e7:37:d1:fb:45:
8b:cf:66:be:5e:0b:81:3c:dd:b6:c3:bb:10:fd:03:c6:2c:46:
84:ba:3c:0f:4f:e0:74:65:98:52:e6:a8:c4:d7:11:ae:54:a6:
81:1a:31:52:a2:1f:f3:c5:7c:1f:39:f1:ae:5a:23:3b:df:40:
79:97:7d:b9:4a:b7:40:df:a2:7a:bd:8a:c0:09:4b:58:05:e3:
1b:96:25:56:98:48:46:49:43:70:92:17:a6:a2:a9:26:5f:1b:
f8:fd:0a:c7:26:0f:76:02:30:e8:0f:7f:15:4f:18:df:d2:21:
fc:a5:6c:ee:5a:f4:3d:41:a0:09:ab:ac:ce:03:ea:62:1a:19:
84:51:b1:f8:ba:ef:ca:98:71:aa:67:92:f4:b6:1b:f4:19:33:
25:39:e3:ef:71:18:56:99:a2:f3:39:e0:08:c4:a5:b1:fc:c7:
5a:4a:ce:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEgiff++TlZE8gJPjd0epu+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTBjODIzYzM2MGI1Zjg2MTQ4OTJkMzViMTAzYzY0Nzc0
ZmQ2NWQwHhcNMjYxMDA5MTIwMTE1WhcNMjYxMDEwMTIwMTE1WjAzMTEwLwYDVQQD
EyhiNDJjNWRjYzU2YjFhMjEyZmVhMzUwNDVlYjIyMTMwNDNhYjFmZTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCfv09f8z8LSVd///K7QPAX8BUY/
fmy7jGSSLc9ug4w3V6qwiFW2MBspjqh9mTriBZ06B0RZaOZ+iYsXYjjj1eivAn+1
BybSQ4ioZtF6df0EwqcSLfYyqm/xzEoeBQcaB71ElAsb2GBedSJ4M3REG0ipZkJe
eWxMgWYmdplZG1AtMoszKTRvkoFzFiz4kwZgzbpA+KDG4RP30cZgJmR74PN4FXbX
PkH8ceHxv4kPXL9w7JBC0olwuO4/TmfFCtf3Jk8Ty5/nDmyMD1Ckftj19upzPuwJ
Z6msm0k99Bwge3kzWDxFuFRfog40uyXwPvOeMGmwE+7AT2/adEt2HwbsDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQsXcxWsaIS/qNQResiEwQ6sf4lMB8GA1UdIwQY
MBaAFB6gyCPDYLX4YUiS01sQPGR3T9ZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFESUk4Tmd0ZmhoU0pMVFd4QThaSGRQMWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80OTI2MTUtODE2Mi00YjM3LWJjYmIt
NWMwZDA1N2VmMmE2LzEvSHFESUk4Tmd0ZmhoU0pMVFd4QThaSGRQMWwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS80OTI2MTUtODE2Mi00YjM3LWJjYmItNWMwZDA1N2VmMmE2
LzEvSHFESUk4Tmd0ZmhoU0pMVFd4QThaSGRQMWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrbfTvfv
OMT6sLwwCK+jz/5hLuPhvmYcXK9RFsP0eOx3iQ1SPpE/bwzv4zC9HeItjfAvb2mT
VoErWAAVeDPKu+JULjZ8rtr0liapJj4EBBvmbJrM8Oc30ftFi89mvl4LgTzdtsO7
EP0DxixGhLo8D0/gdGWYUuaoxNcRrlSmgRoxUqIf88V8HznxrlojO99AeZd9uUq3
QN+ier2KwAlLWAXjG5YlVphIRklDcJIXpqKpJl8b+P0KxyYPdgIw6A9/FU8Y39Ih
/KVs7lr0PUGgCauszgPqYhoZhFGx+LrvyphxqmeS9LYb9BkzJTnj73EYVpmi8zng
CMSlsfzHWkrOYQ==
-----END CERTIFICATE-----
Generated at Fri Oct 9 20:12:12 2026 by rpki-client