Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.mft
File: HqtOAMDZLLUBu7IjrPA54nCR204.mft (raw, json)
Hash identifier: gxzyFhRWYypHevg5N8ABzM1sjhLk89Y9hoVzoajuKqI=
Subject key identifier: F8:09:F4:17:B4:C8:A5:90:33:E3:66:37:1B:81:63:28:9A:F1:6D:58
Authority key identifier: 1E:AB:4E:00:C0:D9:2C:B5:01:BB:B2:23:AC:F0:39:E2:70:91:DB:4E
Certificate issuer: /CN=1eab4e00c0d92cb501bbb223acf039e27091db4e
Certificate serial: 01A025B25B07F66E0707977727B5004DDEF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqtOAMDZLLUBu7IjrPA54nCR204.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.mft
Manifest number: 18DF
Signing time: Fri 21 Aug 2026 19:00:40 +0000
Manifest this update: Fri 21 Aug 2026 19:00:40 +0000
Manifest next update: Sat 22 Aug 2026 19:00:40 +0000
Files and hashes: 1: HqtOAMDZLLUBu7IjrPA54nCR204.crl (hash: 7iQlcECnBGukV5sd0XVs1+JTrB3s+aHxMD3nixVTqWE=)
2: whXPzPuEVZS_Ryn2sgcT7m9P8dA.roa (hash: JcZ3tM12MerqC0+RrqC4HBYHgE8TDlz33TUN53BsW3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqtOAMDZLLUBu7IjrPA54nCR204.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:b2:5b:07:f6:6e:07:07:97:77:27:b5:00:4d:de:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eab4e00c0d92cb501bbb223acf039e27091db4e
Validity
Not Before: Aug 21 19:00:40 2026 GMT
Not After : Aug 22 19:00:40 2026 GMT
Subject: CN=f809f417b4c8a59033e366371b8163289af16d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6a:37:fa:06:44:32:88:fd:f5:bf:e0:53:e2:
3b:e9:b0:41:82:c5:c5:12:67:17:2c:89:a2:6f:9a:
17:2a:cc:dc:68:d6:a1:50:cc:ce:af:a7:7a:4f:0c:
08:a1:d0:4f:f5:21:ab:b3:74:e6:88:b5:ea:10:28:
f7:f9:05:3c:bc:2b:ec:d9:35:ee:50:c6:9a:34:50:
60:46:9b:43:01:17:6e:c9:2f:2e:05:17:80:d2:2e:
94:3e:b1:00:eb:81:aa:91:ec:96:8d:25:ef:ae:a2:
8f:65:6d:66:7a:57:af:7e:ae:26:a3:55:b6:45:cc:
f7:ff:68:71:e8:ba:4f:e9:6a:f3:2d:b6:ce:5a:36:
65:ad:c3:77:f9:99:d7:8a:18:cb:46:69:d2:3a:96:
06:eb:b1:e2:1f:61:66:02:de:a0:7e:2c:57:e3:44:
51:f7:c9:20:42:74:07:df:23:00:28:31:0c:53:23:
58:0d:03:f4:ec:d1:a6:60:60:e5:5b:c3:d3:f9:c8:
64:24:13:4c:4b:5b:a4:47:58:1e:b8:78:31:b4:80:
5e:42:86:01:81:23:79:0e:65:39:41:93:fd:ff:e9:
2e:b6:a6:18:72:06:58:5b:7d:85:ef:45:be:0c:f1:
bc:b8:83:da:60:1b:93:47:4c:0c:d9:e3:fa:1a:6a:
47:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:09:F4:17:B4:C8:A5:90:33:E3:66:37:1B:81:63:28:9A:F1:6D:58
X509v3 Authority Key Identifier:
keyid:1E:AB:4E:00:C0:D9:2C:B5:01:BB:B2:23:AC:F0:39:E2:70:91:DB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqtOAMDZLLUBu7IjrPA54nCR204.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:55:f8:fa:db:dd:4f:52:43:b3:43:0f:28:ea:7e:2a:4a:df:
4a:96:42:27:c1:d5:71:5c:51:cc:d6:9c:e8:40:ea:e8:5d:30:
51:c9:fe:18:87:21:40:cb:e9:cd:78:85:9a:33:38:3d:1b:5a:
5f:34:ea:72:e5:b1:ca:26:73:a7:6a:b0:63:9b:9b:d7:40:20:
6a:d0:66:cf:01:1d:d1:ca:7d:32:bf:ea:90:1d:0c:3b:5a:80:
5c:69:4a:8d:7d:30:e6:b4:75:b5:79:2a:d3:6c:06:80:55:fa:
ab:a0:e7:93:9e:b4:ca:05:4a:41:e8:b5:31:ff:a8:0a:ba:20:
d4:8e:c4:00:47:c0:0c:88:99:dd:7b:2b:a6:3d:eb:79:af:c5:
1c:c0:f0:69:31:fa:cd:31:a3:8b:0e:05:2e:b9:21:61:02:dc:
14:94:38:7e:ee:ad:b9:b5:31:93:b4:3f:4e:77:60:38:92:dd:
a1:0b:84:a3:2a:5e:d7:8a:16:fa:df:69:5b:4c:11:bd:56:85:
cf:aa:63:60:2b:7d:e0:18:c4:08:73:37:f8:6f:13:57:15:a3:
1a:22:7d:84:15:fa:46:32:f7:66:8c:e1:20:ed:47:da:c5:38:
d0:39:7e:b4:d2:e4:c3:a5:c9:1a:1f:9a:ad:d0:96:ab:3d:de:
ea:04:29:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:34:28 2026 by rpki-client