Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft (raw, json)
Hash identifier: 7bEM5NZNGvzLMF+lC9FF1FTEznXarGPT9Mi3S18dLnc=
Subject key identifier: 98:9F:FF:D3:F2:45:0A:FD:A1:DD:BF:4F:49:3A:BB:6A:B9:6E:75:A6
Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Certificate serial: 01A1325903450F2F553616A8BF37DCAF7FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
Manifest number: 1AA1
Signing time: Mon 12 Oct 2026 23:00:56 +0000
Manifest this update: Mon 12 Oct 2026 23:00:56 +0000
Manifest next update: Tue 13 Oct 2026 23:00:56 +0000
Files and hashes: 1: hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl (hash: atfFYtmJq3z0s3Zy/8ymesF0ZgCTxRBgdR5DZ5HRst0=)
2: vFI_szTdwGut2KUofHDh3zwoi1k.roa (hash: MxrZSZTPx1kjzcHF3plautdDk7QOfOy+oz7wimPfgjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:59:03:45:0f:2f:55:36:16:a8:bf:37:dc:af:7f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Validity
Not Before: Oct 12 23:00:56 2026 GMT
Not After : Oct 13 23:00:56 2026 GMT
Subject: CN=989fffd3f2450afda1ddbf4f493abb6ab96e75a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:b3:6c:fe:4c:16:92:f2:60:71:76:d9:33:
cc:b7:fb:0b:b1:1a:68:f1:7d:1d:30:52:d6:d4:f7:
ef:f0:06:22:f0:9b:85:2d:15:6b:17:1a:15:ec:59:
4e:73:d9:34:fa:e7:e3:86:d6:65:96:dd:ae:c2:e0:
8d:67:d0:e0:8d:2e:9c:44:cd:fd:57:8b:e0:81:f2:
31:2c:ce:3e:54:ce:48:46:9d:52:a9:37:88:51:69:
58:fc:8e:84:7c:4f:2d:b2:f3:b6:c1:b4:d0:38:a7:
7c:50:28:d8:a0:57:df:fb:49:e0:c6:7a:96:32:7f:
36:25:6a:44:f5:5b:b8:14:cd:e4:d1:35:8a:8c:04:
d4:85:6d:4e:49:dd:44:76:3f:00:57:8e:2a:8c:2d:
80:b3:71:0b:8c:80:ef:75:8a:b5:e4:aa:3e:54:31:
85:04:b9:0a:32:f7:3b:fe:fc:0c:9c:ad:a7:6d:7d:
91:ee:53:38:42:c8:63:21:a9:2f:4b:b3:f1:9f:54:
59:f5:98:8c:2f:82:84:01:dd:4f:90:ec:a1:b0:65:
70:9d:5e:e2:97:5b:c0:50:f2:1c:ca:e8:8b:e5:7d:
28:76:f1:cc:b5:ad:f7:c6:e8:62:99:78:4f:dc:09:
51:a7:27:05:63:96:34:87:a3:97:1c:de:d9:7d:ea:
5d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9F:FF:D3:F2:45:0A:FD:A1:DD:BF:4F:49:3A:BB:6A:B9:6E:75:A6
X509v3 Authority Key Identifier:
keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:38:21:f3:a0:b4:9a:38:07:4c:ba:e5:41:e5:93:50:1f:f1:
42:10:32:2d:5a:6f:35:b1:7f:86:89:51:82:99:f8:c1:a9:37:
d9:62:0f:5d:05:45:02:17:fe:0d:6d:3c:5d:b0:13:c3:68:c4:
43:24:55:89:80:36:2d:09:29:5f:4f:e1:b2:37:7b:ae:0b:3b:
75:af:3e:6c:ce:43:63:11:88:8e:1b:fa:8a:e9:bd:5d:8e:4b:
f7:b8:1d:31:78:45:78:0c:ee:79:e4:c7:d2:c6:a4:59:88:29:
f1:e8:23:9f:87:71:5c:04:ae:8d:f3:e8:96:64:74:47:1a:d1:
9b:4a:24:04:22:81:e6:d6:a9:b0:b7:f9:a8:74:1f:f7:fb:55:
71:70:a2:a3:b8:6d:6d:39:8b:30:e1:d2:f8:fd:2e:8c:a8:bc:
c5:53:0a:ad:5a:68:90:85:fe:9c:9e:63:92:27:17:b9:e4:f2:
62:01:a9:2e:c0:ed:12:b2:d1:8c:5a:1d:79:a2:38:76:a9:44:
6f:53:cf:ed:03:5f:9f:ec:2a:02:66:46:ef:4a:1a:ba:f3:05:
f2:48:d0:c5:ad:7c:f0:50:ec:26:58:cc:cf:6f:a0:b4:b6:e8:
f2:49:64:3b:7b:02:27:50:c2:c3:94:cf:a6:57:3d:3c:b0:b5:
a4:4b:42:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:16:11 2026 by rpki-client