Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft (raw, json)
Hash identifier: q2HpSBRtYpLgzNFF2D/ChRc2f6PaLj9hGmsY4ZeBk6s=
Subject key identifier: FF:B0:CE:E7:7C:61:30:2E:A2:4C:7D:C4:F0:CC:B7:18:B0:F9:A9:70
Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Certificate serial: 01A00137E18BCB7C828A0C6E0BB93CC8E6A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 17:00:34 +0000
Manifest this update: Fri 14 Aug 2026 17:00:34 +0000
Manifest next update: Sat 15 Aug 2026 17:00:34 +0000
Files and hashes: 1: hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl (hash: LI2RzwdxV5/WvG3AuGXzblcThe7MiOIkDVlV9KAjOx0=)
2: vFI_szTdwGut2KUofHDh3zwoi1k.roa (hash: MxrZSZTPx1kjzcHF3plautdDk7QOfOy+oz7wimPfgjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:37:e1:8b:cb:7c:82:8a:0c:6e:0b:b9:3c:c8:e6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Validity
Not Before: Aug 14 17:00:34 2026 GMT
Not After : Aug 15 17:00:34 2026 GMT
Subject: CN=ffb0cee77c61302ea24c7dc4f0ccb718b0f9a970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:6c:57:ee:d2:8e:64:15:40:50:61:a2:63:
cd:3e:e5:40:cc:41:ed:1a:c3:b6:87:31:83:e9:2e:
dd:41:82:a6:72:c3:bc:01:59:d0:0e:70:66:65:97:
4c:f0:86:cf:1a:66:4a:0f:6f:2c:55:f0:f9:9c:3b:
22:de:23:63:66:35:bc:64:7f:fa:e0:6b:80:8b:a4:
16:60:cb:99:f5:82:f0:80:03:be:4b:cd:f0:57:68:
e4:79:4a:ad:f0:26:e4:8d:2f:a4:e0:cf:a8:7f:eb:
22:a9:da:66:bb:54:fc:fb:5a:a9:ba:37:d6:dc:1c:
fd:02:b0:52:2c:2d:89:0a:14:bc:00:cf:77:ed:a0:
52:1b:d0:0e:12:7b:b4:57:3e:6c:24:78:f3:4f:8c:
03:db:20:ed:45:b3:5c:30:b7:e9:01:87:f8:35:44:
e6:8f:7d:cf:4b:09:68:0c:99:c3:ad:92:0f:19:71:
c5:75:5d:5b:17:f9:7f:f9:77:2a:9e:db:d2:b4:45:
8f:4d:71:31:b8:92:1b:69:87:aa:7d:67:38:9a:24:
81:99:80:4b:72:42:ac:fd:8b:7d:65:27:d2:3e:08:
9e:d3:da:0f:21:fe:c7:b3:fe:be:60:d9:7e:99:a5:
11:7b:00:33:0a:9a:ae:75:09:c1:4d:6f:57:26:66:
b9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B0:CE:E7:7C:61:30:2E:A2:4C:7D:C4:F0:CC:B7:18:B0:F9:A9:70
X509v3 Authority Key Identifier:
keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7a:47:3d:dc:1b:a8:f5:ea:57:93:e0:4b:ce:a8:07:61:4f:
9c:d4:33:10:e0:38:56:5f:c9:6c:01:a6:1a:cd:5d:98:c3:70:
7e:d1:c5:7d:92:d6:44:ce:ab:e7:12:97:39:88:92:40:6a:0c:
36:4f:a6:ea:13:08:2c:a2:09:f9:47:7d:f3:4e:98:b8:a2:42:
b4:03:d0:f3:2d:67:c7:34:90:e8:02:2e:5f:6d:fb:ba:38:df:
91:bb:2a:6c:2c:dc:9b:d0:3d:1a:a9:a1:90:7d:08:be:b1:4f:
68:db:ae:2b:59:77:50:cc:73:ab:5a:b1:d5:bd:9e:ac:8c:14:
16:bb:84:4c:9b:f8:c9:91:74:c6:1d:7d:4b:09:a6:a3:72:bb:
30:10:a9:02:16:8b:37:02:7e:a1:fc:bc:e6:7f:16:33:70:2e:
34:3e:64:6b:7b:22:db:93:31:e9:4d:e1:53:94:58:7e:bd:7a:
94:e4:a2:b4:81:0f:55:64:86:df:33:8f:4e:2d:02:1a:66:fc:
d5:59:bb:d4:1c:81:25:0d:ce:37:7f:d1:56:b8:fc:f2:5f:1b:
30:63:40:a5:af:ff:ec:21:40:21:67:6d:8f:7e:c0:b1:83:23:
6f:a6:d2:42:e7:a0:57:bc:be:a3:49:00:c8:85:ac:f7:ab:70:
e9:3f:84:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:26:51 2026 by rpki-client