Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft (raw, json)
Hash identifier: fbzoeePg74IsoP530ZuYPDsPl+ylFRS3NDvmTEjzZg4=
Subject key identifier: 76:6C:92:80:B7:55:E1:D7:1F:6C:2D:9D:59:B8:CF:EF:82:90:6E:54
Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Certificate serial: 01A13447B9F0BC69115D02F301A5C3AD6134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
Manifest number: 1AA2
Signing time: Tue 13 Oct 2026 08:01:18 +0000
Manifest this update: Tue 13 Oct 2026 08:01:18 +0000
Manifest next update: Wed 14 Oct 2026 08:01:18 +0000
Files and hashes: 1: hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl (hash: BVcRsgz/S5JDfLgaS2jcGmBs+nQiA0YZCbZFNyNY1fI=)
2: vFI_szTdwGut2KUofHDh3zwoi1k.roa (hash: MxrZSZTPx1kjzcHF3plautdDk7QOfOy+oz7wimPfgjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:47:b9:f0:bc:69:11:5d:02:f3:01:a5:c3:ad:61:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Validity
Not Before: Oct 13 08:01:18 2026 GMT
Not After : Oct 14 08:01:18 2026 GMT
Subject: CN=766c9280b755e1d71f6c2d9d59b8cfef82906e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:32:af:b9:92:7c:19:15:6a:1f:f5:c4:0a:4f:
0e:84:fe:d0:0f:9c:34:da:b8:31:60:a1:ad:78:fe:
10:48:a5:19:a6:fc:40:5c:e7:de:2f:87:5e:2c:6c:
8a:34:44:28:b7:64:81:3d:a0:12:18:40:f8:36:10:
f8:0e:a7:77:a8:25:36:de:b6:8e:38:8a:fa:21:4a:
b6:54:64:8c:73:07:55:90:9a:03:bd:2b:e0:ae:6d:
92:38:ee:6f:7a:b4:1b:6d:4f:bb:a8:10:77:9e:ce:
9d:b4:ce:a0:b9:95:9b:76:b4:03:87:cd:95:2f:ec:
3b:43:fb:2b:79:ff:43:c6:09:71:c5:f9:c5:df:fa:
60:c0:67:c8:b8:47:29:93:e1:5f:6c:54:52:c0:8e:
f7:ea:13:e1:9c:a8:11:b7:5f:a3:de:1d:ed:e6:16:
96:a0:8f:a3:94:17:6a:74:32:3b:0a:70:cc:63:2a:
3b:df:43:78:6b:38:b9:07:4c:27:bc:bc:e4:f8:17:
d8:36:36:f6:b1:cb:41:b9:88:c7:dc:72:14:ba:7b:
5c:35:32:5e:82:0b:69:82:bb:3a:bd:e4:90:05:02:
61:f1:e5:cb:0b:42:9d:be:31:90:12:77:c0:dc:9d:
b3:66:68:bd:f0:1d:e8:ef:b7:07:f9:85:93:1c:72:
9f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6C:92:80:B7:55:E1:D7:1F:6C:2D:9D:59:B8:CF:EF:82:90:6E:54
X509v3 Authority Key Identifier:
keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ab:3d:66:f3:3e:9d:8c:65:74:c6:91:e7:8e:7b:a1:57:59:
d3:7c:01:07:76:d3:ab:fc:f1:c2:32:22:d7:41:8d:20:10:42:
c0:55:a5:91:a4:6b:12:a7:ff:9e:51:db:d9:6b:94:ed:d7:8b:
27:26:45:ce:ae:4e:e3:fb:77:5d:68:53:99:10:f0:e8:67:63:
49:ca:f9:3b:fd:aa:a6:e2:fd:02:6b:f3:9b:e2:47:e8:32:e8:
a6:c6:7a:0b:14:70:ff:7f:7d:78:60:30:4b:e6:8f:ae:10:ec:
24:8e:ed:49:46:af:3d:94:d5:bc:4d:bc:21:e4:fe:82:87:f8:
cd:26:7f:8d:35:fc:82:3d:f6:71:8f:c4:97:c4:4a:14:0e:c7:
60:92:b8:da:95:cb:e5:bb:ca:82:06:51:2a:7a:ae:ab:6c:2f:
15:92:5d:08:2f:78:8d:a5:dc:8d:88:c4:ed:9e:ce:e4:6c:14:
87:19:92:49:08:fd:70:e3:93:9e:87:81:e7:47:82:3e:ef:35:
15:b8:86:9e:6a:74:7b:63:cb:89:d1:37:07:b4:71:f4:cd:66:
4b:22:02:10:a6:ce:cd:d4:89:f3:0d:7d:11:a5:8c:69:44:0d:
49:4f:b8:ce:1c:61:26:fd:0b:fc:cd:d8:66:bb:6f:1f:c9:43:
0d:e2:19:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE0R7nwvGkRXQLzAaXDrWE0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MDRlYmY5ZGIxNzEwYTQ3YmFlNDUwOGNkYWY4MTMxZTE2
NzRhNTQwHhcNMjYxMDEzMDgwMTE4WhcNMjYxMDE0MDgwMTE4WjAzMTEwLwYDVQQD
Eyg3NjZjOTI4MGI3NTVlMWQ3MWY2YzJkOWQ1OWI4Y2ZlZjgyOTA2ZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DKvuZJ8GRVqH/XECk8OhP7QD5w0
2rgxYKGteP4QSKUZpvxAXOfeL4deLGyKNEQot2SBPaASGED4NhD4Dqd3qCU23raO
OIr6IUq2VGSMcwdVkJoDvSvgrm2SOO5verQbbU+7qBB3ns6dtM6guZWbdrQDh82V
L+w7Q/sref9DxglxxfnF3/pgwGfIuEcpk+FfbFRSwI736hPhnKgRt1+j3h3t5haW
oI+jlBdqdDI7CnDMYyo730N4azi5B0wnvLzk+BfYNjb2sctBuYjH3HIUuntcNTJe
ggtpgrs6veSQBQJh8eXLC0KdvjGQEnfA3J2zZmi98B3o77cH+YWTHHKfZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZskoC3VeHXH2wtnVm4z++CkG5UMB8GA1UdIwQY
MBaAFIUE6/nbFxCke65FCM2vgTHhZ0pUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83ZWZlMDEtZWM3NC00MGFjLWEyMzgt
YTliMWRmNDRjZTJmLzEvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi83ZWZlMDEtZWM3NC00MGFjLWEyMzgtYTliMWRmNDRjZTJm
LzEvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADas9ZvM+
nYxldMaR5457oVdZ03wBB3bTq/zxwjIi10GNIBBCwFWlkaRrEqf/nlHb2WuU7deL
JyZFzq5O4/t3XWhTmRDw6GdjScr5O/2qpuL9Amvzm+JH6DLopsZ6CxRw/399eGAw
S+aPrhDsJI7tSUavPZTVvE28IeT+gof4zSZ/jTX8gj32cY/El8RKFA7HYJK42pXL
5bvKggZRKnquq2wvFZJdCC94jaXcjYjE7Z7O5GwUhxmSSQj9cOOTnoeB50eCPu81
FbiGnmp0e2PLidE3B7Rx9M1mSyICEKbOzdSJ8w19EaWMaUQNSU+4zhxhJv0L/M3Y
ZrtvH8lDDeIZAg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 17:32:59 2026 by rpki-client