Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
File: HQrO6hf1PecI-ac6vAyHFk0gfQg.mft (raw, json)
Hash identifier: JO4hznuB70BBrsCkrA2Z0LEO8X+wq05+kvI8dnsCyY4=
Subject key identifier: 49:AE:AB:D9:7A:D6:C4:B6:E9:65:89:8F:7B:1A:43:BB:7F:CD:5F:4C
Authority key identifier: 1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
Certificate issuer: /CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Certificate serial: 019FAC0840D3F9F57729AD02E88AA997A838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
Manifest number: 16F8
Signing time: Wed 29 Jul 2026 04:00:49 +0000
Manifest this update: Wed 29 Jul 2026 04:00:49 +0000
Manifest next update: Thu 30 Jul 2026 04:00:49 +0000
Files and hashes: 1: HQrO6hf1PecI-ac6vAyHFk0gfQg.crl (hash: ySVTElqE+iFD6lob/UOqr1U6R0YN1zXtCYOE/Nbjbls=)
2: jYlsueQe6bTuxJo3Pao6U7_lbjM.roa (hash: xljjWi7Hj8DkN9QHcryj+ylFV/KQmtfdUgA8aZcK8mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:40:d3:f9:f5:77:29:ad:02:e8:8a:a9:97:a8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Validity
Not Before: Jul 29 04:00:49 2026 GMT
Not After : Jul 30 04:00:49 2026 GMT
Subject: CN=49aeabd97ad6c4b6e965898f7b1a43bb7fcd5f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:50:e1:99:a1:87:f6:bf:de:c7:75:f5:1f:
78:89:93:87:33:2d:b8:ad:bb:24:d8:53:35:03:59:
3b:33:d6:7a:36:5a:ac:5c:e1:6c:e7:b3:ac:01:57:
4f:11:c3:69:de:35:94:f2:20:45:b5:d6:c9:54:50:
f8:bf:37:62:ee:2c:bd:ce:7f:7e:c4:d0:4f:74:8e:
d3:32:4e:31:86:51:64:d9:d9:3d:50:e6:a8:25:cc:
32:31:b1:8d:7b:0e:87:c7:08:44:6f:c5:a3:05:63:
55:f8:6f:b2:c9:f9:bd:b1:5a:c8:d2:57:20:d7:2a:
01:6f:4a:0d:0f:63:b6:08:47:78:cd:dd:f9:64:ce:
29:15:69:fc:d7:84:1c:5b:e9:f9:d7:a8:b8:70:a7:
0f:f4:4e:1b:fc:bc:57:d4:26:44:d6:10:23:4d:5d:
a8:55:c4:e5:82:5c:12:ff:b9:41:13:ac:22:9a:6e:
60:4e:b8:8d:a4:7f:bc:63:7c:ee:43:22:3e:03:bb:
9a:8e:68:04:8f:31:1a:6a:21:65:21:8f:eb:5c:66:
8a:b1:81:5c:db:ae:ef:4c:d0:2a:15:90:b6:0b:b9:
05:1d:96:ea:5d:6f:96:27:18:1d:48:f1:a2:fc:19:
60:cd:9e:25:90:e7:71:2f:99:55:82:20:8f:45:b9:
ef:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AE:AB:D9:7A:D6:C4:B6:E9:65:89:8F:7B:1A:43:BB:7F:CD:5F:4C
X509v3 Authority Key Identifier:
keyid:1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3d:46:90:23:61:54:81:53:04:d9:08:8f:12:88:56:f6:41:
69:85:ad:5e:be:cb:9d:84:c5:e9:57:cb:f4:75:3f:a2:db:08:
3f:2b:b7:1b:b2:86:97:cf:a5:f4:19:d1:fa:e5:bc:27:9e:c9:
fa:18:de:6a:77:8f:a1:ea:41:60:df:d3:a6:7c:7f:db:dc:5d:
b8:e5:04:85:f2:24:cf:c4:58:7c:2a:66:d8:02:84:f7:8b:be:
d6:7e:d1:10:fa:08:aa:9a:04:6c:ba:86:2e:82:c8:23:1e:d3:
d0:b3:00:4f:03:e5:0e:da:47:c6:62:91:a9:00:12:2d:63:26:
b2:a3:58:3d:02:78:76:c7:de:56:6b:4f:03:b9:fd:dc:89:29:
4f:ac:f7:a5:8c:9f:30:a6:a9:95:ed:7a:70:ff:e9:2a:59:be:
05:22:a6:39:d0:86:6a:92:16:0a:be:09:9d:04:17:58:8e:5d:
96:fd:ad:47:f3:7c:9c:22:af:32:7b:95:27:da:3d:61:fa:00:
e1:3d:3f:21:eb:60:7f:30:b3:fc:ce:8e:d8:c8:82:58:e7:8e:
b4:1f:2a:4a:07:15:4a:23:fb:f8:45:fa:50:8e:fc:39:02:88:
23:04:d5:4d:bb:5b:76:1e:1c:84:c1:c2:af:96:df:32:d4:01:
7a:ce:d9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:43:33 2026 by rpki-client