Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
File: HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft (raw, json)
Hash identifier: reSxPQg+PyXR03nTTzZEBBSNrz0SMQP9O0PGZASFQBU=
Subject key identifier: 1B:4A:F1:3E:68:5C:9F:9A:8D:60:DE:C3:B2:A6:BE:99:B3:00:1E:85
Authority key identifier: 1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B
Certificate issuer: /CN=1d0260406e837ae38380fcc8d992b93d0de1a83b
Certificate serial: 01A1212F45BCB528FD6AD17D25B51FDE11DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
Manifest number: 0FB7
Signing time: Fri 09 Oct 2026 15:01:48 +0000
Manifest this update: Fri 09 Oct 2026 15:01:48 +0000
Manifest next update: Sat 10 Oct 2026 15:01:48 +0000
Files and hashes: 1: HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl (hash: oeD4YPJ5dhTILiCd5t/Csuc18mv5P6BcIVPxhF0/534=)
2: bdOQfAWdL7wiwVEQoYOuUBY_f9o.roa (hash: nNRgBnyPBnuWyk/W/uELLwEd7uoijhFF49TNbx1XS78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2f:45:bc:b5:28:fd:6a:d1:7d:25:b5:1f:de:11:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0260406e837ae38380fcc8d992b93d0de1a83b
Validity
Not Before: Oct 9 15:01:48 2026 GMT
Not After : Oct 10 15:01:48 2026 GMT
Subject: CN=1b4af13e685c9f9a8d60dec3b2a6be99b3001e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:da:de:58:fd:8f:dc:f9:da:0b:c0:f0:94:
46:2f:27:d8:7d:1a:b6:62:c5:f7:61:70:46:36:c8:
07:21:f2:02:6a:2e:7a:c4:d2:dc:ab:56:c2:72:a3:
cc:0e:08:97:7d:bb:66:08:e5:e0:d9:5d:24:6d:6a:
67:77:90:37:55:f5:5f:d9:10:ee:be:81:50:c5:e4:
7b:c9:fe:f1:ac:c0:61:66:0c:59:85:f1:bf:4a:d9:
0b:52:24:ec:da:de:e7:94:4e:a0:a8:f7:48:91:9b:
55:f7:95:46:80:ac:f0:71:a7:9d:0c:ff:65:c3:ee:
d9:c8:4c:71:f1:bd:8a:a4:99:2a:cf:f7:23:48:ca:
02:d1:bf:a0:25:f9:06:6c:19:72:b7:70:a1:ac:5a:
6d:5f:3c:de:06:0f:e5:c6:47:7e:59:b8:76:87:97:
a1:45:15:a6:1e:42:6d:d0:d4:cb:8e:2d:01:a4:ed:
b3:97:31:e5:f1:cd:9a:7b:98:8f:17:0e:55:e2:fe:
56:7a:a8:ac:cd:cd:5c:f6:13:71:20:cc:2e:9f:e0:
35:6c:a5:9e:28:87:3f:bd:a9:5d:c3:ee:58:91:52:
8c:11:45:b9:03:20:ba:99:69:a4:46:ba:7a:f2:31:
73:ac:4e:e1:89:62:e0:65:00:c9:c8:ed:90:1f:f4:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4A:F1:3E:68:5C:9F:9A:8D:60:DE:C3:B2:A6:BE:99:B3:00:1E:85
X509v3 Authority Key Identifier:
keyid:1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:11:71:16:fd:c3:ca:47:5b:ba:c4:61:eb:18:16:48:9a:c2:
24:74:a8:ca:f4:6b:54:ac:24:7a:7e:ad:48:12:c9:8b:fc:64:
49:2b:6c:54:c7:b4:c8:05:3f:a8:24:36:2d:30:3a:d5:b5:d5:
04:61:46:17:e5:70:77:02:ca:2f:a8:b0:55:3b:e5:28:8b:90:
f8:9d:97:93:e8:6c:1f:8b:60:35:8b:d8:eb:2f:25:d1:c9:75:
c9:fe:52:21:ed:56:67:87:57:27:1c:56:47:bb:d8:30:b9:3d:
51:a5:87:9d:a3:33:3b:64:39:59:9a:a0:1e:66:88:90:e2:f9:
5a:d4:3b:b1:08:c5:d2:b2:9d:b7:e2:55:63:9a:ba:ec:14:a2:
db:cb:0f:24:d6:9e:fc:6d:9f:6f:b4:bc:34:d3:cf:d8:35:9e:
4d:b7:e8:6f:89:f3:27:47:48:6e:90:f1:ad:7b:be:43:6e:b1:
42:b3:d3:9f:5c:31:83:9d:c9:ff:1c:0c:69:1f:7b:38:a1:d0:
e9:d8:d6:27:e4:45:fe:b2:fa:f4:a8:9b:2b:65:4c:0f:30:09:
35:ab:f9:90:fa:01:ec:c8:77:08:d7:3c:16:be:be:b6:60:18:
c4:fb:4b:12:bf:ae:c1:98:f9:e6:25:1f:cd:c1:b1:cb:f6:d3:
c3:61:60:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:16:11 2026 by rpki-client