Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.mft
File: hatrqgL7PEIkFGQC1xNTAtSpM5w.mft (raw, json)
Hash identifier: 4TkWopily7KsD2kFH3Ev4Ll7GNjiFxccZayL8SR8cM4=
Subject key identifier: E2:55:19:0F:31:4F:40:EA:B9:12:2F:39:CF:FA:28:7A:A1:7F:B2:0C
Authority key identifier: 85:AB:6B:AA:02:FB:3C:42:24:14:64:02:D7:13:53:02:D4:A9:33:9C
Certificate issuer: /CN=85ab6baa02fb3c4224146402d7135302d4a9339c
Certificate serial: 019FAC766E1AC4F0F4C305A0A86B8EC147E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hatrqgL7PEIkFGQC1xNTAtSpM5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:10 +0000
Manifest this update: Wed 29 Jul 2026 06:01:10 +0000
Manifest next update: Thu 30 Jul 2026 06:01:10 +0000
Files and hashes: 1: Dma-Z-13sGBzUFZyDKOYpiVjyWI.roa (hash: n6evIQhFcEJ8otT9mtnc5btiAVJv5xnXSb58S3z8lOg=)
2: hatrqgL7PEIkFGQC1xNTAtSpM5w.crl (hash: jcH+R/Dy0BoS9tt8ys87oAk3WCCaQQXccQQiop2siEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/hatrqgL7PEIkFGQC1xNTAtSpM5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:6e:1a:c4:f0:f4:c3:05:a0:a8:6b:8e:c1:47:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85ab6baa02fb3c4224146402d7135302d4a9339c
Validity
Not Before: Jul 29 06:01:10 2026 GMT
Not After : Jul 30 06:01:10 2026 GMT
Subject: CN=e255190f314f40eab9122f39cffa287aa17fb20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:d6:02:ec:89:84:50:04:36:83:eb:bc:0a:
88:a8:7a:37:79:26:33:75:85:79:84:f8:fc:66:f3:
57:7e:75:55:fd:99:99:82:7b:0e:d0:50:4e:ca:ef:
cd:f2:97:0d:32:eb:7d:d5:17:d1:0d:c9:6f:ac:ad:
b1:c4:43:74:4a:74:8a:f4:4c:b2:b4:52:15:cf:94:
fc:51:e1:d7:a6:2b:40:95:b4:21:20:37:cd:5b:ec:
ec:1b:58:18:e1:d8:86:e8:89:02:aa:8d:4d:56:93:
22:8a:e0:11:98:d0:4d:e3:0c:02:91:d8:8d:36:3f:
02:59:a0:e4:47:99:ad:aa:d6:ed:6d:95:ac:b8:3e:
d4:32:e4:d4:96:6b:2e:a8:4c:4a:99:48:0b:83:45:
46:dd:63:67:21:4d:b3:43:77:00:8c:46:95:ed:6c:
ea:7f:03:37:81:94:25:63:b4:75:81:59:f6:e4:47:
c8:10:60:10:04:ce:61:25:b3:e7:ab:d6:e7:9f:3a:
9d:b1:ed:ae:23:61:da:dc:d3:72:ab:83:ab:17:ea:
71:e8:c2:df:0d:02:87:8e:10:32:ce:ff:47:4f:ea:
10:8d:72:b1:65:c0:60:c4:df:a3:e4:5a:de:49:8c:
2d:cc:f0:15:57:99:a1:cc:83:66:83:b6:6b:14:ce:
8c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:55:19:0F:31:4F:40:EA:B9:12:2F:39:CF:FA:28:7A:A1:7F:B2:0C
X509v3 Authority Key Identifier:
keyid:85:AB:6B:AA:02:FB:3C:42:24:14:64:02:D7:13:53:02:D4:A9:33:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hatrqgL7PEIkFGQC1xNTAtSpM5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5c:43:ac:90:cc:b9:11:24:64:0b:ec:57:df:a6:67:e4:02:
23:a8:60:63:64:a8:52:01:8e:80:87:78:ae:7c:3e:79:63:b1:
b7:fc:e0:01:f6:1c:44:8c:26:95:e2:49:54:78:f4:3c:e1:51:
79:d1:33:9e:0a:6e:00:26:cf:21:81:46:e8:40:b2:a2:c5:4f:
6a:36:b4:44:3f:ef:f3:15:bb:89:30:9b:e0:a6:82:f9:34:73:
6d:4f:3a:91:35:ed:34:c5:01:00:23:36:17:d3:97:bd:9e:b7:
05:cb:c3:fa:12:1d:10:ac:8e:2a:09:2c:e9:a5:3d:9a:dc:7b:
3f:8c:bb:94:c1:5e:c9:19:4d:b8:68:e4:42:a4:8e:50:35:f1:
3f:bb:89:f3:66:e4:a4:c3:74:07:3a:f1:12:03:a4:7e:de:05:
6a:9c:f2:3e:c5:79:da:42:5d:95:d1:1b:53:a7:5b:18:05:c3:
84:2e:08:e7:e1:78:3e:a1:f8:90:82:98:e1:cd:03:61:f6:97:
9b:5b:cb:46:6a:5b:09:50:17:36:1d:ee:a7:0c:c6:db:9e:bf:
f0:17:ca:12:f8:40:1c:a4:d3:27:5d:84:9e:7b:f5:5d:66:97:
a7:ea:9d:b1:ab:52:6d:d6:a6:56:90:ac:e9:18:e6:f1:3b:67:
76:5b:24:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:52:26 2026 by rpki-client