Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.mft
File: hatrqgL7PEIkFGQC1xNTAtSpM5w.mft (raw, json)
Hash identifier: SzUdpeYyYbCYmVWJJs4DK/7LiGfX3mTe4TXah1+dKLE=
Subject key identifier: 26:C8:F0:7B:1F:0E:7D:90:C0:BF:04:F3:2A:7A:C3:E2:04:6B:A0:63
Authority key identifier: 85:AB:6B:AA:02:FB:3C:42:24:14:64:02:D7:13:53:02:D4:A9:33:9C
Certificate issuer: /CN=85ab6baa02fb3c4224146402d7135302d4a9339c
Certificate serial: 01A12CC584DD6AF893B19A35F6E5CD453F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hatrqgL7PEIkFGQC1xNTAtSpM5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.mft
Manifest number: 0115
Signing time: Sun 11 Oct 2026 21:01:44 +0000
Manifest this update: Sun 11 Oct 2026 21:01:44 +0000
Manifest next update: Mon 12 Oct 2026 21:01:44 +0000
Files and hashes: 1: Dma-Z-13sGBzUFZyDKOYpiVjyWI.roa (hash: n6evIQhFcEJ8otT9mtnc5btiAVJv5xnXSb58S3z8lOg=)
2: hatrqgL7PEIkFGQC1xNTAtSpM5w.crl (hash: VvkdSpVJ1cjL6BTFspWREfqjNmgapiQ3ynhFFCu6Fno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/hatrqgL7PEIkFGQC1xNTAtSpM5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 21:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:c5:84:dd:6a:f8:93:b1:9a:35:f6:e5:cd:45:3f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85ab6baa02fb3c4224146402d7135302d4a9339c
Validity
Not Before: Oct 11 21:01:44 2026 GMT
Not After : Oct 12 21:01:44 2026 GMT
Subject: CN=26c8f07b1f0e7d90c0bf04f32a7ac3e2046ba063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d1:05:c2:39:95:69:92:eb:00:db:1b:f9:f6:
72:82:f1:90:fb:be:5f:84:ea:07:76:43:d0:14:0d:
e6:b9:86:4c:a7:ed:55:8f:07:e6:76:89:e0:e8:04:
fc:65:89:15:45:64:c5:e0:cc:b3:8d:e2:f4:8c:3f:
f8:97:be:70:2f:5d:26:33:4e:dd:0e:27:c9:1f:8d:
20:88:1b:5a:42:92:63:4f:9e:0d:52:e6:a1:8e:ea:
d7:24:c5:40:fb:ff:24:79:06:4c:0c:71:31:e8:11:
12:cf:01:87:94:37:25:f9:b5:2a:8b:d3:e8:19:eb:
ef:91:a5:b8:ee:90:0e:00:b1:cb:a0:15:0f:54:22:
f1:ba:bf:33:14:4c:73:df:5b:f3:3b:35:7a:56:36:
18:dd:25:a9:c3:5c:69:93:dc:97:4b:d4:05:ff:7e:
7b:83:61:ff:e1:bb:de:ea:52:49:d5:3b:91:d2:29:
27:c2:65:aa:87:3a:65:8e:7e:f4:a1:13:c3:ef:34:
ba:01:9c:bf:44:f8:6f:71:a7:42:3d:da:3a:b5:57:
8d:7c:11:4c:25:b0:a6:2f:f3:28:7c:01:cc:f5:a3:
4f:14:5e:97:43:6e:19:f1:f9:0b:ac:b9:b7:70:cf:
e8:49:13:1e:f2:9a:ba:8b:c2:a1:b3:42:5e:18:d2:
50:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C8:F0:7B:1F:0E:7D:90:C0:BF:04:F3:2A:7A:C3:E2:04:6B:A0:63
X509v3 Authority Key Identifier:
keyid:85:AB:6B:AA:02:FB:3C:42:24:14:64:02:D7:13:53:02:D4:A9:33:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hatrqgL7PEIkFGQC1xNTAtSpM5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:f0:a1:23:95:30:be:51:27:a8:b0:78:9b:36:c8:78:0b:1e:
33:b6:8b:1b:63:28:b7:7f:c8:08:1b:df:a2:e3:2c:2a:33:bf:
fe:ab:25:11:2f:11:56:56:43:3e:7f:79:ec:4d:31:b5:d4:b6:
e2:bf:55:f5:fe:0a:51:65:75:93:a7:4c:33:1e:70:45:42:c8:
ad:c7:a4:89:c0:f8:63:63:74:0d:82:b1:b2:f3:5e:ae:47:2a:
39:23:59:c1:01:16:98:b5:45:c2:26:bf:a2:ca:d7:b8:47:f3:
3a:90:26:0b:e4:b7:a1:fd:0a:a5:eb:14:f4:e8:ae:05:20:fb:
81:72:a1:d4:6d:b3:76:2b:15:4f:77:53:38:03:73:e1:0c:c8:
9f:f9:b1:3e:22:f3:bd:01:65:bc:31:ac:64:48:8c:7e:11:82:
0b:91:86:0e:b1:2b:2b:4f:af:3a:cb:0f:91:fd:40:df:b6:40:
8a:76:65:7a:22:38:3c:d8:74:24:d7:bb:d3:0a:1c:21:9c:32:
9f:2f:13:57:54:76:11:79:21:ba:7a:8c:ad:70:8a:c4:18:a2:
fc:46:4b:b5:fc:e2:7d:6d:e4:de:34:1a:59:bf:af:5c:8b:5a:
8d:07:66:06:66:a4:9f:0d:3b:73:71:8a:92:aa:1a:36:74:d6:
cd:d6:69:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 06:30:03 2026 by rpki-client