Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
File: HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft (raw, json)
Hash identifier: oX//DSIb66crVrnc3LoR4dq3nQz7cO+ffBAWLw3LEMA=
Subject key identifier: 17:F0:51:3F:BE:22:CA:C6:81:0F:6F:27:8E:E9:02:BC:7F:C2:3A:E1
Authority key identifier: 1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
Certificate issuer: /CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Certificate serial: 01A11CAC777F7B85701283F7A5A364ED5636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
Manifest number: 1A95
Signing time: Thu 08 Oct 2026 18:00:26 +0000
Manifest this update: Thu 08 Oct 2026 18:00:26 +0000
Manifest next update: Fri 09 Oct 2026 18:00:26 +0000
Files and hashes: 1: HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl (hash: BaxknpLRYxzJ0fvRO50tAbbN3HkGLpbQActtUfRIQkg=)
2: oIEkw3PCXr1UYdRnKr9q4Q6XWcs.roa (hash: v1OkVWqraYOFjsEZ3LFnKjFEiGungWJLb2B2UAHBg6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:ac:77:7f:7b:85:70:12:83:f7:a5:a3:64:ed:56:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Validity
Not Before: Oct 8 18:00:26 2026 GMT
Not After : Oct 9 18:00:26 2026 GMT
Subject: CN=17f0513fbe22cac6810f6f278ee902bc7fc23ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b7:e5:a2:df:d5:6a:dd:dd:82:eb:e7:1f:46:
d5:f3:9d:45:ab:6b:c8:ae:31:47:63:cb:b3:94:65:
91:2d:85:6f:92:cc:06:06:da:79:9b:77:12:a8:7c:
26:ce:2a:6f:c2:d9:96:71:e7:42:de:6d:fa:a7:f7:
d8:fd:db:15:a0:aa:35:a0:95:fc:0a:21:de:0c:b1:
1f:7d:fe:d9:a3:38:9a:3b:89:03:06:31:d7:96:c8:
24:59:91:c9:45:eb:1f:eb:ea:0f:fe:4d:e2:de:57:
b5:80:9c:d7:19:37:56:99:f1:67:bb:db:b4:3f:f8:
3c:a7:f6:01:7b:e1:7c:88:14:fa:00:8a:2a:0e:a1:
ba:79:78:c9:b2:5f:1d:c2:22:e3:ec:89:2b:33:f4:
99:fe:e9:36:14:23:2a:9c:7f:0c:9b:b7:6a:1d:64:
3e:5a:c3:2e:05:18:f6:f3:8d:b4:9e:db:b4:f0:44:
9d:9d:52:1e:42:18:b1:80:3a:f8:9a:d3:09:e4:18:
72:00:03:14:21:f5:a5:59:dc:52:01:ed:5c:ec:d4:
fa:7a:d8:cf:e8:7d:98:9b:9b:a4:a9:02:e0:d5:4f:
a1:97:a3:79:26:b4:35:b8:17:59:28:ce:7b:bc:44:
89:6d:04:e6:fb:ca:74:3c:8a:5f:9c:d4:50:57:c2:
6b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F0:51:3F:BE:22:CA:C6:81:0F:6F:27:8E:E9:02:BC:7F:C2:3A:E1
X509v3 Authority Key Identifier:
keyid:1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b4:b3:52:87:04:d1:bb:d1:e0:e1:fe:be:8d:34:0f:ca:ab:
67:e4:e1:d9:1e:4f:d2:44:9a:f3:da:df:c7:f3:1a:42:c8:a2:
8d:a8:cb:cb:1a:6e:6e:8c:44:c2:ac:b1:ef:91:61:46:15:86:
4d:ff:4f:cf:db:66:33:8f:0d:59:ac:2d:96:17:c4:e0:16:b4:
be:ff:58:ca:0f:41:ca:32:d1:25:6c:38:20:39:b9:a4:d4:9b:
54:d7:2c:9e:cb:ce:6b:d9:b7:c7:fc:74:26:38:86:b1:ca:cb:
19:ff:f7:b1:94:a8:40:1b:36:b6:6e:2f:c2:31:99:b7:83:8f:
d8:24:c8:0e:98:8e:ac:64:f9:e3:fa:be:62:9c:38:f8:e7:dd:
3b:29:7f:ee:16:c1:86:29:62:23:33:b6:95:07:c7:3e:4a:9c:
d1:cf:7e:b5:9f:35:f6:ba:1e:05:6d:21:d1:98:b2:3e:0d:a4:
2c:9a:eb:bb:f2:05:a0:df:1a:60:2a:c1:9a:ff:6a:f9:f1:0c:
38:31:b1:ef:b4:8d:77:c0:50:c3:2b:db:23:2a:c2:bc:71:c2:
67:8b:7e:ef:78:a0:c7:c8:18:35:f9:77:9b:99:1a:f6:59:1f:
59:ec:df:e1:77:68:8d:22:c7:d3:39:8b:54:3c:5e:70:45:f2:
8e:fa:dd:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEcrHd/e4VwEoP3paNk7VY2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTBjODIzYzM2MGI1Zjg2MTQ4OTJkMzViMTAzYzY0Nzc0
ZmQ2NWQwHhcNMjYxMDA4MTgwMDI2WhcNMjYxMDA5MTgwMDI2WjAzMTEwLwYDVQQD
EygxN2YwNTEzZmJlMjJjYWM2ODEwZjZmMjc4ZWU5MDJiYzdmYzIzYWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7flot/Vat3dguvnH0bV851Fq2vI
rjFHY8uzlGWRLYVvkswGBtp5m3cSqHwmzipvwtmWcedC3m36p/fY/dsVoKo1oJX8
CiHeDLEfff7ZoziaO4kDBjHXlsgkWZHJResf6+oP/k3i3le1gJzXGTdWmfFnu9u0
P/g8p/YBe+F8iBT6AIoqDqG6eXjJsl8dwiLj7IkrM/SZ/uk2FCMqnH8Mm7dqHWQ+
WsMuBRj28420ntu08ESdnVIeQhixgDr4mtMJ5BhyAAMUIfWlWdxSAe1c7NT6etjP
6H2Ym5ukqQLg1U+hl6N5JrQ1uBdZKM57vESJbQTm+8p0PIpfnNRQV8JrswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfwUT++IsrGgQ9vJ47pArx/wjrhMB8GA1UdIwQY
MBaAFB6gyCPDYLX4YUiS01sQPGR3T9ZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFESUk4Tmd0ZmhoU0pMVFd4QThaSGRQMWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80OTI2MTUtODE2Mi00YjM3LWJjYmIt
NWMwZDA1N2VmMmE2LzEvSHFESUk4Tmd0ZmhoU0pMVFd4QThaSGRQMWwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS80OTI2MTUtODE2Mi00YjM3LWJjYmItNWMwZDA1N2VmMmE2
LzEvSHFESUk4Tmd0ZmhoU0pMVFd4QThaSGRQMWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLSzUocE
0bvR4OH+vo00D8qrZ+Th2R5P0kSa89rfx/MaQsiijajLyxpuboxEwqyx75FhRhWG
Tf9Pz9tmM48NWawtlhfE4Ba0vv9Yyg9ByjLRJWw4IDm5pNSbVNcsnsvOa9m3x/x0
JjiGscrLGf/3sZSoQBs2tm4vwjGZt4OP2CTIDpiOrGT54/q+Ypw4+OfdOyl/7hbB
hiliIzO2lQfHPkqc0c9+tZ819roeBW0h0ZiyPg2kLJrru/IFoN8aYCrBmv9q+fEM
ODGx77SNd8BQwyvbIyrCvHHCZ4t+73igx8gYNfl3m5ka9lkfWezf4XdojSLH0zmL
VDxecEXyjvrdOw==
-----END CERTIFICATE-----
Generated at Thu Oct 8 19:56:59 2026 by rpki-client