Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft (raw, json)
Hash identifier: wYAqq33bvtpN7Wt72n7Yzc0J18Ig8IFiAgVhvh/bKDE=
Subject key identifier: DD:76:C2:EE:0A:72:AD:E2:5F:43:13:AE:12:71:AD:59:7D:4B:FC:2F
Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Certificate serial: 01A0CA0FCEC68ACD160C0C2127A8559639A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
Manifest number: 1A6B
Signing time: Tue 22 Sep 2026 17:00:28 +0000
Manifest this update: Tue 22 Sep 2026 17:00:28 +0000
Manifest next update: Wed 23 Sep 2026 17:00:28 +0000
Files and hashes: 1: hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl (hash: aInG3PVWpSas1/W0bNLagxUMCHTL3eaoESZHSFNkd9c=)
2: vFI_szTdwGut2KUofHDh3zwoi1k.roa (hash: MxrZSZTPx1kjzcHF3plautdDk7QOfOy+oz7wimPfgjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:ce:c6:8a:cd:16:0c:0c:21:27:a8:55:96:39:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Validity
Not Before: Sep 22 17:00:28 2026 GMT
Not After : Sep 23 17:00:28 2026 GMT
Subject: CN=dd76c2ee0a72ade25f4313ae1271ad597d4bfc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7c:a9:26:20:f7:7f:c4:df:56:4c:eb:2e:55:
33:3e:28:59:a1:95:ed:11:0b:df:9d:09:68:c4:fb:
f0:e5:00:20:90:65:f4:67:27:16:fb:a2:73:69:38:
e6:1c:69:f3:d5:06:76:c3:9c:f1:a3:d2:6b:3b:66:
be:25:71:47:96:df:c2:26:7f:16:ce:42:56:9e:22:
f1:f6:82:f0:5a:13:ab:5d:e1:43:7f:e5:a7:e7:17:
5a:37:fd:27:4c:83:0a:fd:bf:51:dc:31:bb:8b:ea:
83:d8:d1:9a:33:8e:9a:ac:a7:0e:91:d4:22:95:c2:
72:6e:f7:a6:f2:99:9f:b8:e7:2e:4f:7f:88:5c:ea:
65:ba:74:39:28:38:61:22:2c:bd:89:cf:29:93:e6:
63:8f:e8:4a:04:7f:5e:7e:2a:7f:df:73:84:7f:a8:
61:45:14:5b:8f:30:41:6d:16:aa:79:08:89:82:36:
1b:bc:4e:ed:ef:70:eb:42:bb:f3:04:17:81:30:e2:
8a:e8:22:ad:86:88:94:a8:b6:ca:ac:7e:72:c5:1d:
7d:6d:83:48:fd:85:f8:2a:d1:1b:e7:cc:e4:c4:74:
17:c0:f0:d2:f9:51:c7:da:40:db:58:4f:97:e4:bc:
22:83:92:e2:29:0c:2e:b3:24:c1:2e:c6:54:e1:4a:
e7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:76:C2:EE:0A:72:AD:E2:5F:43:13:AE:12:71:AD:59:7D:4B:FC:2F
X509v3 Authority Key Identifier:
keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:51:95:7d:b9:79:77:b3:9c:98:c0:33:3e:9b:ef:a2:77:03:
93:28:17:44:be:b1:95:b3:6b:54:9d:aa:11:0b:21:ac:1a:6e:
f5:de:ae:6f:94:f7:86:a6:63:41:8b:85:a5:d5:b3:ed:ea:8b:
d9:58:d6:95:86:09:21:37:78:62:db:27:0c:81:cc:5a:52:a3:
d0:73:eb:1c:db:e9:2d:69:f9:b6:f9:21:b8:fe:14:34:5f:f7:
4c:ea:7e:4d:9c:2e:49:ed:a4:d5:53:16:e3:2b:ff:30:5c:01:
cd:fa:1d:dd:36:39:6c:7f:22:87:91:67:8a:6f:75:96:07:4b:
fc:d4:6a:96:8a:7f:51:7d:12:0e:51:ca:da:3c:28:9c:00:d8:
e9:5a:7e:7b:52:cf:82:c9:e2:95:f8:a3:7d:96:27:6b:75:ff:
34:29:40:a2:4f:4e:e4:a8:b1:31:a2:20:fb:9b:c5:f0:d1:dd:
49:78:a1:46:5d:9a:67:d4:9d:d9:74:48:46:27:1e:01:77:26:
0f:e4:3c:42:ec:76:53:aa:4b:6b:b9:5a:9f:76:21:0f:75:45:
97:fe:ac:6f:30:72:57:27:ef:96:3c:1f:f9:f7:21:96:6c:b1:
c6:a9:9c:e9:52:1e:cc:f3:0e:9d:14:45:80:5a:16:bd:53:35:
51:94:25:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:26:21 2026 by rpki-client