Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft (raw, json)
Hash identifier: 3ha+jV75CAQFDKIOd5XgqUm9GSl52iHUAtlnZwqplkk=
Subject key identifier: 55:53:13:3F:94:BD:80:1D:05:FA:B5:12:AF:F2:8D:6C:D9:58:DA:7B
Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Certificate serial: 019FAC3EED2CF3C06BBC284AE2C0BF7B2277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 05:00:32 +0000
Manifest this update: Wed 29 Jul 2026 05:00:32 +0000
Manifest next update: Thu 30 Jul 2026 05:00:32 +0000
Files and hashes: 1: hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl (hash: QzvCsdMVbJVqlC0pipd3falD/mi+TB1HsIpiAtLtpcU=)
2: vFI_szTdwGut2KUofHDh3zwoi1k.roa (hash: MxrZSZTPx1kjzcHF3plautdDk7QOfOy+oz7wimPfgjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:ed:2c:f3:c0:6b:bc:28:4a:e2:c0:bf:7b:22:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Validity
Not Before: Jul 29 05:00:32 2026 GMT
Not After : Jul 30 05:00:32 2026 GMT
Subject: CN=5553133f94bd801d05fab512aff28d6cd958da7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1d:5b:22:bb:71:b0:e0:74:80:0c:43:94:b8:
1f:60:cc:0f:10:87:63:51:21:9e:4b:66:22:2b:11:
bf:73:69:f3:1e:4c:94:bd:b6:49:3a:90:db:20:f5:
9a:18:79:72:62:c8:66:0e:65:44:dc:9a:3b:27:ee:
ea:76:82:1b:8a:12:ff:67:1d:dd:e2:0a:38:24:0e:
f2:20:b7:da:2c:d3:3d:31:29:b8:07:c0:b2:27:f1:
b3:23:97:14:20:12:6c:f5:8c:23:02:86:f2:42:fc:
0b:57:4c:ab:22:b5:56:e8:f7:72:34:20:1c:73:98:
83:ac:f5:be:ff:98:c2:d6:ee:85:64:36:b5:14:fd:
df:35:11:0d:5c:98:01:60:72:88:90:72:5d:77:21:
e3:f9:2d:23:2e:37:62:02:7c:ec:94:c1:26:8c:5f:
6c:ec:c2:a0:d2:0c:bb:c9:ce:cd:7a:af:33:94:14:
72:19:bc:79:ba:e2:f9:d1:84:1f:0d:bb:f3:19:de:
f5:cb:c5:ba:03:2f:3c:c5:7c:e4:26:d2:c9:32:d4:
9f:e1:e1:8f:31:15:b2:99:49:de:aa:41:b9:55:1d:
97:47:c3:cf:e4:e9:f8:13:34:9f:ac:0f:86:26:51:
5a:03:b5:6a:09:42:97:31:a1:6e:3d:14:20:4c:0a:
31:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:53:13:3F:94:BD:80:1D:05:FA:B5:12:AF:F2:8D:6C:D9:58:DA:7B
X509v3 Authority Key Identifier:
keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:41:e9:5b:e0:7a:d1:50:10:0c:2a:ac:16:ce:a5:46:84:ce:
2e:db:e3:2e:21:77:0d:ad:de:3e:82:3d:9b:88:b7:5a:50:5d:
ab:71:b1:72:95:0f:67:bb:70:ee:5d:78:84:30:8e:94:78:e2:
4a:c1:11:0a:bb:aa:28:a3:fc:98:68:52:7d:e1:44:66:92:ce:
67:63:fd:1b:9a:f2:1f:17:2b:0f:03:75:e8:1a:4e:73:55:23:
25:89:9a:3d:b5:45:e2:7c:90:7d:28:06:36:48:06:52:40:80:
72:42:38:9f:ed:e5:aa:ed:e2:57:cb:69:d2:21:71:ca:35:9b:
c5:7e:e6:30:c8:b3:c5:93:6e:ac:c9:9a:40:f6:97:df:bc:39:
50:3f:fa:59:9e:44:84:7e:7c:5c:aa:6b:05:5f:d0:91:c1:60:
c8:8b:e1:0d:1b:e9:a7:39:f3:0c:d8:00:64:44:4e:ac:e3:b4:
a7:a5:1d:e0:cf:ec:e3:d2:57:06:1c:3b:72:cb:04:20:34:3e:
22:e4:8f:33:6f:9b:03:f6:b5:37:77:7d:7e:ce:2c:d9:ac:f7:
91:c8:97:92:b6:b3:c2:c9:f2:af:e5:07:77:60:5e:2c:8f:64:
4d:ee:e4:15:45:0a:39:b3:ac:00:e0:d2:bd:ed:50:99:d3:da:
21:27:78:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:10:57 2026 by rpki-client