Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft (raw, json)
Hash identifier: X20moiFsAHbMc4xVe/09Yu/eeMkGKLfF7ehDycWQ2NM=
Subject key identifier: D6:4A:D6:52:A1:62:16:8D:5B:E0:2D:0D:4C:13:A7:4A:1C:EB:E6:D9
Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Certificate serial: 019EC0A3C6B7F5687ECFA14A47EFD58FD777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 11:00:18 +0000
Manifest this update: Sat 13 Jun 2026 11:00:18 +0000
Manifest next update: Sun 14 Jun 2026 11:00:18 +0000
Files and hashes: 1: hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl (hash: 5wjTbCMOPqiVdM947Lv8M0U6XkfnyndHg+k7uo3zvNQ=)
2: vFI_szTdwGut2KUofHDh3zwoi1k.roa (hash: MxrZSZTPx1kjzcHF3plautdDk7QOfOy+oz7wimPfgjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:c6:b7:f5:68:7e:cf:a1:4a:47:ef:d5:8f:d7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Validity
Not Before: Jun 13 11:00:18 2026 GMT
Not After : Jun 14 11:00:18 2026 GMT
Subject: CN=d64ad652a162168d5be02d0d4c13a74a1cebe6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:89:6f:a5:8a:42:89:37:77:1b:13:12:b9:
7e:9a:77:29:99:df:36:68:ef:ac:6a:ac:a9:8a:76:
43:aa:fe:ea:bf:11:39:61:e3:d5:e4:15:4d:ca:2e:
a8:af:12:52:69:b2:bd:40:40:f7:fd:ae:f4:e4:46:
5f:46:57:0e:0d:0b:c5:b6:2e:30:5b:cd:63:b3:7f:
5e:d7:61:75:bb:95:9b:c6:93:62:df:1e:32:3b:77:
ca:77:6e:36:31:16:f7:66:dd:c6:ea:19:5e:c1:1b:
ee:c6:99:64:3a:55:19:2e:b0:fc:ae:fe:9f:93:a4:
71:e9:cd:78:53:9a:7d:8a:d1:5c:82:eb:d5:8e:4d:
ce:ed:60:33:dc:78:a6:8d:2f:7f:45:54:08:cf:9b:
9c:ea:83:15:e8:f7:c6:24:eb:e0:12:5a:34:0a:ce:
be:50:f2:6c:f4:08:88:75:fe:47:d5:b7:10:97:53:
c7:ae:f9:ab:bd:c4:31:e8:18:98:6d:a0:5e:f7:83:
ac:a9:8e:c1:02:eb:5e:0b:56:c2:63:58:4f:9d:ca:
4a:19:25:7d:32:4d:21:7b:d4:e6:b9:df:55:03:58:
b6:5a:f6:ae:f5:b2:a4:6c:16:12:d1:8c:a4:f0:68:
42:38:7f:79:12:e9:56:0a:3a:ea:b3:fa:63:39:88:
eb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4A:D6:52:A1:62:16:8D:5B:E0:2D:0D:4C:13:A7:4A:1C:EB:E6:D9
X509v3 Authority Key Identifier:
keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:d4:e8:e5:83:c5:f8:0e:82:28:e2:a1:ee:d7:2c:cc:3b:0a:
06:af:a6:71:0c:80:35:37:04:9a:d2:86:fc:b2:e3:7d:80:bd:
4d:b2:ad:f5:b0:10:a5:08:2f:32:b9:03:62:d0:9a:cf:31:89:
0c:ad:bc:cf:85:fb:19:1b:16:bf:ad:69:ea:dc:00:24:21:ef:
22:18:50:b8:25:5c:c6:ac:3e:99:de:8d:02:93:6e:98:02:a9:
cf:0a:b7:f0:f6:a7:1b:f1:8b:73:28:2f:a3:92:48:b9:74:9a:
4d:09:b3:b4:63:bd:a5:8a:ef:96:b1:c1:80:cf:4c:8a:a4:62:
f8:5f:87:aa:e2:9f:04:67:c0:ad:32:94:02:e9:d4:07:6c:a3:
77:3a:47:bc:36:43:a2:40:98:34:d0:16:0c:0c:b2:ee:02:cb:
88:65:e2:7f:4f:df:44:3c:99:81:dd:92:f1:92:91:91:07:c2:
bc:f6:e7:a8:03:29:b1:71:1f:1a:0d:31:ac:af:7c:32:27:96:
3b:9d:3b:e3:eb:38:39:c4:fe:2c:46:73:5c:a6:8a:75:d8:66:
9e:47:7b:f6:d8:1b:de:77:37:dc:e4:64:db:52:a4:e0:d3:ee:
75:89:16:1c:98:ac:2a:03:fa:b7:4d:de:39:fe:fa:11:be:4e:
60:fc:00:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:58:01 2026 by rpki-client