Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
File: HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json)
Hash identifier: bsBj3BMuln/OBTAo2fZ5off8ROmn1vXmV7TS1QTpeVE=
Subject key identifier: 5A:B8:3F:D8:B6:08:1D:72:2D:C7:67:F8:99:E4:AC:FD:EE:FE:B7:F8
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 01A0C88FD9F6410715E9C26C848DE52B8BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
Manifest number: 112A
Signing time: Tue 22 Sep 2026 10:01:05 +0000
Manifest this update: Tue 22 Sep 2026 10:01:05 +0000
Manifest next update: Wed 23 Sep 2026 10:01:05 +0000
Files and hashes: 1: A_5oAx6RTX4seU-tsf_hsJM1QfM.roa (hash: v9Bgj8QT90sJo8g5+vI6AXOfjQ2Zxqu0x7TfHuAGD6g=)
2: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: 1nZBA7R7ddveeLnfMSlCpHj4CHYif9oS4bN3DBmElow=)
3: IzAZsf_Qc2A8pMxdGG-nBxB2gRw.roa (hash: 4TJbYmdeXG/rQN3FAOOPwKLfkTdziJof+SKAImG/iP0=)
4: UMrtA1CGXOz9XaTkZnypaeWfgfc.roa (hash: fVCMIXsbAOrWuXeDoUAcmRm+Ggqxi1Y+KIZIzOxGefE=)
5: liurjQr2aFUZ4RN7sB5e2xaGm1M.roa (hash: YNt6MjSDV5Wvd3Oc5pFyN0vEC7cDDHJYrDTH0YBIpGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:d9:f6:41:07:15:e9:c2:6c:84:8d:e5:2b:8b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Sep 22 10:01:05 2026 GMT
Not After : Sep 23 10:01:05 2026 GMT
Subject: CN=5ab83fd8b6081d722dc767f899e4acfdeefeb7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:aa:63:ab:43:ba:69:5b:ad:62:8c:de:7d:f8:
96:f9:79:8f:9f:43:49:a5:74:8b:bb:4a:84:b0:12:
4e:66:2a:08:25:f8:b6:9b:0c:0a:0e:b5:e2:c8:bc:
0b:7c:cd:65:a4:3a:b8:c9:b4:a2:52:54:25:74:af:
d4:d2:af:8e:e9:7a:21:18:12:3c:05:de:5d:dc:36:
b9:e4:ff:cd:68:9e:fd:51:d7:8e:24:96:36:4f:c6:
2d:68:c5:ff:eb:b9:2c:96:ee:b9:96:72:9d:ec:38:
d1:12:7f:2c:9a:98:c1:a0:08:80:8e:47:27:c0:26:
52:c0:48:23:c2:29:83:cc:fb:1c:1e:9f:dc:19:28:
93:1d:f5:dc:fa:c1:97:a4:30:8c:b1:a8:a4:c7:c0:
08:49:23:5e:55:48:bc:2e:17:f6:e7:73:26:6b:37:
8a:e9:4d:15:4d:48:ee:79:1e:dc:7d:ed:0b:d5:85:
58:81:77:d9:6c:bf:fc:e5:fc:33:96:be:84:82:79:
da:87:59:08:42:87:cb:32:44:0f:35:79:30:11:af:
f7:c5:9a:3d:83:51:61:6e:f4:8a:f6:ed:53:57:bd:
f1:55:ae:09:1e:1e:cc:64:fc:c4:02:62:0c:4c:09:
4b:c2:0b:47:7d:ee:98:f8:93:3a:f7:f8:94:61:36:
0c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B8:3F:D8:B6:08:1D:72:2D:C7:67:F8:99:E4:AC:FD:EE:FE:B7:F8
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5c:9d:3d:43:8e:2d:29:83:63:4b:da:3e:c6:98:9a:44:71:
a5:b9:6b:a8:07:16:8d:9b:f0:7d:93:df:4e:dd:83:54:1e:47:
19:83:2a:be:a0:b0:dc:28:08:07:53:80:16:43:f1:fc:c2:b4:
bd:3e:0f:21:6b:e1:73:00:86:27:56:e9:15:29:b3:7e:0e:23:
47:3d:0d:18:a1:3a:45:34:11:00:17:bc:3e:a9:62:83:29:93:
06:a3:c7:d1:3a:b6:5c:7b:54:a5:fe:35:26:62:f5:33:10:46:
e5:ee:4a:5b:53:06:bc:74:d6:40:a0:dd:e2:43:ce:f7:dd:dd:
2c:91:aa:b3:5a:66:25:ef:69:4a:4d:74:12:c6:4c:7f:fe:ab:
0a:73:50:68:44:79:e1:43:b3:cd:b9:b9:0c:5c:53:0a:a4:89:
22:99:96:bc:96:c1:61:98:f1:e5:40:b8:09:eb:af:dc:7d:82:
e1:6a:0d:cd:3f:b0:e1:f6:5c:a9:0d:22:8c:20:3b:48:4e:9d:
87:e7:10:39:78:f0:b5:76:4e:57:f9:80:8a:18:ac:d2:52:3e:
c8:46:db:cd:ba:ba:b7:71:cc:df:ab:a3:00:f1:26:02:b7:76:
2a:f5:a6:7f:23:10:af:7c:90:45:19:67:53:1c:26:14:e0:bf:
25:b6:01:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:54:39 2026 by rpki-client