Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
File: HQrO6hf1PecI-ac6vAyHFk0gfQg.mft (raw, json)
Hash identifier: xb2tQKQh1WU70Yv6wxcYpCXEzvFGYG4ynjaUgh2jOzE=
Subject key identifier: 3D:C6:90:62:B7:86:1D:EE:FA:CC:1B:F3:16:C2:A2:14:E8:52:6E:EA
Authority key identifier: 1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
Certificate issuer: /CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Certificate serial: 01A107A6685A8FA89B6042F53D85BC98F229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
Manifest number: 17AC
Signing time: Sun 04 Oct 2026 16:01:48 +0000
Manifest this update: Sun 04 Oct 2026 16:01:48 +0000
Manifest next update: Mon 05 Oct 2026 16:01:48 +0000
Files and hashes: 1: HQrO6hf1PecI-ac6vAyHFk0gfQg.crl (hash: AFa/BkhGvdfPOeNMZMZ6/Sk9i7lH4zEOVwso5EM+jT0=)
2: jYlsueQe6bTuxJo3Pao6U7_lbjM.roa (hash: xljjWi7Hj8DkN9QHcryj+ylFV/KQmtfdUgA8aZcK8mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:a6:68:5a:8f:a8:9b:60:42:f5:3d:85:bc:98:f2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Validity
Not Before: Oct 4 16:01:48 2026 GMT
Not After : Oct 5 16:01:48 2026 GMT
Subject: CN=3dc69062b7861deefacc1bf316c2a214e8526eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0b:e5:dc:e0:e7:3d:79:2b:28:fe:a8:94:8e:
6f:78:7f:bd:a1:a2:9d:c4:b5:ad:1c:1b:84:1e:4f:
c7:d4:58:1c:04:b7:d6:9f:07:0a:22:34:c8:a5:ff:
c0:a3:d8:8f:7b:37:ed:d5:f5:f1:d9:ce:fa:66:c7:
1f:c7:97:04:69:79:4a:2b:ee:ba:97:be:5f:05:94:
91:18:73:43:40:ae:fe:d2:b9:5b:a6:0e:dc:e3:00:
0f:13:82:1c:b3:53:2e:ac:54:37:b1:f0:51:c2:79:
34:35:dd:37:fc:cc:9b:bc:b5:b2:b5:2b:f2:46:b9:
50:cb:34:c9:a6:dd:a8:bf:16:41:1c:18:8d:7b:4c:
87:a6:71:80:c5:76:41:fe:33:b5:c6:67:6a:30:70:
f2:19:e8:05:98:5d:43:53:ff:40:c7:10:67:6d:74:
95:b8:a6:57:91:9a:38:60:d3:8e:e6:56:ba:30:89:
5f:f7:82:2b:04:75:ff:5f:85:e2:e3:71:96:9a:52:
8b:9b:98:a3:0e:8d:d4:33:2c:f1:94:39:ee:48:f1:
c4:49:e7:c2:e8:6f:09:b3:71:70:bd:2a:39:6d:76:
ef:78:91:a5:78:61:ca:86:8b:60:55:74:22:9c:8b:
70:d8:87:18:f2:97:08:18:55:ab:db:10:e4:ee:be:
cd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C6:90:62:B7:86:1D:EE:FA:CC:1B:F3:16:C2:A2:14:E8:52:6E:EA
X509v3 Authority Key Identifier:
keyid:1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:98:d6:3f:1b:3a:ae:7c:8c:ab:cf:85:20:e8:c6:ef:96:74:
bb:79:31:7b:34:82:69:24:55:bb:09:7b:f7:2c:31:0a:73:01:
46:52:0a:f5:78:a8:28:18:54:d7:1e:de:d5:86:20:99:26:af:
70:0c:10:08:94:21:ab:b0:4a:a4:00:9a:9b:fd:fc:ad:f9:64:
82:6d:2d:e7:6e:e7:38:21:8b:78:2c:fc:8f:d1:e8:2f:68:34:
e6:6a:b3:61:47:b6:03:e7:d4:a5:4d:02:a2:e5:69:ca:3a:4b:
08:ef:63:cd:2c:7c:1d:af:bc:1a:10:e4:a1:ed:46:ee:ed:cb:
b5:35:04:0b:77:87:0d:45:0d:96:d8:5b:9c:d7:b3:da:5c:78:
35:47:87:79:49:ab:67:0c:8b:43:98:8c:40:b8:a8:dc:5d:57:
f1:cd:e3:b6:a2:05:9c:d7:09:4b:b8:bd:01:b1:1c:a3:7f:78:
15:d3:0f:ca:46:8c:c1:e7:97:5f:c2:52:d8:cc:4c:1d:e6:2e:
b9:79:f3:be:2f:bc:e1:46:8d:09:5e:91:f5:27:d9:0d:a9:d5:
a0:bc:d4:6b:2e:bc:86:f7:a3:40:d8:b4:70:84:ef:80:f6:12:
4e:11:bb:23:a8:de:c7:96:6a:2f:32:63:34:96:ba:e0:dd:9d:
9d:1c:bc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:37:08 2026 by rpki-client