Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.mft
File: hatrqgL7PEIkFGQC1xNTAtSpM5w.mft (raw, json)
Hash identifier: DWiFOXzlShZg0Ya+l2KfNv0Wqh9mCd+Lwf1hFhy0ej4=
Subject key identifier: 3F:54:7B:6E:4F:C1:C9:10:21:AF:91:F5:A8:97:FE:3A:11:A6:C4:2B
Authority key identifier: 85:AB:6B:AA:02:FB:3C:42:24:14:64:02:D7:13:53:02:D4:A9:33:9C
Certificate issuer: /CN=85ab6baa02fb3c4224146402d7135302d4a9339c
Certificate serial: 01A12AD6F3AE3F78D41C069281E3A7BA0400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hatrqgL7PEIkFGQC1xNTAtSpM5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.mft
Manifest number: 0114
Signing time: Sun 11 Oct 2026 12:01:32 +0000
Manifest this update: Sun 11 Oct 2026 12:01:32 +0000
Manifest next update: Mon 12 Oct 2026 12:01:32 +0000
Files and hashes: 1: Dma-Z-13sGBzUFZyDKOYpiVjyWI.roa (hash: n6evIQhFcEJ8otT9mtnc5btiAVJv5xnXSb58S3z8lOg=)
2: hatrqgL7PEIkFGQC1xNTAtSpM5w.crl (hash: piTGT556wCifgS9jXef0dn9z/dJESyDCCMg7ixGRguo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/hatrqgL7PEIkFGQC1xNTAtSpM5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:f3:ae:3f:78:d4:1c:06:92:81:e3:a7:ba:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85ab6baa02fb3c4224146402d7135302d4a9339c
Validity
Not Before: Oct 11 12:01:32 2026 GMT
Not After : Oct 12 12:01:32 2026 GMT
Subject: CN=3f547b6e4fc1c91021af91f5a897fe3a11a6c42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c3:64:48:af:3d:80:36:59:e1:b0:67:a8:21:
dd:09:fd:f0:7c:4a:39:73:9c:d7:de:27:86:2d:49:
99:76:13:59:c2:6b:93:52:a4:74:3b:86:f1:88:cb:
95:af:d1:b5:3f:9c:3f:65:7f:94:8a:80:19:ed:dd:
0f:2f:31:de:21:fa:b7:cd:22:d2:ef:b5:8d:70:6e:
2f:ae:ee:55:a7:82:08:39:87:e8:b4:5e:c1:e0:14:
86:92:5b:b0:fc:5f:9c:ba:99:c5:60:30:51:76:35:
2c:7a:c6:8c:b7:0a:8a:f2:81:99:dc:13:07:80:95:
22:21:31:b8:70:4e:11:a2:14:56:bb:78:e7:ca:f5:
63:bf:75:70:80:9a:8d:44:fe:32:0b:ca:ce:20:f9:
03:c6:6e:0c:20:89:6f:14:3c:8a:c7:8e:f5:16:0b:
84:f6:b7:04:f4:50:7d:66:d4:56:53:59:94:08:a4:
50:6f:5c:7f:3a:86:f7:f3:e8:aa:aa:e5:c6:5a:3c:
2e:fe:16:1d:02:8d:17:1a:56:4b:ed:b7:75:e2:40:
ff:12:67:cb:d1:12:66:4b:bf:84:25:5c:b7:c7:c2:
73:d5:01:0b:e1:62:86:c2:12:a2:26:32:8e:fb:f2:
a2:b6:ca:ef:21:00:10:8f:32:86:ee:13:46:69:4e:
58:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:54:7B:6E:4F:C1:C9:10:21:AF:91:F5:A8:97:FE:3A:11:A6:C4:2B
X509v3 Authority Key Identifier:
keyid:85:AB:6B:AA:02:FB:3C:42:24:14:64:02:D7:13:53:02:D4:A9:33:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hatrqgL7PEIkFGQC1xNTAtSpM5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9a:1e:40:e3:75:aa:ef:6a:e2:c4:cb:5a:1a:53:aa:2f:39:
3c:e0:f5:4a:41:6c:83:68:51:95:63:ec:ed:8f:9e:49:fe:6a:
df:d7:dd:d2:24:ea:06:83:10:64:a7:0e:97:d2:d3:c8:c7:ca:
b8:85:a6:eb:5b:5a:ad:0b:d7:4d:3c:df:23:fc:5d:84:ff:e6:
3a:df:83:dc:d5:d1:03:d0:d7:a9:7f:82:12:c1:26:cf:e6:47:
9f:5c:58:ae:c6:98:c5:79:7b:ea:bd:f1:db:33:29:d7:0e:35:
27:b6:d6:f3:40:7c:de:ff:c0:77:2f:cc:2f:7c:45:1e:fe:4d:
68:d8:3f:4e:19:30:56:02:0e:ad:42:e5:44:b8:b2:c9:a3:db:
a0:0c:59:9c:12:1e:46:60:0b:1d:5b:33:74:91:0c:06:2d:db:
c0:ff:d3:e5:ce:69:e5:43:b7:33:3d:60:69:6a:7d:be:8a:5d:
2c:d2:12:8e:96:54:92:90:0e:80:e7:4e:60:35:db:15:96:1d:
08:58:2c:a5:a0:86:fc:ea:ac:1a:23:c5:8a:0f:a2:c7:ef:a5:
45:c9:c1:0d:b9:8e:7f:ad:67:75:ae:51:df:32:d9:73:30:85:
0b:b0:50:af:e2:eb:8e:76:44:cd:64:15:b6:22:41:91:f9:6c:
fb:58:b9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:23:13 2026 by rpki-client