Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.mft
File: hatrqgL7PEIkFGQC1xNTAtSpM5w.mft (raw, json)
Hash identifier: XGYvQ3ZDeT7O0ZMyE3wHKvooZTkLYp9OROMe4sQNW4Q=
Subject key identifier: 89:7E:A0:06:81:F8:42:04:7E:21:B2:D8:63:7B:5D:B5:1D:71:6F:19
Authority key identifier: 85:AB:6B:AA:02:FB:3C:42:24:14:64:02:D7:13:53:02:D4:A9:33:9C
Certificate issuer: /CN=85ab6baa02fb3c4224146402d7135302d4a9339c
Certificate serial: 019F935B359253E9A5F66DA67C53EDB3360C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hatrqgL7PEIkFGQC1xNTAtSpM5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:55 +0000
Manifest this update: Fri 24 Jul 2026 09:00:55 +0000
Manifest next update: Sat 25 Jul 2026 09:00:55 +0000
Files and hashes: 1: Dma-Z-13sGBzUFZyDKOYpiVjyWI.roa (hash: n6evIQhFcEJ8otT9mtnc5btiAVJv5xnXSb58S3z8lOg=)
2: hatrqgL7PEIkFGQC1xNTAtSpM5w.crl (hash: 0uDDBjC1b08Yiz9DfUAvdaK0CB/6B2L/pQAUB30GIj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/hatrqgL7PEIkFGQC1xNTAtSpM5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:35:92:53:e9:a5:f6:6d:a6:7c:53:ed:b3:36:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85ab6baa02fb3c4224146402d7135302d4a9339c
Validity
Not Before: Jul 24 09:00:55 2026 GMT
Not After : Jul 25 09:00:55 2026 GMT
Subject: CN=897ea00681f842047e21b2d8637b5db51d716f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:97:37:6a:f1:9c:f1:65:38:4d:e4:b2:f4:9f:
6d:88:b5:12:b9:d5:ea:5f:93:40:fb:8d:76:db:b1:
7d:a3:b4:c5:e8:c2:38:21:82:9b:55:84:35:d0:c4:
a2:e3:17:c2:28:e0:5d:c9:54:ce:bb:98:e4:37:08:
2e:dd:aa:a5:67:83:02:22:fd:b8:97:0f:95:9d:f7:
db:19:02:40:67:62:fd:68:d7:46:ec:63:97:01:22:
22:a4:a0:39:75:e1:16:6b:a5:9b:24:ab:f7:b1:64:
e9:de:c4:f5:9f:82:3f:62:33:f4:fc:d4:14:79:91:
27:88:f0:81:be:28:11:b6:cc:7b:98:66:45:fb:59:
94:eb:ad:78:5e:0c:df:f2:5b:5c:39:ce:e4:5a:c5:
a9:9a:03:e9:45:62:84:41:77:29:2a:0e:09:4a:27:
57:03:0f:17:c0:3c:9d:bb:bc:bd:db:39:b0:5f:e2:
f5:4e:72:df:22:27:38:43:8c:b2:56:38:76:10:92:
ef:35:06:eb:1d:59:8a:4e:a4:87:a0:28:52:19:b3:
fb:54:0e:9b:8b:fa:c4:98:a9:bf:90:73:74:bb:bd:
16:47:8b:e0:a3:94:05:76:b4:fb:56:b6:23:4d:8c:
ee:f8:47:59:d1:cd:0c:75:e6:9f:e3:b9:1d:61:49:
86:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7E:A0:06:81:F8:42:04:7E:21:B2:D8:63:7B:5D:B5:1D:71:6F:19
X509v3 Authority Key Identifier:
keyid:85:AB:6B:AA:02:FB:3C:42:24:14:64:02:D7:13:53:02:D4:A9:33:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hatrqgL7PEIkFGQC1xNTAtSpM5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/hatrqgL7PEIkFGQC1xNTAtSpM5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d7:cb:79:a4:00:79:0e:16:a2:ff:d1:4f:fb:15:15:38:6f:
7f:09:00:77:d8:92:a0:c5:ac:61:aa:06:6e:e9:c0:37:28:56:
70:90:82:37:78:ad:60:5c:a4:fa:01:b0:c3:45:87:43:2d:3d:
3f:58:9d:b2:8f:89:34:63:de:ef:70:00:ee:63:3b:07:fb:6d:
04:d5:f1:30:98:f9:f0:d3:57:96:38:92:de:8e:1b:15:b2:02:
6d:06:3d:00:ef:8f:83:a9:d6:8a:f4:fd:12:c2:f0:ea:9e:c5:
fc:32:90:4d:e9:70:43:eb:9b:0d:76:26:c2:9e:a6:b8:14:70:
7e:1d:5c:9e:eb:15:32:9e:dc:1a:09:e2:96:5d:28:dd:16:61:
61:2c:1f:24:71:cc:ed:77:6b:fb:b4:45:aa:3d:ca:6c:4c:1d:
47:ec:8f:9a:42:a5:35:98:3f:e3:db:b6:45:99:d6:6b:55:7b:
47:27:55:d5:1d:20:83:65:82:49:6c:65:95:aa:54:37:c2:5b:
70:ac:7d:df:13:a6:47:0a:d8:06:d1:53:05:83:1e:a6:46:8c:
e9:38:56:40:70:f9:38:c8:68:00:8c:34:b8:27:ce:09:93:10:
24:a5:4e:7c:a6:36:19:60:7a:56:6d:cc:d4:f1:cb:dd:e6:38:
9b:51:73:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:04 2026 by rpki-client