Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
File: hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft (raw, json)
Hash identifier: Q8vXprN9YqRrbH1SdGX/ybb4Nf65n8VeCE+wI3szI6I=
Subject key identifier: 9D:31:C9:E8:E0:00:1E:C5:C0:D3:91:EB:5F:76:F5:64:95:60:4B:80
Authority key identifier: 84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F
Certificate issuer: /CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f
Certificate serial: 019F9323C19BB44CE4432008C7F5D7D52392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
Manifest number: 147B
Signing time: Fri 24 Jul 2026 08:00:21 +0000
Manifest this update: Fri 24 Jul 2026 08:00:21 +0000
Manifest next update: Sat 25 Jul 2026 08:00:21 +0000
Files and hashes: 1: hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl (hash: Abpv/C/daNupBEhSzUWURSW7nRMgpEwh3tEnS7jsh98=)
2: zJjfRJOT22lkDtk4Md7fI6mwZxg.roa (hash: hqAeygJ8Uol5cY/fADfXwnwvoVyU7MDQFKGg1laAxik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:c1:9b:b4:4c:e4:43:20:08:c7:f5:d7:d5:23:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f
Validity
Not Before: Jul 24 08:00:21 2026 GMT
Not After : Jul 25 08:00:21 2026 GMT
Subject: CN=9d31c9e8e0001ec5c0d391eb5f76f56495604b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:00:d0:46:f4:90:d3:74:f0:ff:17:a4:3f:9a:
ff:d0:08:5f:43:18:2a:d4:22:76:0e:f1:12:94:50:
c5:52:bf:97:5d:6c:54:79:99:4f:fc:53:01:2d:3f:
3b:38:a4:02:54:73:eb:fc:f9:74:6d:e4:b5:b4:a3:
3d:4e:9b:68:fd:76:f2:32:87:a1:21:a9:2b:c9:10:
88:ba:8f:cd:57:3e:54:47:d0:05:3c:6f:2b:66:4e:
8a:03:51:e2:ec:76:66:b3:49:bd:d7:9a:aa:63:be:
02:89:b9:ad:7d:e4:03:12:9c:da:7e:29:15:d5:c3:
64:3c:e6:34:f1:9f:f8:df:a3:dd:26:d0:03:cf:ab:
8c:13:c6:e4:2c:17:93:32:6f:80:33:e9:bd:9e:78:
8b:fa:31:88:a1:30:a8:b0:ec:bf:03:bf:4f:87:35:
b1:08:97:aa:b4:0b:03:1b:67:16:33:6e:a9:fd:21:
d1:47:f5:f6:c2:0d:5f:f1:c4:52:aa:e1:81:c3:7c:
19:90:7f:30:35:8e:04:09:6c:25:77:f5:29:29:13:
45:81:83:df:58:de:ec:ce:13:da:3e:9b:1e:93:34:
51:e2:1e:32:f2:2f:12:5a:06:ff:5c:8d:fb:de:c6:
a4:19:d4:6d:fa:23:e4:06:73:09:8d:31:21:bf:95:
15:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:31:C9:E8:E0:00:1E:C5:C0:D3:91:EB:5F:76:F5:64:95:60:4B:80
X509v3 Authority Key Identifier:
keyid:84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4b:0b:15:9e:32:9b:98:08:48:e2:c6:b0:c4:b8:c5:18:b9:
95:90:14:ee:53:3b:b6:42:10:a0:93:50:0c:fd:6c:81:6a:6b:
75:39:aa:27:6c:ca:4b:a5:8e:71:ab:13:f3:b5:22:8c:7f:a5:
58:b0:24:a1:a1:71:24:9d:17:a5:27:a9:64:93:c3:c3:cc:40:
02:38:e8:ec:d2:dd:f6:c8:bc:6e:e3:13:4c:3b:dc:d9:fa:af:
24:87:ec:68:82:3d:51:66:2a:21:57:7d:ef:b6:2e:40:4d:eb:
f5:e6:de:f9:71:b6:3c:db:23:35:0c:f2:44:92:8f:d1:5f:4d:
1b:fd:fe:b6:19:76:8a:54:21:07:0c:eb:49:b9:98:a8:9d:90:
df:60:47:46:95:dd:37:dd:8d:e4:04:6e:fa:4b:ab:70:ad:ff:
e0:6b:68:86:2e:10:ba:15:10:43:f0:4d:77:41:7f:9e:fb:9e:
83:68:a7:c4:8f:63:50:ee:eb:07:8a:0a:20:18:b3:20:80:a2:
e1:1b:2d:77:c3:ee:2d:e5:7b:0c:eb:2c:19:a5:ff:b0:ac:32:
28:71:d5:d6:c2:c5:65:0a:cd:e7:cc:28:c1:a1:c6:90:c5:7f:
f0:87:a7:96:bc:15:d1:b1:57:e5:55:a6:ae:b6:03:3c:f0:1f:
d8:1e:01:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:33 2026 by rpki-client