Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
File: hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft (raw, json)
Hash identifier: /pbdiTuD4eNe5UFWdNk8qe2GgsJQNJEe5MO4MXqStG8=
Subject key identifier: 84:AA:8A:C5:05:25:06:C6:3F:69:CB:F1:13:F4:9B:5E:C2:B3:55:A7
Authority key identifier: 84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F
Certificate issuer: /CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f
Certificate serial: 01A0F0B0D8B244CE746656CF776E51F58523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
Manifest number: 1530
Signing time: Wed 30 Sep 2026 05:01:56 +0000
Manifest this update: Wed 30 Sep 2026 05:01:56 +0000
Manifest next update: Thu 01 Oct 2026 05:01:56 +0000
Files and hashes: 1: hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl (hash: D5AVzYb8tq2HY/1ItJPlpGk2laf2PUsLto/zfp4etGU=)
2: zJjfRJOT22lkDtk4Md7fI6mwZxg.roa (hash: hqAeygJ8Uol5cY/fADfXwnwvoVyU7MDQFKGg1laAxik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:b0:d8:b2:44:ce:74:66:56:cf:77:6e:51:f5:85:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f
Validity
Not Before: Sep 30 05:01:56 2026 GMT
Not After : Oct 1 05:01:56 2026 GMT
Subject: CN=84aa8ac5052506c63f69cbf113f49b5ec2b355a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:d4:33:33:e8:20:b4:f8:b9:c3:2a:35:90:
35:58:67:ea:9c:d8:7d:4c:78:ca:70:65:15:ea:89:
70:9c:c5:14:52:f8:94:ea:18:a8:86:d1:77:ce:02:
bb:91:f6:a6:1a:18:bf:0b:83:0b:21:c7:a9:f8:5f:
a5:6e:e3:db:94:52:39:30:77:8a:15:cd:d6:66:93:
27:cd:5d:63:71:18:75:d2:14:24:a7:05:f1:0b:2e:
c8:27:27:6d:3e:7f:95:6b:c2:e8:3f:97:0f:43:00:
2e:25:54:92:46:d6:a7:3f:64:2b:7f:d3:10:eb:52:
73:d3:55:ff:9f:12:83:a4:07:14:9f:71:f2:cf:43:
2a:bd:f2:a8:a7:bc:f6:62:05:b8:79:63:e7:6d:10:
ff:ed:c6:b5:69:ef:8c:c8:4d:3a:5c:5e:87:dd:65:
14:4a:63:e9:90:a1:36:99:8e:53:01:fc:66:ba:72:
1c:86:17:d2:e6:29:71:ae:55:27:6d:73:64:e5:96:
eb:da:a6:47:ff:8d:ab:c2:94:98:8f:d3:a8:7a:5b:
d2:e9:62:ee:58:a2:1c:aa:eb:d2:0b:05:ce:b3:71:
c4:8c:0d:4b:33:a6:6b:b6:a6:07:ef:43:9a:52:2b:
0f:e3:95:bb:b8:2b:82:3f:4f:4b:1c:68:70:40:4b:
9a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AA:8A:C5:05:25:06:C6:3F:69:CB:F1:13:F4:9B:5E:C2:B3:55:A7
X509v3 Authority Key Identifier:
keyid:84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6f:bd:7f:f0:76:0d:15:e3:10:31:1e:af:fc:88:9f:15:d6:
9c:17:38:30:50:4c:09:53:b5:85:2d:7a:c7:43:2e:df:80:71:
d2:fc:48:0b:b8:8f:7d:df:87:48:bd:dd:8a:39:cd:ea:52:b6:
19:81:de:e2:8d:c4:f4:8e:ce:59:cf:23:89:6f:18:40:ef:ac:
8b:b5:f7:30:c6:4d:43:af:48:cb:dc:1b:32:2d:b2:8b:a3:90:
59:9a:93:22:42:2a:cc:ca:97:53:44:47:73:97:b7:1d:9c:a0:
06:3e:9e:5d:18:e1:1b:c3:9c:3b:20:1e:e1:4e:60:5d:37:93:
ff:8d:b1:97:31:80:34:9c:ea:8b:96:52:be:3a:44:b5:66:24:
3a:6b:ed:37:32:0b:dc:9d:b9:65:a7:4f:28:7c:19:41:40:ba:
9d:31:d4:c2:63:b4:9b:2c:ac:03:cc:b1:7d:7c:bb:37:a5:02:
5b:d1:fc:7f:d0:b9:40:53:ad:db:ed:b7:5e:33:28:56:b0:81:
be:b4:a5:9c:fd:14:c2:b1:ad:cd:41:53:a9:29:a8:76:e2:47:
e7:94:31:19:15:30:b1:37:8c:34:1f:59:bd:6d:4a:09:5c:19:
41:d7:12:3c:d8:45:2e:d3:25:84:7e:bf:90:29:4d:19:db:ad:
32:a6:de:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 09:21:41 2026 by rpki-client