Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.mft
File: HqtOAMDZLLUBu7IjrPA54nCR204.mft (raw, json)
Hash identifier: VsV11F576Zr2vRNIONA0X/oFlPgDs9ja66OopTobfEU=
Subject key identifier: 0B:9A:6D:A9:B9:0C:83:D9:BB:60:FF:D9:9B:DD:1F:DA:16:4D:8D:46
Authority key identifier: 1E:AB:4E:00:C0:D9:2C:B5:01:BB:B2:23:AC:F0:39:E2:70:91:DB:4E
Certificate issuer: /CN=1eab4e00c0d92cb501bbb223acf039e27091db4e
Certificate serial: 01A0D3837289A91755B18490B04AD90E84D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqtOAMDZLLUBu7IjrPA54nCR204.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.mft
Manifest number: 1939
Signing time: Thu 24 Sep 2026 13:03:21 +0000
Manifest this update: Thu 24 Sep 2026 13:03:21 +0000
Manifest next update: Fri 25 Sep 2026 13:03:21 +0000
Files and hashes: 1: HqtOAMDZLLUBu7IjrPA54nCR204.crl (hash: 7o28srFMJzZQnMzym7ldYXtbGKxpYXx/b3V1cR2hHZE=)
2: whXPzPuEVZS_Ryn2sgcT7m9P8dA.roa (hash: JcZ3tM12MerqC0+RrqC4HBYHgE8TDlz33TUN53BsW3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqtOAMDZLLUBu7IjrPA54nCR204.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:72:89:a9:17:55:b1:84:90:b0:4a:d9:0e:84:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eab4e00c0d92cb501bbb223acf039e27091db4e
Validity
Not Before: Sep 24 13:03:21 2026 GMT
Not After : Sep 25 13:03:21 2026 GMT
Subject: CN=0b9a6da9b90c83d9bb60ffd99bdd1fda164d8d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f0:8f:b0:78:6e:df:5c:99:19:63:24:fd:b6:
2d:42:2a:33:e5:d2:cf:a5:cd:65:d9:d6:ef:d2:51:
56:dd:6c:ed:80:dc:09:96:ca:ea:75:ed:75:62:e7:
16:a6:db:c8:4b:74:40:46:65:c7:2b:55:cf:82:40:
87:b6:4e:2a:a9:4c:d1:71:45:d5:b3:8f:79:d6:41:
dd:d4:7c:37:51:2b:6b:ce:e1:c3:c1:fa:03:3e:cd:
b1:3d:a7:86:37:5b:c5:0d:20:6e:df:52:86:dc:15:
3a:d4:f7:3f:66:ad:a5:f2:42:57:13:2e:47:98:11:
76:ba:fd:3a:34:d6:f7:05:ed:8f:76:7d:2b:82:6a:
af:2d:06:3a:c7:d9:f7:5e:4d:a2:e8:aa:34:0f:0c:
fa:5b:6d:fc:2c:4c:f7:18:b5:a7:dd:2a:f1:66:f7:
b1:b7:58:91:2f:b9:ac:98:7a:4f:5c:4a:d5:81:95:
ed:17:a4:9a:20:df:42:7f:2d:b6:dc:c6:a5:da:28:
22:cd:65:8b:9a:dd:09:02:85:7d:61:12:7c:d9:b3:
30:65:a5:01:9d:94:3a:65:cf:8b:b8:f8:a0:87:aa:
67:69:7f:c5:b0:6b:68:ec:f7:e4:80:cb:c6:08:48:
52:3b:fb:5c:33:57:6d:1b:12:aa:5e:6c:a7:69:75:
ce:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9A:6D:A9:B9:0C:83:D9:BB:60:FF:D9:9B:DD:1F:DA:16:4D:8D:46
X509v3 Authority Key Identifier:
keyid:1E:AB:4E:00:C0:D9:2C:B5:01:BB:B2:23:AC:F0:39:E2:70:91:DB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqtOAMDZLLUBu7IjrPA54nCR204.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d8:00:ea:dd:d5:7e:cd:7b:9d:b4:64:34:04:5a:e4:f7:5f:
01:1d:e2:9d:d4:53:f7:31:19:db:34:a7:98:74:be:66:2b:fc:
b1:0d:ec:bd:57:af:94:2c:8e:5c:30:69:54:fb:58:4b:14:40:
4e:52:89:50:97:70:08:b2:58:b0:a3:68:66:b1:52:a8:9e:ff:
3a:2a:c7:e8:91:45:eb:7c:1a:5c:0b:9a:4d:c8:d2:96:8a:c8:
ca:d1:c4:b1:fc:c0:6c:49:4a:2b:8c:0a:06:f9:c0:74:10:da:
58:68:8c:19:f3:f2:61:92:09:aa:d7:16:66:12:68:c3:bd:38:
42:70:8c:3e:d4:11:95:bc:5f:68:67:f3:72:24:2c:88:08:7c:
b1:a2:fd:b4:0c:f7:74:90:d8:d0:0e:ba:2b:56:e6:10:33:1f:
39:f9:f6:aa:30:67:41:ad:ca:c6:9a:20:8d:69:a2:f4:e4:19:
ee:87:19:2f:d1:fd:fa:03:4a:0b:a5:05:ec:73:36:7f:59:6d:
3d:19:73:6a:a4:8d:6f:54:01:9c:e4:a0:b0:a6:37:55:17:97:
b9:fa:2e:ff:ba:42:c2:ea:30:05:12:4d:2b:92:2b:c8:c1:ba:
da:4e:a9:c7:50:32:3a:83:75:72:02:c6:d4:4d:04:d3:13:4f:
3c:6c:49:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:23:18 2026 by rpki-client