Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft (raw, json)
Hash identifier: rv/s3ibav9KI8byj1Pwvjnv63V50VulyBh5Trv30XjE=
Subject key identifier: 68:20:0D:23:69:31:F3:4B:5C:24:2C:0E:06:A6:0E:87:CD:97:FF:75
Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Certificate serial: 019F91357A61E6C1B0F98F409789D43EF737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 23:00:28 +0000
Manifest this update: Thu 23 Jul 2026 23:00:28 +0000
Manifest next update: Fri 24 Jul 2026 23:00:28 +0000
Files and hashes: 1: hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl (hash: oEsMdH14jJrxn0LOLEmOHRou+ngmOanu8HZ2HqBVTUM=)
2: vFI_szTdwGut2KUofHDh3zwoi1k.roa (hash: MxrZSZTPx1kjzcHF3plautdDk7QOfOy+oz7wimPfgjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:7a:61:e6:c1:b0:f9:8f:40:97:89:d4:3e:f7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Validity
Not Before: Jul 23 23:00:28 2026 GMT
Not After : Jul 24 23:00:28 2026 GMT
Subject: CN=68200d236931f34b5c242c0e06a60e87cd97ff75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:56:08:38:a6:a2:64:ae:58:d7:71:bf:77:8b:
76:27:ab:97:fa:b8:6d:fa:4e:03:eb:9a:84:2a:6b:
16:ee:54:13:1a:b5:e6:ec:3b:7b:67:de:4f:79:b4:
03:34:5a:1f:6a:c6:36:da:8b:f4:32:8c:dc:cd:a3:
d4:85:c0:85:df:3b:31:b5:90:8e:8f:d1:95:97:8d:
4b:39:f7:eb:64:f8:4c:b3:1f:b4:ca:11:dc:22:0e:
4a:6e:1e:89:4e:dd:f5:31:63:96:aa:69:ab:af:2c:
4d:13:9d:8a:72:66:f6:e3:06:d7:4f:f4:59:18:dc:
a0:d8:1a:b2:0f:50:d3:03:c6:54:60:d1:39:42:ab:
a2:4a:c1:b2:7a:5e:0b:ad:45:9f:47:2c:be:cb:4e:
1c:dc:8f:17:99:8b:54:1a:9e:20:7d:f1:d8:d2:b3:
e2:b1:91:14:1d:0b:f6:f0:1e:60:ca:be:0f:d4:26:
af:23:31:54:d6:db:93:c4:93:f0:53:d8:51:3f:bc:
ee:35:7a:db:10:11:d5:25:2f:21:ff:6b:2b:d7:cf:
9c:a5:aa:7e:1e:c0:cc:d3:87:ca:14:3d:6f:b6:6d:
6f:e2:42:27:7d:f9:88:f9:a7:14:9c:f5:2b:6a:e3:
87:5b:3b:af:90:c3:2b:ae:ad:44:0d:8b:9e:cc:cd:
c9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:20:0D:23:69:31:F3:4B:5C:24:2C:0E:06:A6:0E:87:CD:97:FF:75
X509v3 Authority Key Identifier:
keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:78:cf:ad:63:6d:bb:e6:4d:69:12:2a:14:f2:51:be:04:84:
8c:2c:bd:35:5e:e9:60:fe:a3:2b:11:24:59:de:bc:e9:0c:84:
02:cd:21:8b:46:21:d4:4c:05:fb:92:a9:bd:5d:66:13:a7:91:
9e:a8:bc:49:ec:f9:52:0f:a3:a0:de:b3:fe:45:d8:3b:df:ca:
b1:5b:1f:07:bd:29:94:72:44:bc:3f:b1:63:cf:3a:2e:42:5e:
03:16:5b:6e:26:da:73:bd:dd:d7:64:3f:ca:11:65:61:0f:a3:
fd:3f:3d:5f:a0:15:4c:e9:99:25:d8:41:26:99:a6:87:41:95:
81:32:30:2a:b8:b2:ab:a5:b2:3d:47:29:17:8a:70:e5:2d:f5:
8e:1d:2a:d2:7f:d8:a5:1a:82:df:da:69:6b:85:52:64:d6:c7:
e7:bd:57:fe:59:3a:e2:c4:5b:f2:30:ed:11:50:0b:5e:f0:a1:
12:3e:eb:59:45:39:6d:73:fe:19:c9:0b:04:64:d1:e1:db:49:
3f:13:58:e6:ca:f2:33:46:b9:5a:3d:a0:f0:69:49:64:8c:20:
dc:57:7c:1b:70:81:cd:d4:7b:89:cb:25:7c:19:42:90:de:bd:
5e:fa:67:f3:9d:54:9a:3d:aa:ae:d5:fb:81:94:79:0e:ca:54:
37:c8:bc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:24:54 2026 by rpki-client