Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft (raw, json)
Hash identifier: q70w7xHI+jrjCsv1f1TyVafwgNJXY5LEEJaAmb4ImMk=
Subject key identifier: 2A:EB:19:C3:03:A6:59:06:4D:77:8B:86:8E:B6:96:0F:46:5B:C1:C0
Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Certificate serial: 019E1E6C2DE3E1934B0299F1798C3BB73B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 23:01:06 +0000
Manifest this update: Tue 12 May 2026 23:01:06 +0000
Manifest next update: Wed 13 May 2026 23:01:06 +0000
Files and hashes: 1: hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl (hash: hAAWA2/TIEGgz9OzWxeqsZioSumVoLku11gJlxvIZQY=)
2: vFI_szTdwGut2KUofHDh3zwoi1k.roa (hash: MxrZSZTPx1kjzcHF3plautdDk7QOfOy+oz7wimPfgjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:2d:e3:e1:93:4b:02:99:f1:79:8c:3b:b7:3b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Validity
Not Before: May 12 23:01:06 2026 GMT
Not After : May 13 23:01:06 2026 GMT
Subject: CN=2aeb19c303a659064d778b868eb6960f465bc1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:30:ce:6b:38:bb:a8:4a:5a:b7:57:ed:a9:
06:75:19:a7:de:ac:f2:42:bf:dd:25:e4:9d:a0:59:
19:f2:a6:d8:dc:57:8b:da:b2:a1:00:a4:ea:37:86:
da:10:02:05:ce:54:b7:59:bc:04:9f:e3:e9:10:fc:
07:69:6b:9c:ff:f8:68:6b:45:81:44:86:c7:43:a2:
ab:42:d6:40:c1:1e:21:8f:18:09:ea:06:87:15:55:
06:5a:85:97:c1:e5:6d:1b:60:73:63:8a:ee:0b:4b:
6c:b3:53:57:f8:c3:77:b9:4c:7f:f9:26:8e:a8:b3:
31:f9:86:41:3f:55:9c:6b:c6:63:89:bb:cc:dc:50:
56:7f:c0:48:a5:15:25:02:78:1c:3d:49:db:76:e1:
cb:27:63:e8:69:c1:1c:1b:f3:a6:8b:a5:85:c7:17:
55:2e:fe:c1:fd:79:b4:57:c0:42:34:e6:fb:d7:42:
c3:7f:58:c1:0f:6e:b0:f6:9f:e3:4c:3d:c0:40:db:
61:29:3b:59:8b:8f:97:e3:89:a6:a8:e5:88:55:4e:
ab:af:fe:27:32:57:87:8b:b3:84:aa:3e:fb:bf:cf:
fb:23:28:c9:30:73:91:34:40:86:5b:b3:8d:9e:91:
89:51:8a:d3:e0:a6:14:a9:ea:40:83:03:e4:7a:2b:
d2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EB:19:C3:03:A6:59:06:4D:77:8B:86:8E:B6:96:0F:46:5B:C1:C0
X509v3 Authority Key Identifier:
keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:82:9d:74:67:ad:1d:98:81:cd:c1:da:47:ac:60:f3:a2:d1:
2f:94:c4:cc:61:04:d7:a9:5b:f4:f7:db:5b:cc:a4:96:29:98:
c4:d2:dd:50:83:75:c7:24:4e:ba:87:ce:d3:20:47:0a:5a:07:
b1:db:b9:b5:8d:b6:32:ab:a8:ee:b5:e1:81:a3:91:76:80:c3:
fc:a3:70:36:c2:79:ee:17:8f:d4:3f:ec:47:47:88:8b:32:5e:
43:45:b8:0d:51:0a:7a:f4:ea:32:82:fd:3e:72:bc:76:92:fd:
9f:12:24:6d:d7:98:56:8a:ac:31:2f:a7:82:3d:fa:5d:f7:fc:
de:4f:93:f4:56:52:b6:04:b6:2e:20:47:e9:a5:0d:62:3a:71:
b3:19:d3:04:89:d8:7d:b4:f4:4f:5d:04:89:0d:5a:05:57:aa:
8f:9e:35:e0:ec:3c:0d:66:36:df:4f:7e:12:8e:6a:89:d3:c1:
a1:ca:04:e9:05:a4:2b:ca:37:a6:13:8f:3a:12:c0:25:1b:00:
11:14:e2:da:14:3e:84:a7:49:cb:7a:50:dd:f1:31:88:87:7d:
fb:9f:55:5d:15:8c:27:54:b0:c3:a2:9e:6b:cb:af:fc:92:c8:
bb:95:d4:7c:e1:0f:12:02:87:53:2f:68:e0:3b:18:31:88:b4:
0c:9d:d3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:50 2026 by rpki-client