Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft (raw, json)
Hash identifier: EoNs8/wlnPKySgIgmiyhtOI804RqtdXTmJ5KxkvmSkQ=
Subject key identifier: 9D:3D:72:3D:34:0C:29:FB:31:6C:A6:D6:3E:B2:0E:70:68:3E:8A:50
Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Certificate serial: 01A0D3B8D9FF7B2D38B20494C2825A3C6B63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 14:01:42 +0000
Manifest this update: Thu 24 Sep 2026 14:01:42 +0000
Manifest next update: Fri 25 Sep 2026 14:01:42 +0000
Files and hashes: 1: hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl (hash: ubjzx+GDLvlU8EscCO/h+zy48uM31FRsasQvK6XT0X0=)
2: vFI_szTdwGut2KUofHDh3zwoi1k.roa (hash: MxrZSZTPx1kjzcHF3plautdDk7QOfOy+oz7wimPfgjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:d9:ff:7b:2d:38:b2:04:94:c2:82:5a:3c:6b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Validity
Not Before: Sep 24 14:01:42 2026 GMT
Not After : Sep 25 14:01:42 2026 GMT
Subject: CN=9d3d723d340c29fb316ca6d63eb20e70683e8a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:0c:e4:e3:f3:b5:af:28:e9:0a:bd:ee:c2:
c8:ea:5c:eb:2f:cb:b2:58:df:37:fa:d8:2a:17:12:
1c:e2:26:99:5b:57:40:04:95:10:3e:0a:b9:46:fe:
6d:5e:34:2e:9e:47:52:e9:3c:46:5e:6d:c5:ca:f9:
5b:3a:f8:26:be:ff:e0:9c:ab:be:8c:7f:2b:80:94:
1f:9c:23:33:5d:41:ee:5b:2a:eb:5c:42:62:5a:6f:
a0:5b:ee:5a:45:7d:8c:2d:7f:23:ca:73:dd:9d:af:
f5:47:ae:96:27:21:87:ac:d8:d2:a2:aa:bd:06:0e:
1f:7b:49:9b:8d:71:00:9a:63:60:13:de:62:7a:b3:
1b:1a:0e:06:ad:d8:d2:fc:34:89:f3:d2:72:57:bf:
f5:21:d2:1e:97:1e:a1:68:59:33:3a:58:0a:fd:30:
9b:d9:a1:25:8e:26:e6:b6:62:1d:a6:c6:c1:50:f0:
db:d4:ec:0d:46:9b:10:1d:1d:8b:63:36:73:9e:97:
ae:6b:dc:49:6e:1d:83:e8:02:79:df:8a:3e:24:f8:
a3:a6:67:e3:19:e1:0b:b0:c7:f1:fa:c1:a2:2a:86:
87:93:e3:f9:51:bf:2f:f6:57:ed:8f:c7:c0:da:27:
0f:23:36:a1:7f:2a:f0:17:c7:e3:1d:1e:c7:af:67:
29:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3D:72:3D:34:0C:29:FB:31:6C:A6:D6:3E:B2:0E:70:68:3E:8A:50
X509v3 Authority Key Identifier:
keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:a2:39:18:f9:60:14:52:19:e4:25:ba:ea:bb:bb:ba:40:f9:
05:f6:96:d9:d2:0b:6e:31:6c:ef:77:96:be:af:0b:fd:e5:fd:
7f:17:cb:e3:a0:f4:78:f0:67:3f:f9:44:ab:03:86:4e:86:55:
99:6d:7b:3a:ca:62:fe:0b:98:52:5e:79:98:ba:68:53:62:9e:
2f:55:0a:53:2d:37:bd:80:d6:ee:a0:23:dc:9a:9b:1f:b9:d4:
cd:cb:5c:5b:b3:10:36:30:dd:03:67:74:20:20:fd:5c:19:f0:
f2:4c:99:f3:9f:ca:72:9c:0d:c9:63:18:13:48:65:cf:7d:30:
68:03:a3:c4:ed:2b:f4:94:66:23:d2:1d:8f:8d:42:97:82:ac:
4c:8b:05:13:ab:f1:17:0c:78:aa:99:0f:a3:8d:7c:7d:a6:b8:
d8:0e:1c:c9:26:c3:fa:d1:2d:b4:69:c5:3f:16:3a:34:46:af:
6b:e6:84:26:63:00:0e:b7:27:53:ba:40:fe:c4:35:71:f2:05:
ec:98:34:67:c2:20:f2:ac:35:d5:32:88:03:49:3b:cd:7f:e7:
d2:86:ad:bf:61:5a:80:dd:a2:27:2d:80:24:d2:fa:a0:d7:ee:
47:35:d5:5d:f1:02:8b:b8:83:03:57:05:d5:6e:49:02:c7:68:
50:25:b5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:51:23 2026 by rpki-client