Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
File: HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json)
Hash identifier: BH6geH6Woo5cX6w+Dy6BqjnyRAFSPx/rTnXqmwkp0qU=
Subject key identifier: 8A:AC:BD:7C:53:F0:98:54:4C:71:96:FB:93:F8:6D:AC:34:71:9C:48
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 01A0F756E5B8E6CDF22976C7E32F37E0FF21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
Manifest number: 1143
Signing time: Thu 01 Oct 2026 12:01:02 +0000
Manifest this update: Thu 01 Oct 2026 12:01:02 +0000
Manifest next update: Fri 02 Oct 2026 12:01:02 +0000
Files and hashes: 1: A_5oAx6RTX4seU-tsf_hsJM1QfM.roa (hash: v9Bgj8QT90sJo8g5+vI6AXOfjQ2Zxqu0x7TfHuAGD6g=)
2: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: Q9hzW7GhtH6S1q3F4K54QUREYYxgrDhclPlQzqYVP8k=)
3: IzAZsf_Qc2A8pMxdGG-nBxB2gRw.roa (hash: 4TJbYmdeXG/rQN3FAOOPwKLfkTdziJof+SKAImG/iP0=)
4: UMrtA1CGXOz9XaTkZnypaeWfgfc.roa (hash: fVCMIXsbAOrWuXeDoUAcmRm+Ggqxi1Y+KIZIzOxGefE=)
5: liurjQr2aFUZ4RN7sB5e2xaGm1M.roa (hash: YNt6MjSDV5Wvd3Oc5pFyN0vEC7cDDHJYrDTH0YBIpGY=)
6: y8T-OnSHS8KphnZfx-lxWGEZlNE.roa (hash: nZ71mZy2AA0dMJgbrAVpJjwAvbt0DILNAhhtTBiU8OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:56:e5:b8:e6:cd:f2:29:76:c7:e3:2f:37:e0:ff:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Oct 1 12:01:02 2026 GMT
Not After : Oct 2 12:01:02 2026 GMT
Subject: CN=8aacbd7c53f098544c7196fb93f86dac34719c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:54:39:4b:cf:0b:6e:e9:86:69:1c:23:ee:4b:
72:aa:6d:c9:1f:0d:5d:1f:b4:86:6d:00:a1:31:74:
ba:40:79:6d:c7:ba:ac:ac:dc:b8:3d:20:b4:51:3e:
7f:e8:8e:7a:26:79:e8:46:79:3b:bd:00:dd:7b:6f:
ab:6b:e3:58:b5:a9:cb:11:b3:62:16:37:03:0f:4f:
e9:64:f4:9f:95:e9:4e:c5:36:37:ea:32:b5:5c:f7:
88:15:c0:46:6d:4e:6c:37:cc:62:44:d9:fb:04:96:
66:e6:9f:e8:9a:f4:a7:01:05:14:16:89:6b:e7:7b:
1c:aa:77:4f:f5:08:9c:27:8e:59:34:37:9e:4f:bd:
6a:a6:0e:69:7b:8c:6f:2f:af:c7:68:fc:10:71:79:
74:13:a2:f9:61:f7:66:d5:0a:07:43:30:af:51:5d:
c1:5a:80:99:aa:09:6c:60:b1:d7:31:36:21:5b:7d:
cd:60:c4:cb:f9:58:45:68:b4:eb:ee:4a:af:b9:17:
95:17:ac:c5:4d:75:c3:46:97:90:ae:79:c1:bb:f0:
5e:a4:d1:c6:d7:37:e6:60:7d:0f:67:eb:bc:0a:e7:
ac:e9:0b:96:24:b9:ce:12:14:79:ff:2c:66:86:53:
92:f7:76:6d:2f:0e:51:ef:1f:aa:1b:65:96:17:77:
da:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AC:BD:7C:53:F0:98:54:4C:71:96:FB:93:F8:6D:AC:34:71:9C:48
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e7:c1:de:f2:64:3f:b3:f4:8a:3b:b7:a6:95:10:ee:f3:4b:
72:da:37:26:95:69:94:c4:f9:8d:e6:97:5f:46:74:e2:02:bb:
4f:e4:6a:ed:1b:ed:9c:57:ea:2e:a1:db:b9:96:ea:03:38:38:
ac:2c:50:cb:de:de:4a:bf:e9:ee:ac:32:b3:fd:5b:b3:9f:b9:
8e:e4:0c:d3:60:af:a0:cd:9f:7e:f3:83:51:da:72:46:d2:9a:
03:3a:d1:a1:22:30:ac:bf:b2:da:b1:f4:ef:db:7f:56:8d:1e:
1c:f4:42:27:f3:ee:14:4f:e6:71:92:a1:bf:5f:be:25:2c:fb:
c6:dd:fa:52:27:d6:0a:c3:90:e8:63:1e:11:f4:22:2b:d1:01:
27:51:5e:a3:93:10:9e:74:39:f9:9b:cf:22:22:8c:02:3a:a2:
f2:1d:e5:3e:0a:23:f7:2b:46:f4:74:27:bf:7f:e1:a0:68:eb:
4a:44:c6:b8:a3:d2:bd:29:42:50:c7:80:31:bf:f2:10:b7:51:
e6:e8:30:d2:ef:4c:47:0c:7d:52:6a:a2:74:6f:21:ec:a9:71:
e1:f1:93:e5:e3:bd:52:fa:5a:7b:a1:f6:66:90:e0:04:45:e3:
ab:56:08:8c:75:04:41:f4:aa:5e:4c:85:77:6f:dd:d7:8f:a2:
e3:c4:47:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 04:47:59 2026 by rpki-client