Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/hgyewNGzTkvXpk-QAgWTV0CbM8o.mft
File: hgyewNGzTkvXpk-QAgWTV0CbM8o.mft (raw, json)
Hash identifier: O6QvAXXrsM6l6Hkvm1pCpVZeOzJWz8wxma5cr/7WePw=
Subject key identifier: 76:C0:C5:1C:23:5F:EC:3C:E5:B9:84:BF:E2:B6:1C:44:2E:FD:03:34
Authority key identifier: 86:0C:9E:C0:D1:B3:4E:4B:D7:A6:4F:90:02:05:93:57:40:9B:33:CA
Certificate issuer: /CN=860c9ec0d1b34e4bd7a64f9002059357409b33ca
Certificate serial: 01A1231D3E6674159740238FA2A5B9B315AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgyewNGzTkvXpk-QAgWTV0CbM8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/hgyewNGzTkvXpk-QAgWTV0CbM8o.mft
Manifest number: 0110
Signing time: Sat 10 Oct 2026 00:01:21 +0000
Manifest this update: Sat 10 Oct 2026 00:01:21 +0000
Manifest next update: Sun 11 Oct 2026 00:01:21 +0000
Files and hashes: 1: 3H6PgooRGLT_mSPUyDMorwjEhUs.roa (hash: U5HujpHe+LmaURpE34QxCKE6KhEyc2Pqe68mUX3PjZQ=)
2: hgyewNGzTkvXpk-QAgWTV0CbM8o.crl (hash: 6zk71fLs6S1XP/tbhV0Wo+9e/XbXZWGDggWFtU8w4ZU=)
3: wyvBjZ-0ftuE8HVEKWNED0ouTx4.roa (hash: cpWy42Uj2If/l45ij0xFVto/b1Q0O7mBcXLVxEEvfaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/hgyewNGzTkvXpk-QAgWTV0CbM8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/hgyewNGzTkvXpk-QAgWTV0CbM8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgyewNGzTkvXpk-QAgWTV0CbM8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:1d:3e:66:74:15:97:40:23:8f:a2:a5:b9:b3:15:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860c9ec0d1b34e4bd7a64f9002059357409b33ca
Validity
Not Before: Oct 10 00:01:21 2026 GMT
Not After : Oct 11 00:01:21 2026 GMT
Subject: CN=76c0c51c235fec3ce5b984bfe2b61c442efd0334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:24:c4:b6:8b:40:c4:fb:fd:a3:66:c4:53:08:
bf:9f:e2:1f:06:e4:8b:06:cc:8f:0c:15:20:90:c3:
2a:17:f0:76:2f:9b:47:ad:45:c0:22:25:d5:40:95:
b5:fa:31:cd:3c:01:42:4b:82:74:16:71:54:3a:39:
f6:e0:a8:f1:67:05:50:b0:26:77:6d:e8:b2:06:2f:
8b:d5:68:fb:d3:6f:03:d2:04:a4:b1:8a:df:c7:b7:
76:4c:10:bb:ca:a6:9d:da:9c:d7:a1:c6:40:cf:fe:
93:9d:53:95:4b:a8:89:eb:d5:6d:cd:12:ab:fd:91:
29:01:fc:ab:b9:f0:bf:7c:5c:74:08:a3:f5:c1:3c:
2d:b9:f8:15:c8:58:7b:b9:e6:3e:47:55:45:6c:39:
3d:6a:e7:cb:ea:97:f5:ac:c8:7a:89:2f:17:2a:52:
e5:98:71:95:bc:b1:01:6f:1c:51:33:bd:d3:e4:37:
f2:ec:6d:b3:34:e0:64:db:47:57:6d:11:91:1a:72:
89:13:e9:31:8f:28:9d:63:20:18:07:2e:d6:aa:99:
44:29:6e:21:10:b8:63:5c:03:da:31:ed:08:79:c2:
c1:a7:47:b9:02:e0:33:53:9d:73:6a:da:4c:17:b7:
8d:bb:73:c9:a5:37:84:59:1a:30:54:7b:e9:2f:fe:
ec:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C0:C5:1C:23:5F:EC:3C:E5:B9:84:BF:E2:B6:1C:44:2E:FD:03:34
X509v3 Authority Key Identifier:
keyid:86:0C:9E:C0:D1:B3:4E:4B:D7:A6:4F:90:02:05:93:57:40:9B:33:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgyewNGzTkvXpk-QAgWTV0CbM8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/hgyewNGzTkvXpk-QAgWTV0CbM8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/hgyewNGzTkvXpk-QAgWTV0CbM8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5f:a4:d4:a2:62:a4:9d:1a:85:7e:98:04:aa:a6:15:cf:65:
ff:aa:06:72:a5:6e:e7:4c:59:54:9e:f6:54:6a:1a:cb:de:44:
e5:ac:c7:8d:7f:38:aa:eb:a7:9a:7a:fd:00:3f:95:e3:9a:c6:
bb:15:a9:6d:cc:1b:f6:90:3d:b1:28:62:a0:a0:19:7d:67:b0:
2b:5e:99:4d:14:22:7d:6b:48:ff:9c:b0:0e:4a:c1:ee:13:d8:
5f:b8:3a:39:66:bd:e1:2b:62:c1:e4:cd:35:a7:1e:fb:37:ab:
30:3c:c7:49:14:9d:c7:38:32:46:cf:1a:2f:72:3c:d1:8c:1e:
cf:1c:9d:77:e2:40:dc:d7:5a:23:ab:6a:a7:69:7e:25:ca:76:
d5:89:2b:10:15:34:c3:68:8a:e9:b9:ad:1c:16:fb:ac:a9:b8:
40:89:8a:8d:11:4d:18:1b:11:2d:d8:77:23:0e:7c:41:1b:41:
81:1f:08:41:13:cf:01:6d:7d:9d:14:23:e4:b0:8d:cf:36:91:
f9:8e:2f:7d:0d:2e:d8:86:31:4d:38:85:2d:16:18:1e:1b:b2:
6e:a6:84:97:44:4b:a0:61:16:8c:82:36:9f:9a:3e:2b:05:16:
6c:4c:fe:e4:1d:b3:5d:bd:df:32:f0:32:f6:10:29:7c:3a:19:
f0:5e:04:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 05:43:31 2026 by rpki-client