Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
File: HgUGRdac54HkkMDzxJle5tTmB4s.mft (raw, json)
Hash identifier: IqFVvlqPXUDhjCNhGxvkHxK7E669WejPCpqpUoczgwY=
Subject key identifier: 3A:76:32:1A:DF:D1:87:46:41:65:05:54:5B:3A:9B:E7:D9:40:08:74
Authority key identifier: 1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
Certificate issuer: /CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Certificate serial: 019D292927C9CF498BD506D54250381AE5A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
Manifest number: 0A61
Signing time: Thu 26 Mar 2026 08:00:56 +0000
Manifest this update: Thu 26 Mar 2026 08:00:56 +0000
Manifest next update: Fri 27 Mar 2026 08:00:56 +0000
Files and hashes: 1: 5IFZ-RmjX0QAE3XiRGeeU_gKW5s.roa (hash: x/Xn+2RJGz1zNEVIxZWPaaeHvskHVXZOixdJtJ5ELpU=)
2: HgUGRdac54HkkMDzxJle5tTmB4s.crl (hash: dthlvq664b6SBs8TexsDjG+IagXoYcx3ug+V0gM8Jc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:27:c9:cf:49:8b:d5:06:d5:42:50:38:1a:e5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Validity
Not Before: Mar 26 08:00:56 2026 GMT
Not After : Mar 27 08:00:56 2026 GMT
Subject: CN=3a76321adfd18746416505545b3a9be7d9400874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:f4:e1:e1:cc:b0:43:81:6b:1d:fc:e0:c9:
3a:e4:55:b0:d5:a3:6f:0c:c8:fb:79:43:9a:85:93:
df:18:5c:fa:87:0e:c9:c5:43:41:8c:f4:ce:e1:45:
68:ee:82:e8:f1:e7:6c:ff:66:9c:85:96:8c:6e:f7:
8b:a3:46:b2:fe:a2:6a:cb:74:aa:90:fc:ac:18:a9:
9d:e7:2e:f3:33:8e:f3:fd:d8:57:e9:dc:e1:94:8b:
1b:59:cd:5e:f5:40:82:d9:ff:66:0a:52:1b:57:0b:
a1:b7:ce:5e:0f:33:30:d8:fc:e3:ee:4d:6e:91:39:
39:a9:7b:e8:d6:0a:df:16:4a:70:35:1c:28:bd:60:
91:62:51:d4:81:05:20:8f:f0:04:82:61:98:76:46:
d8:f0:ef:f7:18:df:78:04:af:4b:01:ab:8a:19:76:
74:68:e4:d6:60:f5:95:03:56:98:8c:aa:f0:75:3a:
0b:80:75:30:bf:a5:76:53:e8:a0:82:7c:bc:74:73:
52:f4:2f:7e:1a:09:af:04:7d:c2:d0:3e:bf:af:0d:
86:18:90:95:ec:57:84:83:5d:32:30:d5:2d:8c:33:
81:1a:34:93:71:21:c7:1b:65:53:e4:b7:3d:11:85:
6f:53:2f:5d:8b:ea:8a:fe:3d:02:eb:66:d3:60:69:
3e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:76:32:1A:DF:D1:87:46:41:65:05:54:5B:3A:9B:E7:D9:40:08:74
X509v3 Authority Key Identifier:
keyid:1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7f:08:d9:dd:25:02:97:14:f7:14:ac:c9:74:37:3d:b8:3b:
1c:69:23:8e:82:c6:12:c6:2e:95:36:5b:49:96:38:9d:a8:44:
29:cf:e8:43:08:00:af:5b:87:7c:cb:ed:53:44:8c:dc:78:74:
d2:5d:7a:3c:e7:ee:a2:2f:ba:72:f5:41:8f:30:d0:4c:d2:67:
10:0c:4c:aa:75:30:78:a1:66:96:5d:79:11:52:84:ce:c1:c0:
8a:56:16:04:d2:6f:39:e9:47:f8:2f:ed:7e:29:22:6f:43:0d:
60:1c:c5:43:34:d9:7a:73:15:8e:a9:d9:b8:70:0e:cc:96:f2:
98:45:cd:91:64:06:01:90:aa:34:c3:f7:f6:c3:67:64:cb:21:
e3:a2:47:75:da:fb:e4:54:c1:6c:62:d2:a0:49:73:b0:8e:e0:
3f:41:4b:2a:4e:8b:db:b4:27:af:b4:20:4c:36:db:a2:05:f7:
c7:36:ce:52:f3:ec:83:30:ea:7b:9d:cf:61:42:96:4b:b7:0e:
3e:0c:26:a8:b0:79:aa:6a:eb:10:8e:f7:81:3c:c6:5e:9c:86:
a0:50:c4:0f:d7:f3:ab:63:5e:0d:75:c0:a9:5f:9f:b4:bf:f7:
00:20:dd:2c:d5:7e:f7:ef:4a:61:76:82:bf:8b:f0:5a:aa:59:
86:aa:c1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:52 2026 by rpki-client