Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
File: hGlcglEp42VKUIs7xSn-Ols4ObE.mft (raw, json)
Hash identifier: p1otTisXZPIbBlw0LFIORcLaOqdEzlrBiv0J14hiaGA=
Subject key identifier: 12:D7:AA:3D:A9:D2:ED:57:BC:65:12:B2:33:B0:3C:83:EC:BB:4B:32
Authority key identifier: 84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
Certificate issuer: /CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Certificate serial: 01A0DC16FF896D1CDA52A6A5B7E758FC9D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
Manifest number: 15C3
Signing time: Sat 26 Sep 2026 05:01:29 +0000
Manifest this update: Sat 26 Sep 2026 05:01:29 +0000
Manifest next update: Sun 27 Sep 2026 05:01:29 +0000
Files and hashes: 1: WJgbjZB87tJLoahMumVDjucLblI.roa (hash: YviU04V4NEhTzYiRRcQuelFb9gp3nZ2OardyM6DZLlI=)
2: hGlcglEp42VKUIs7xSn-Ols4ObE.crl (hash: bRQuMsh6+x3tZpcvl0VswtUQ0JEIu/Aq8ifx75W/rj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:16:ff:89:6d:1c:da:52:a6:a5:b7:e7:58:fc:9d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Validity
Not Before: Sep 26 05:01:29 2026 GMT
Not After : Sep 27 05:01:29 2026 GMT
Subject: CN=12d7aa3da9d2ed57bc6512b233b03c83ecbb4b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:46:ac:8e:a9:dc:16:5a:39:2e:69:49:4e:01:
1a:25:ca:2d:d7:8e:5e:04:73:f4:ac:4a:39:8f:8e:
82:f3:0c:4d:ef:c9:74:77:d5:12:0e:4a:de:73:63:
a5:71:ad:b8:24:75:5c:5c:38:1d:6d:91:35:b7:85:
b2:0d:b8:ca:5a:68:8b:79:3b:c6:c2:88:5e:7c:6f:
55:72:f1:67:da:aa:5b:fe:0e:42:f8:c0:1a:0c:b7:
81:1a:38:17:1a:4c:cb:cf:1a:7c:f2:0f:31:92:2c:
f2:b6:6e:59:cf:e3:71:a8:9d:07:69:4f:3e:18:f7:
43:3f:a4:d1:12:30:3f:dd:90:93:ea:a0:d1:f2:46:
d0:6d:ba:6f:c8:8b:b1:ab:df:05:48:7c:20:c8:24:
b8:bf:b5:11:6a:3a:e0:2e:c4:b6:25:48:9b:44:16:
35:27:06:43:4c:db:b5:48:76:7a:0b:6c:8e:af:48:
11:77:26:41:d7:29:63:b8:76:b3:95:2d:8a:fa:a0:
77:58:eb:98:92:3b:b4:c1:fe:2e:28:c8:b1:16:d7:
93:1a:34:60:1b:2d:54:0d:f8:fd:a7:93:79:17:15:
59:86:53:3b:fe:d4:08:8a:6f:f5:9a:77:31:f7:81:
1a:76:dc:da:dd:d1:7e:ba:68:ed:f9:68:f4:6a:6d:
8e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D7:AA:3D:A9:D2:ED:57:BC:65:12:B2:33:B0:3C:83:EC:BB:4B:32
X509v3 Authority Key Identifier:
keyid:84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:84:41:34:f0:2e:02:87:ae:e1:ca:ff:fd:2b:5f:8e:bb:d9:
a9:74:19:43:13:35:a2:20:a0:65:3c:6a:83:ac:b1:f0:b9:48:
3e:a8:c2:d5:cf:3e:ae:38:ed:f4:15:a8:21:a9:54:20:c3:8f:
f1:da:3b:a8:d8:79:1a:41:c4:4a:e7:1a:83:45:93:e8:5d:b8:
76:8a:a7:a9:bf:18:03:9a:d4:a6:8d:4f:a5:90:d4:de:7a:41:
a7:fb:c7:f1:0a:b2:19:bc:5b:ff:8f:8f:23:64:41:ea:8c:56:
a9:e0:36:67:ed:ba:45:9b:7c:b6:28:d1:59:7f:6f:f1:a0:25:
4f:27:b6:ca:08:44:58:c7:1c:f4:d4:9f:20:65:1d:ad:ec:d0:
80:a6:69:80:11:14:ae:f1:70:9d:56:2d:8d:02:ba:9d:67:bd:
c8:c2:d2:54:c3:53:b9:e0:cc:ad:ce:5a:77:76:89:47:bb:16:
87:d5:99:76:e4:b8:f7:42:37:f7:22:e1:3e:c3:91:cf:3d:8c:
18:2d:43:49:1a:12:f9:f7:65:21:c5:8e:1d:b7:d2:cd:1a:eb:
0b:81:ff:cd:d5:fa:cf:5a:c6:2d:eb:03:ad:8b:a7:8c:43:e4:
b3:ee:f9:41:13:0f:d6:e8:86:a1:ae:65:28:d7:c7:9c:0a:45:
35:9d:19:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:14:27 2026 by rpki-client