Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
File: hGzXvBkUIFasr5VzyqGvjehxgVY.mft (raw, json)
Hash identifier: C13KTZnjIaE9rSC/zNBATcGtzW+LTAEnd5C/tTiE8r4=
Subject key identifier: A8:5D:FD:68:92:22:59:A8:86:3C:D7:C8:AB:AB:E4:90:CF:94:B3:9F
Authority key identifier: 84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
Certificate issuer: /CN=846cd7bc19142056acaf9573caa1af8de8718156
Certificate serial: 01A1273108623CC4E14EAB4848329BD36E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
Manifest number: 05E5
Signing time: Sat 10 Oct 2026 19:01:27 +0000
Manifest this update: Sat 10 Oct 2026 19:01:27 +0000
Manifest next update: Sun 11 Oct 2026 19:01:27 +0000
Files and hashes: 1: hGzXvBkUIFasr5VzyqGvjehxgVY.crl (hash: dY5vx+MyzoZTR62nSYdryhbu99z/JHvvJsbRgETuwAU=)
2: uoOfCKkTnW2JzFJRrSJDBT5bTzc.roa (hash: jS+d7zXHIn78Fh4bwNdoOL3BSqCzsjrWEmoa3PN6ng4=)
3: wOpotjYca3hIDPpRRC4dKRWIXpY.roa (hash: ILk18RM+vK4poNQ402hCagvt+4XgooFqtYGnOzDde5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 19:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:31:08:62:3c:c4:e1:4e:ab:48:48:32:9b:d3:6e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846cd7bc19142056acaf9573caa1af8de8718156
Validity
Not Before: Oct 10 19:01:27 2026 GMT
Not After : Oct 11 19:01:27 2026 GMT
Subject: CN=a85dfd68922259a8863cd7c8ababe490cf94b39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:81:0c:c5:56:ee:33:a6:ea:1a:e1:26:c6:63:
81:bd:66:67:f3:3b:88:82:73:70:2c:06:d3:a5:95:
0f:48:0b:c2:df:d0:d2:f3:45:1a:ec:8a:b0:95:ab:
97:6c:c9:88:53:6c:cd:4d:cc:e6:ba:c8:7c:36:46:
f9:f9:09:70:39:0c:73:97:53:bd:7d:2e:79:13:e8:
f7:97:6d:40:e4:4a:cc:f7:be:48:80:82:79:f1:00:
f1:30:ba:14:d9:6d:1e:62:de:5e:da:42:f7:cf:a2:
78:93:5a:44:dd:e7:b1:26:59:e9:29:dc:c0:e1:b0:
87:a2:42:7e:80:f6:49:db:74:06:37:64:de:dc:cc:
b8:c9:e5:04:11:55:0b:98:df:96:98:c6:b6:05:31:
3b:4b:8f:d4:f5:a4:a8:9a:a6:1c:e8:e1:ea:5b:a4:
3f:a5:f8:9d:66:cd:c3:c5:dc:d8:fc:e0:f7:85:c1:
86:59:5b:0b:92:f7:c5:2f:31:c4:10:45:c9:e1:19:
be:b2:07:f5:60:cb:da:45:0f:0a:5a:14:15:f8:40:
92:f2:bc:f1:61:f0:af:c3:a0:e8:e7:48:b0:ce:67:
d5:3e:24:14:7c:8f:8b:ba:b7:a6:cd:85:99:60:e9:
05:bf:e6:c6:83:b5:d9:68:f6:f3:d8:66:4c:f9:4d:
2e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5D:FD:68:92:22:59:A8:86:3C:D7:C8:AB:AB:E4:90:CF:94:B3:9F
X509v3 Authority Key Identifier:
keyid:84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:56:d7:9d:e1:e3:df:02:86:05:b1:d3:35:4b:e6:e0:a7:5a:
e3:70:8e:c3:db:c8:6c:d9:82:65:6c:c5:01:8b:f1:a8:e5:dd:
22:b0:b4:76:e1:4f:e8:9a:17:8d:52:cd:b1:8a:7d:72:83:5e:
91:af:6b:5c:7e:17:e1:90:ba:9f:ab:62:aa:7f:b0:30:9f:ea:
30:a2:5d:7b:7c:71:e8:ef:b3:be:b7:57:a7:53:e2:3e:85:07:
a7:3a:22:fc:f7:8f:23:f8:b6:c6:91:51:de:77:f3:2c:2f:71:
8a:fb:5f:7b:8f:af:da:a5:b1:45:ad:03:5e:80:7e:1d:3c:4a:
58:0c:33:5b:98:bd:dc:6e:fb:2b:35:bd:1d:6e:cd:96:64:97:
9f:f4:47:45:da:3f:a6:4b:6f:45:65:4d:6e:92:a6:8e:36:aa:
be:db:de:5e:d8:c7:a6:14:e5:43:14:c7:d0:bd:96:e0:55:dc:
4d:25:37:e5:03:44:2c:bb:ab:24:c9:cd:2a:ba:12:50:32:f9:
77:97:5c:a9:52:42:0b:c6:2d:20:e6:60:ca:69:10:ef:d9:13:
32:06:54:a2:f3:3a:00:bf:9d:58:ed:d4:c7:e3:ff:e9:f8:b1:
3b:38:29:30:b8:3e:0e:ec:6c:7b:f8:b2:e2:d4:58:ee:f5:92:
77:67:dc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 00:40:48 2026 by rpki-client