Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
File: hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft (raw, json)
Hash identifier: ACfiFag54oQgXd5ZIkrko4RgBZfgOvGiH80E4n4qwZc=
Subject key identifier: C7:CC:86:9D:40:38:E9:63:F1:29:86:F7:C6:23:C5:84:25:4D:F8:26
Authority key identifier: 86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
Certificate issuer: /CN=86022e162f6e6b9755ce4ce845120e62939506f7
Certificate serial: 019D27A883B0633A8710693A25F2A6A3D30D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
Manifest number: 17DF
Signing time: Thu 26 Mar 2026 01:00:48 +0000
Manifest this update: Thu 26 Mar 2026 01:00:48 +0000
Manifest next update: Fri 27 Mar 2026 01:00:48 +0000
Files and hashes: 1: DRi6gZm2ApJ9zWvuSIffTh_44j0.roa (hash: NDQ8jCUezYMaYn3NL3pjn/AqInQQgH2COtpVWhCKawg=)
2: hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl (hash: Yg2o6fbd1sC5wzA0+csBe84WJG1b14bKBnlgFELvVow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:83:b0:63:3a:87:10:69:3a:25:f2:a6:a3:d3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86022e162f6e6b9755ce4ce845120e62939506f7
Validity
Not Before: Mar 26 01:00:48 2026 GMT
Not After : Mar 27 01:00:48 2026 GMT
Subject: CN=c7cc869d4038e963f12986f7c623c584254df826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5a:81:b3:d1:b9:1a:3a:ac:c9:b9:d7:28:91:
07:af:4e:85:d6:38:63:c6:0d:df:8e:a5:36:27:dc:
7e:85:e5:25:61:e1:52:d9:e4:f5:31:74:8a:be:d9:
72:54:28:5e:ef:f6:77:01:7d:fe:08:26:20:44:1e:
67:e9:5a:c7:4b:5e:68:ae:45:5d:ee:09:a7:34:96:
df:37:a0:b3:de:20:5c:4a:48:33:23:34:c1:ae:18:
cb:6a:19:16:26:0e:d5:24:69:e1:03:aa:ab:61:77:
a8:d0:ee:4a:56:c8:12:54:33:1a:8d:d7:ea:52:5e:
4b:27:31:72:f5:27:cf:6e:eb:f4:da:6f:32:5f:b0:
66:db:cc:c6:c2:ae:42:8d:7e:5b:f9:55:0f:72:9c:
0a:5f:20:d5:50:74:3a:12:ec:9c:4e:1f:70:6d:30:
77:0d:2e:e0:25:1c:0a:5e:4b:e9:e5:50:3e:c4:fa:
b0:01:00:95:0d:9f:ac:69:42:34:2f:44:23:46:32:
dd:ca:01:2b:23:a4:67:fd:9d:0b:21:49:75:ba:02:
55:52:e3:cd:3a:ec:d5:ec:fd:b1:8b:d7:10:d7:c5:
d6:81:dc:a5:2f:13:07:d0:0f:70:92:45:f8:35:3f:
12:7d:3f:b8:64:b3:e3:2e:93:34:bc:e2:3a:3a:e7:
ae:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CC:86:9D:40:38:E9:63:F1:29:86:F7:C6:23:C5:84:25:4D:F8:26
X509v3 Authority Key Identifier:
keyid:86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:41:3e:a0:b8:cd:b1:9c:df:b3:b1:5f:9c:e0:f8:73:58:93:
ae:dd:35:76:a2:d6:71:36:b1:3d:0e:a9:03:f9:41:4a:da:90:
23:00:50:63:60:62:d6:26:33:4d:f1:43:fc:f6:e9:5d:8a:8f:
a3:35:01:84:e2:ce:c5:7b:a7:55:91:37:bb:b7:09:8d:de:bb:
c2:cc:0b:5e:23:b3:9c:24:5c:48:32:41:96:9a:fb:f9:04:e7:
59:56:fb:2c:21:33:57:0a:fc:bf:9e:c8:2b:b4:e6:31:07:29:
4c:72:b3:62:70:72:cc:8d:70:cd:b7:b8:aa:31:65:56:1d:13:
48:ce:29:8f:ec:bb:86:5b:ce:b3:22:01:57:9b:57:1e:63:e4:
ad:b3:32:55:be:c1:5a:5f:ea:ed:e7:61:43:97:a5:ce:5b:51:
a4:28:dc:6f:bb:b3:2d:41:53:83:13:04:e6:78:8b:4d:cf:25:
e2:21:12:77:5d:6d:e2:a0:93:47:2a:a5:16:f7:70:05:0a:ad:
3f:fc:9d:b7:e6:ce:9e:38:59:1e:e1:65:dc:9f:70:8b:4a:c4:
a4:f6:b6:bd:f1:54:88:98:9c:f1:9a:9d:e2:66:82:5a:ad:02:
2c:9b:34:5b:da:bc:5f:22:b4:55:76:86:b3:bf:57:3b:15:08:
ad:02:a9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:20:43 2026 by rpki-client