Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
File: hGOGJiDUZ8inn49E7zW7YK-CP50.mft (raw, json)
Hash identifier: a0nNIxMTWNbl99lVtsTeVtIncBcnOLhISPSSmsPSkU8=
Subject key identifier: C4:1B:28:8E:66:54:6E:39:36:0C:8D:C9:3E:9D:B2:B5:E9:91:08:26
Authority key identifier: 84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
Certificate issuer: /CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Certificate serial: 019D265F64B4272291FF647401F4EDFE0344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
Manifest number: 0E1F
Signing time: Wed 25 Mar 2026 19:01:19 +0000
Manifest this update: Wed 25 Mar 2026 19:01:19 +0000
Manifest next update: Thu 26 Mar 2026 19:01:19 +0000
Files and hashes: 1: ao51ShN_hsLIYI5m8nig7Cs4o3s.roa (hash: JBy8r6a0LgooRemhjrW8orAn22Q6qTJMcSOAq/Cj8Bs=)
2: hGOGJiDUZ8inn49E7zW7YK-CP50.crl (hash: eTY/I1/IimF/XoZuAAO7cT07/xzffawEo615B/XL/Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:64:b4:27:22:91:ff:64:74:01:f4:ed:fe:03:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Validity
Not Before: Mar 25 19:01:19 2026 GMT
Not After : Mar 26 19:01:19 2026 GMT
Subject: CN=c41b288e66546e39360c8dc93e9db2b5e9910826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:f8:78:2f:81:19:8b:cd:e5:5e:e0:48:8a:
46:af:3c:db:38:7b:e9:27:bf:b9:bb:bc:ea:8d:d3:
8c:0f:a2:87:32:90:82:f9:74:12:8a:a5:a3:1f:84:
ff:aa:a3:b3:1b:41:e1:98:93:1f:54:24:5e:3f:20:
4d:3d:cc:ab:70:2f:dd:e5:f1:4a:73:b4:9e:dc:d3:
83:17:5d:6a:38:65:4f:13:22:52:17:41:b8:e1:b4:
54:c5:40:bb:54:cb:80:60:b1:16:fc:ad:5d:76:a2:
72:d7:8e:fe:a9:b9:ca:b7:17:8b:30:5f:3d:e6:56:
02:d2:69:1e:1f:7b:28:03:aa:0e:46:76:da:8b:82:
51:f0:02:10:47:06:6a:1d:7e:99:61:ad:4a:ec:e3:
cd:a3:43:47:f1:bf:32:38:a1:9b:2c:a7:d8:73:dd:
a8:70:02:2e:fc:4d:2e:ca:85:bf:bd:6e:0f:e4:c0:
42:c1:aa:6f:7c:84:5f:74:30:f5:58:7a:cc:84:44:
55:c7:a8:4c:2b:bf:83:53:e7:e0:0d:23:f8:e2:11:
3f:9a:91:6a:2a:f1:ad:e0:f9:12:66:ef:4d:9b:07:
22:08:b3:84:e4:0e:00:32:fc:b4:12:47:b0:1e:53:
e5:e3:d9:e9:fb:ea:4a:e0:95:79:cd:08:b6:d6:f5:
86:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1B:28:8E:66:54:6E:39:36:0C:8D:C9:3E:9D:B2:B5:E9:91:08:26
X509v3 Authority Key Identifier:
keyid:84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4b:37:38:68:2d:21:16:d8:96:9f:d8:d3:d0:80:2c:a2:8d:
53:53:e3:47:55:d2:3d:3a:54:ad:50:ca:cb:c1:0d:b9:d3:32:
ad:b5:6c:fb:e3:3e:35:ab:04:75:27:eb:75:98:7c:9c:91:61:
13:82:6f:69:16:b3:f1:87:d9:43:b9:12:29:59:55:ce:5c:a5:
1b:31:cd:da:05:db:81:f7:64:ab:27:8f:b6:29:09:01:43:56:
d2:d4:4c:ac:20:28:d7:3c:f4:4c:92:11:77:98:4a:3b:51:63:
e0:46:32:67:48:6f:2c:48:e0:b2:47:13:ca:41:27:18:44:cc:
44:51:68:d9:8a:c6:ef:c8:8f:7e:6e:3f:3b:d0:3d:75:6a:1f:
22:b7:38:04:f0:5b:0b:fa:f9:87:af:cd:24:e6:44:89:02:6f:
7e:c3:73:a8:c9:7f:38:49:1d:7d:dc:7c:78:02:c3:54:b9:16:
29:41:8c:a0:5a:59:bd:c2:4b:e7:92:e9:9d:64:55:8e:40:14:
71:2b:44:5f:6b:51:73:ad:70:4d:38:5e:18:fb:7d:4f:d0:25:
74:1d:f3:db:23:ef:6e:f9:17:02:d5:30:d8:28:82:ff:cc:da:
f1:c1:12:f4:01:7b:91:9b:06:8b:b0:47:76:58:06:c0:3b:4d:
5c:18:58:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:48 2026 by rpki-client