Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
File: HgxHunmaBgczODuKTbNuhLYtMV0.mft (raw, json)
Hash identifier: YgOItNRnm88Md3+4VRsAE+J0QD0XeutTKVVbgpQgQlA=
Subject key identifier: 53:1D:1E:67:97:74:93:6C:05:B0:6F:CD:3C:E9:F3:94:1C:BD:EC:3D
Authority key identifier: 1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
Certificate issuer: /CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Certificate serial: 019D28BB1D5812E5B3F2C54FD06A4F8FFCC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
Manifest number: 161C
Signing time: Thu 26 Mar 2026 06:00:44 +0000
Manifest this update: Thu 26 Mar 2026 06:00:44 +0000
Manifest next update: Fri 27 Mar 2026 06:00:44 +0000
Files and hashes: 1: GfFVdfYr5T1D14xqtgVYsbfPLT4.roa (hash: jes0J5Li8z4Pq6OC9eIPgrGqnw1k87mzrlfDV9tkAMs=)
2: HgxHunmaBgczODuKTbNuhLYtMV0.crl (hash: wOt1XipnLHXJJYhclhwSFX0we7Z+Qi9DRCTzvhKOP3A=)
3: TWuhNlll9GdwQT5xbU8YxqqhxGU.roa (hash: V8GYFFSNGmnvziGMDmPfcsoWr5Onpn2xFpSEYeVEjp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:1d:58:12:e5:b3:f2:c5:4f:d0:6a:4f:8f:fc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Validity
Not Before: Mar 26 06:00:44 2026 GMT
Not After : Mar 27 06:00:44 2026 GMT
Subject: CN=531d1e679774936c05b06fcd3ce9f3941cbdec3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:eb:8d:37:9a:44:6d:aa:62:be:6c:b2:0d:
36:c2:83:31:44:b4:06:47:4c:df:d7:f0:e9:ca:12:
da:c2:4f:eb:35:0f:19:ef:f8:9b:62:32:ba:f2:58:
a6:27:ed:d4:28:65:a2:b5:00:25:7f:a9:a7:20:60:
d8:c8:ac:e1:24:75:5e:93:d2:c1:92:0d:a7:d9:e0:
06:b8:2e:0e:ff:10:1e:c6:70:e1:f8:f5:ce:07:8b:
13:fc:6b:fe:6e:6d:5c:7d:0a:b1:71:ce:75:8c:13:
4b:64:57:ff:3f:68:83:07:7b:15:4e:2f:ad:90:c5:
4d:40:e0:b1:fa:c9:e6:ff:be:34:02:b3:37:81:bd:
3e:08:45:05:ff:c6:ad:a2:dc:d3:be:3e:71:a5:fe:
ba:f0:68:44:10:ae:f8:a6:da:76:aa:30:5f:85:a0:
8a:34:30:97:9a:eb:c4:c7:ca:7b:4f:b8:ed:f1:5d:
25:26:f0:45:5d:49:23:8d:1a:55:70:e2:c5:d5:33:
69:d7:2a:b2:1c:da:11:5c:2a:a5:4a:03:c2:31:b0:
49:67:85:01:e3:35:a9:dd:73:ba:32:47:98:67:b6:
fb:ed:88:7b:67:c0:99:3a:d2:41:18:e1:4f:fa:a2:
47:41:e8:2c:e6:74:0b:9a:a1:42:07:79:99:7b:61:
06:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1D:1E:67:97:74:93:6C:05:B0:6F:CD:3C:E9:F3:94:1C:BD:EC:3D
X509v3 Authority Key Identifier:
keyid:1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:76:f4:9d:11:d5:57:0b:b0:bc:67:de:ef:19:ee:0e:12:4a:
ed:5d:a4:ee:f9:3e:01:8b:cd:6f:16:a5:8a:0c:19:37:40:c9:
32:06:f8:3d:b0:6e:0b:c5:bb:4e:4a:0e:c0:a6:46:34:d6:4a:
c1:76:9a:b7:39:b2:15:cb:1a:30:3d:65:0f:07:44:e3:6b:e1:
6c:c3:dd:67:93:4e:69:3c:86:d4:fa:60:bc:4e:2f:c0:f4:b9:
f7:0e:92:32:24:23:61:1d:22:8f:60:a1:00:3b:6d:69:9d:2f:
d6:43:29:92:a0:55:5f:24:ee:d7:ea:0b:d6:22:9d:92:56:47:
ef:41:e6:ac:41:4b:46:39:d5:be:4c:7a:3c:b1:32:3d:dc:c7:
f4:f4:e8:e5:cf:6e:a5:60:d3:1f:2f:5a:fb:43:50:9d:3e:1c:
69:e1:8a:67:f2:b4:49:d9:1a:31:a6:eb:de:d3:51:af:9e:d7:
fe:be:80:26:eb:1b:f8:f7:07:20:f0:03:97:ec:a7:ce:7b:06:
13:87:fe:8e:14:ff:29:27:68:1f:62:d8:13:b8:d1:aa:27:9c:
4c:fb:4c:0e:26:3f:e6:ee:75:6c:27:ef:aa:e0:2f:da:2d:9a:
7a:ac:df:89:b7:b1:eb:f5:3c:e7:7a:81:1b:be:1b:97:a4:3b:
d4:ce:b7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:25 2026 by rpki-client