Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
File: HgKySJ9HE5YtEFESslJ264HxrJA.mft (raw, json)
Hash identifier: 3V7xUrxOiZDI1HTS2MdeA93BLUUuY0f3Mtum7bvhoOs=
Subject key identifier: 63:CF:F6:63:D1:72:CD:DF:70:BC:E1:8A:8F:82:78:8C:75:23:45:DC
Authority key identifier: 1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90
Certificate issuer: /CN=1e02b2489f4713962d105112b25276eb81f1ac90
Certificate serial: 019D2A04BE87F2B8C5B99B4296C501933968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 12:00:47 +0000
Manifest this update: Thu 26 Mar 2026 12:00:47 +0000
Manifest next update: Fri 27 Mar 2026 12:00:47 +0000
Files and hashes: 1: HgKySJ9HE5YtEFESslJ264HxrJA.crl (hash: eoaootLaqL9YLn+4uH2MhKqj9qUMrlppCFvdvXe1TCk=)
2: c6NkDHPCpW4JPJaereYffQlGF5M.roa (hash: P8BVMnOkhDs4ef+b/iftf/xGBkTYtuqdSXKMIq09JeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:be:87:f2:b8:c5:b9:9b:42:96:c5:01:93:39:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e02b2489f4713962d105112b25276eb81f1ac90
Validity
Not Before: Mar 26 12:00:47 2026 GMT
Not After : Mar 27 12:00:47 2026 GMT
Subject: CN=63cff663d172cddf70bce18a8f82788c752345dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:5a:af:f2:6e:1f:63:09:69:03:ee:69:5a:
bc:2c:9f:93:35:93:4f:26:9a:6a:5d:98:e7:3c:db:
b1:99:09:f4:48:a3:c5:d2:37:a0:33:9f:1c:8f:70:
c6:4c:f8:41:63:a9:84:58:70:fb:0f:c6:58:0d:17:
30:fa:54:c1:75:53:02:29:81:f3:23:c8:fe:d4:15:
3e:53:07:bd:7e:76:60:4f:b6:53:b3:6c:a7:33:ef:
f0:37:56:9d:18:ee:46:f1:bf:c1:25:a2:2c:44:34:
60:94:ff:e9:0b:d1:43:3c:38:80:1f:e4:ec:03:ad:
7d:0a:bb:cb:81:02:87:a4:a6:af:38:dd:53:ad:28:
f6:3a:a3:73:f7:4c:cd:7c:12:1c:30:78:a7:be:3b:
6c:6f:36:02:20:68:39:38:6c:24:5f:46:3d:51:ba:
59:e3:c0:d7:cf:8d:d3:b2:17:c7:ac:5c:37:25:a7:
b8:3e:8c:c0:ad:63:e9:65:d8:67:d5:e6:98:6e:ec:
ec:5e:3f:29:87:58:da:ba:e6:01:9e:5b:aa:8e:7a:
fd:6e:fa:95:71:10:b0:d4:e3:50:8d:f1:fc:3c:b6:
fd:d9:cc:2e:34:cb:ee:ea:5c:78:ac:0c:39:2e:10:
1e:2f:33:3c:15:dd:3e:9a:d9:63:17:1e:42:1e:55:
58:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CF:F6:63:D1:72:CD:DF:70:BC:E1:8A:8F:82:78:8C:75:23:45:DC
X509v3 Authority Key Identifier:
keyid:1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d4:58:da:e1:f8:58:05:8f:d3:82:0a:93:20:4b:1b:db:dd:
5a:7f:54:6d:5b:99:07:61:55:f0:78:3c:ba:a4:b3:c7:c2:9b:
23:05:39:9e:8e:b9:e7:83:f2:ec:88:08:0b:94:8a:a0:b9:56:
2b:c4:bd:09:48:ae:83:f6:32:55:a9:dc:08:bc:c1:fd:64:5c:
45:ec:fd:71:68:5b:06:dd:88:25:94:97:c0:98:7c:ee:63:69:
0e:62:5a:09:95:b3:4c:2f:61:ad:01:ce:c6:df:3a:73:3e:fe:
4e:b5:af:9a:55:9a:4d:8e:3e:79:52:01:61:34:1b:80:9a:b3:
7f:07:bf:b4:09:09:c7:fb:95:ed:df:79:46:47:1a:dc:a1:e6:
28:63:43:1a:d8:83:6e:cc:de:0f:64:e5:24:f2:63:df:4d:ef:
61:ea:74:3b:ca:87:3f:45:3c:61:26:6c:e1:06:fd:bf:6f:28:
06:27:00:df:49:44:f1:a6:09:7c:38:eb:85:f0:08:b8:e1:49:
4e:12:fb:d9:65:ba:1f:b6:00:7f:ee:27:09:9b:8d:61:52:c3:
ea:48:7a:42:9f:e4:93:95:26:c5:96:3c:73:2e:8f:60:27:72:
e0:8f:e7:ad:93:52:99:b9:49:cc:0b:43:47:bd:dc:1d:dc:a2:
74:17:85:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:22:57 2026 by rpki-client