Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
File: HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft (raw, json)
Hash identifier: Uw5hKVfhGjbqc/aC7k3kQA5tuMd0h0aUUpH9QZUFRJ0=
Subject key identifier: FE:3C:F3:DC:F8:EB:AF:D5:92:3C:55:E7:A5:55:1D:E9:3A:05:A0:B3
Authority key identifier: 1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
Certificate issuer: /CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Certificate serial: 01A0E1AAE31E2FD6C13ACE3AF4F9B18B5EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
Manifest number: 1A77
Signing time: Sun 27 Sep 2026 07:01:07 +0000
Manifest this update: Sun 27 Sep 2026 07:01:07 +0000
Manifest next update: Mon 28 Sep 2026 07:01:07 +0000
Files and hashes: 1: 2KPFTLeDrSm9M4_XVjKhQsAeW5w.roa (hash: oiy5/t8+xoYRfuAXJZSTJK9AhNzpLlj1CftKpmctdeM=)
2: HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl (hash: xT3a8OMjJGbF8LIKlMAm6PySNV00K9O1dsth4ZVAO58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:aa:e3:1e:2f:d6:c1:3a:ce:3a:f4:f9:b1:8b:5e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Validity
Not Before: Sep 27 07:01:07 2026 GMT
Not After : Sep 28 07:01:07 2026 GMT
Subject: CN=fe3cf3dcf8ebafd5923c55e7a5551de93a05a0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9a:f7:93:d7:dc:e0:92:8a:d0:ca:19:94:4a:
b6:11:28:cd:25:85:f6:87:92:7d:be:47:bc:36:cb:
70:1e:47:b9:4c:a2:05:3b:46:c5:d8:dc:05:69:52:
24:b0:0e:57:92:92:b6:cf:68:eb:41:7d:8c:df:0f:
ec:50:58:a8:86:9c:4c:48:cc:4a:4f:22:85:c9:c8:
fc:c0:1e:f2:9e:fb:9e:09:8f:e0:20:77:96:75:51:
dd:cf:37:0d:db:28:6f:d6:3d:18:53:ab:29:7d:2b:
7f:1f:5d:b5:74:ed:0b:68:aa:29:08:33:85:61:9a:
83:2c:1a:05:b5:6b:ff:28:fd:5f:62:36:a0:b0:50:
a7:16:13:6f:77:50:78:06:3e:6f:84:9f:5f:11:5b:
3b:0c:9d:a2:ef:a4:18:26:90:9d:58:cf:3a:e2:3f:
1e:30:e8:6a:48:ec:a8:91:b6:8e:59:f0:a4:af:be:
44:99:ed:e8:f6:67:a3:7c:92:b7:4e:35:5c:8e:d5:
ea:67:5f:1d:04:6a:a1:cf:25:dd:11:54:32:c5:a1:
24:30:7b:11:b4:62:ea:4d:fb:b5:0e:a7:d8:cc:d9:
60:93:d9:84:0a:5d:b5:57:c1:98:22:5f:5f:f8:cf:
84:4a:d8:e4:5b:9f:06:ec:1d:7e:25:18:14:59:05:
c6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3C:F3:DC:F8:EB:AF:D5:92:3C:55:E7:A5:55:1D:E9:3A:05:A0:B3
X509v3 Authority Key Identifier:
keyid:1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bd:24:a9:00:9d:32:0b:78:c1:94:8d:ab:9d:51:87:43:9a:
f3:74:da:f6:f4:75:9f:9b:94:1f:2e:b7:64:d4:a8:87:be:e8:
9a:22:d3:31:19:4c:a8:19:70:42:55:0f:37:33:63:70:39:e5:
2c:95:57:14:05:1f:4c:72:10:f3:17:1b:99:b2:f6:b3:a5:b4:
ee:34:99:af:7f:42:1a:b7:4c:42:ec:92:3a:6c:9c:e1:45:a5:
01:46:21:2e:19:a2:04:29:85:df:d3:60:e2:ae:04:be:de:53:
60:de:b4:88:60:2b:5c:11:42:a3:2d:ed:74:99:a2:da:ce:4e:
39:ec:17:91:a9:f2:e2:34:d0:93:62:e1:11:46:a4:8a:72:ca:
a4:51:16:77:69:0d:4f:b0:0c:83:86:14:1f:b1:71:19:e0:1d:
f5:4e:1e:7a:6e:a9:dd:6f:10:4e:e5:c5:8d:c7:22:1a:57:ec:
a0:69:c6:50:e2:bb:f5:96:16:95:e9:01:e4:f0:ae:89:03:54:
93:16:d7:7b:70:a7:ba:09:f6:6f:ba:37:e6:80:7c:f3:26:b8:
5b:c8:c2:0c:76:51:76:08:a7:d9:2b:a3:5b:61:d2:32:3e:2e:
78:6f:ca:ed:1b:22:72:72:b3:c4:7e:ad:c5:13:3b:1f:27:c5:
64:3a:8c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:11:52 2026 by rpki-client