Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
File: HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft (raw, json)
Hash identifier: c1to79UCBg5yiqwFYG/DOqUQDiDdxPPdmnY/3f4aNuI=
Subject key identifier: DB:0D:3F:00:EC:35:9B:15:57:77:3C:F0:CF:18:45:60:D6:B7:00:69
Authority key identifier: 1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
Certificate issuer: /CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Certificate serial: 01A1DEA75752EB0449AEB78BD92AE8ADB841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 10:01:11 +0000
Manifest this update: Sun 15 Nov 2026 10:01:11 +0000
Manifest next update: Mon 16 Nov 2026 10:01:11 +0000
Files and hashes: 1: 2KPFTLeDrSm9M4_XVjKhQsAeW5w.roa (hash: oiy5/t8+xoYRfuAXJZSTJK9AhNzpLlj1CftKpmctdeM=)
2: HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl (hash: cPF9ZM3bUSumDQi1hVP8buslFSnang0yG8/HakkkcwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:57:52:eb:04:49:ae:b7:8b:d9:2a:e8:ad:b8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Validity
Not Before: Nov 15 10:01:11 2026 GMT
Not After : Nov 16 10:01:11 2026 GMT
Subject: CN=db0d3f00ec359b1557773cf0cf184560d6b70069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a6:a3:d5:3a:e1:2b:35:fd:08:6b:62:9b:e5:
89:1f:a0:a0:69:9a:be:e7:99:98:6a:78:ed:d8:85:
2e:93:25:d8:5c:27:d0:7b:3a:a8:3c:ea:31:e0:10:
33:47:97:72:dc:30:23:e7:75:28:33:d7:6b:b1:4f:
56:c4:b9:60:4a:7c:fe:f3:07:f6:f5:61:58:56:54:
94:5a:bb:0a:86:dd:24:94:37:bb:71:c5:75:ba:f5:
f6:8c:65:68:43:cc:51:db:5b:c9:57:19:e0:dc:f0:
29:ea:5a:49:63:35:af:a2:89:9c:0c:23:8b:93:e2:
56:bc:18:ff:23:16:92:84:43:e9:11:d7:a1:40:71:
6a:13:bd:d6:7c:eb:ec:b2:31:23:86:71:84:c6:b2:
dc:6d:2a:3a:5e:b6:fd:09:5b:ad:e2:56:b7:55:ef:
8f:bf:07:df:4c:e5:98:96:d9:1b:5b:7f:ae:41:ff:
b4:a3:92:91:8d:79:f7:82:79:83:fd:34:f2:a6:9b:
78:3b:e4:31:a3:ad:2d:f5:48:9f:24:9f:bd:c8:05:
a2:52:45:cf:fc:15:4a:8a:27:f1:c6:8c:a2:a1:49:
11:48:44:e8:1c:68:57:da:51:fc:10:fc:14:2c:44:
bc:ca:a0:83:35:b7:8b:8c:27:51:c7:82:2f:ba:15:
2f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0D:3F:00:EC:35:9B:15:57:77:3C:F0:CF:18:45:60:D6:B7:00:69
X509v3 Authority Key Identifier:
keyid:1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d9:be:dc:78:6f:a6:62:83:40:e7:b1:85:fb:a2:19:37:09:
9b:e3:4a:dc:de:40:ee:ce:1a:83:e2:5b:bb:5a:d9:3c:d0:e4:
45:67:8c:85:24:f4:34:18:ad:bd:37:c5:46:14:81:5c:d5:a5:
0b:ff:38:3d:bb:57:ef:db:59:33:b8:f1:8f:4e:7e:86:61:16:
28:22:b0:ed:0a:a1:b7:2e:78:b1:ac:00:d3:2b:96:74:1f:da:
b3:98:3c:ee:d8:07:0c:4b:6b:bd:03:a0:b0:c5:e5:5d:6b:39:
19:4c:1a:c8:97:79:49:66:7d:f8:df:ec:b3:2f:cd:eb:e6:de:
a3:42:12:ee:f2:aa:14:76:4a:c2:2a:78:ea:c8:76:bf:da:5b:
88:fe:00:4c:c3:86:80:9e:2a:f3:e0:b9:f2:f7:c6:a7:b2:42:
a9:cb:35:07:b8:a9:ac:d5:39:1b:d4:75:af:3e:4e:10:98:b4:
ad:09:28:47:e1:01:de:e9:29:b7:0f:d4:ed:2e:8a:81:f2:8c:
fa:ff:f3:45:ed:b8:fc:d0:d1:3c:0b:cb:c5:e0:5c:86:30:0b:
29:5c:fc:5b:cb:78:1a:f8:8c:45:16:09:e3:ad:d4:e0:df:9c:
79:54:dd:11:37:0f:b4:bc:e5:eb:ae:a9:d4:6c:6d:cf:f2:a3:
29:92:5a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:40:16 2026 by rpki-client