Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
File: hhgk6bM0tNUOg8Sd-boZziW-gZM.mft (raw, json)
Hash identifier: XkWwRzGPl+tW/QITfsIPe+8s7XjadIIkfbSIG5Y9XsU=
Subject key identifier: 99:81:58:61:57:3F:6D:EE:FC:F0:41:21:53:D0:95:A9:62:52:D3:FB
Authority key identifier: 86:18:24:E9:B3:34:B4:D5:0E:83:C4:9D:F9:BA:19:CE:25:BE:81:93
Certificate issuer: /CN=861824e9b334b4d50e83c49df9ba19ce25be8193
Certificate serial: 019D28170C6FA41EB63943C3932237FCAE40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
Manifest number: 5E
Signing time: Thu 26 Mar 2026 03:01:32 +0000
Manifest this update: Thu 26 Mar 2026 03:01:32 +0000
Manifest next update: Fri 27 Mar 2026 03:01:32 +0000
Files and hashes: 1: GtDxiNHeYhaopEz7nkSxj4Uwws0.roa (hash: xLrL13cfFz66vUPjaMWCOfLQuaEtZXy6c6DNYKUuXaU=)
2: dTkGUafttT6-8GpfaFN-_DQscaU.roa (hash: go6kdC6kI78p8haD5O5Bqq/07FTC8kyj7opP+hvQavw=)
3: hhgk6bM0tNUOg8Sd-boZziW-gZM.crl (hash: S+QAZBOir6qmpWlurJ6dxa9xNjkK6NpkuqdeXz+gqnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:0c:6f:a4:1e:b6:39:43:c3:93:22:37:fc:ae:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861824e9b334b4d50e83c49df9ba19ce25be8193
Validity
Not Before: Mar 26 03:01:32 2026 GMT
Not After : Mar 27 03:01:32 2026 GMT
Subject: CN=99815861573f6deefcf0412153d095a96252d3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:cb:fa:7b:2f:7a:50:e9:3a:40:43:a8:67:11:
55:72:fc:60:b9:ed:30:e9:61:39:60:d5:91:86:4e:
40:98:32:0b:4d:6c:e5:ec:6f:f0:87:6c:5e:fb:8f:
62:7e:ec:8b:ef:16:f8:11:12:ac:4f:9b:a8:70:e5:
88:d2:bb:db:73:5a:07:2f:ff:02:b0:8e:d6:c5:48:
49:e4:72:e6:f4:11:2d:90:fd:50:36:12:1b:ce:17:
b7:7d:b8:63:41:76:9b:48:87:0e:9d:79:24:13:a4:
a5:1a:d5:7b:4d:83:d9:88:2f:b8:cd:a0:57:55:9b:
60:cc:ed:5c:09:b9:f5:81:45:4e:25:e8:f6:57:7f:
51:e4:6d:27:72:66:6b:c8:c3:82:cb:db:f2:00:fe:
44:d6:76:5e:d9:f7:20:da:53:3f:04:cc:f2:f6:e9:
f2:b7:49:74:f9:aa:7b:00:d9:6a:01:3e:f1:8b:b8:
d7:04:8f:5d:16:0f:e2:43:82:62:23:ef:5b:b1:2c:
70:f7:2b:56:c0:0a:69:44:38:e2:02:e9:b7:aa:28:
db:f6:7a:ae:d6:83:d2:f1:84:bd:7f:bb:ee:9c:d9:
0f:08:44:b0:6f:8e:fa:36:85:2c:40:20:4c:57:c7:
4c:3a:1d:62:a9:28:2f:5e:ab:2f:c2:8a:45:71:fd:
a9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:81:58:61:57:3F:6D:EE:FC:F0:41:21:53:D0:95:A9:62:52:D3:FB
X509v3 Authority Key Identifier:
keyid:86:18:24:E9:B3:34:B4:D5:0E:83:C4:9D:F9:BA:19:CE:25:BE:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:7b:20:de:d9:8a:1d:e8:0c:4b:c9:b9:80:f4:2e:85:68:46:
1c:df:4c:5c:4d:75:11:f8:97:6d:3d:be:2f:f9:cf:80:de:f9:
5e:de:4f:56:34:30:a5:dd:d5:95:e3:a7:fd:4c:8d:04:84:d0:
e3:bd:62:5a:5c:89:00:4c:77:fd:fa:f5:2a:93:06:0e:03:4a:
87:cf:8d:62:27:8b:79:0f:34:fc:e0:11:0a:91:13:91:9d:5c:
b5:47:be:8c:6a:96:a0:a8:9d:fe:72:5d:77:24:6a:e1:8a:c0:
a6:a6:58:a9:09:5b:75:91:0c:96:67:74:8b:db:1e:22:58:0a:
0f:f6:7e:21:eb:4d:47:7f:8c:65:09:f2:59:8a:f4:b9:6a:d7:
b4:1d:23:cc:b3:76:bf:c2:84:a1:21:c1:c0:71:0e:59:08:69:
98:0c:06:92:41:53:01:c2:44:d2:c4:5a:a6:1f:97:b3:5c:65:
50:f2:69:43:2e:58:33:d8:a4:33:b2:5a:f0:fe:e5:1a:27:58:
10:1d:6c:61:e9:bc:d5:1e:86:79:77:94:87:cc:fb:75:22:31:
53:d2:57:22:67:fa:a1:86:e8:46:77:10:c3:c2:ec:22:9b:80:
de:87:c0:65:9b:f5:aa:e4:8e:8e:12:65:07:c3:43:1a:18:8c:
b8:8c:8c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:22:23 2026 by rpki-client