Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
File: HgClX517dTlrS_oT54lgpaEvTvU.mft (raw, json)
Hash identifier: Z3fRWTm0amfPzVa9QBvN7r4ebgb5ygvQ/pNiH7m6KKo=
Subject key identifier: DA:FB:F9:FA:5D:47:F4:43:0C:8E:C5:62:25:16:61:1D:9F:7E:1D:1E
Authority key identifier: 1E:00:A5:5F:9D:7B:75:39:6B:4B:FA:13:E7:89:60:A5:A1:2F:4E:F5
Certificate issuer: /CN=1e00a55f9d7b75396b4bfa13e78960a5a12f4ef5
Certificate serial: 01A13C380B2401F8A4BA02CC1EAA49274454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
Manifest number: 125A
Signing time: Wed 14 Oct 2026 21:01:08 +0000
Manifest this update: Wed 14 Oct 2026 21:01:08 +0000
Manifest next update: Thu 15 Oct 2026 21:01:08 +0000
Files and hashes: 1: HgClX517dTlrS_oT54lgpaEvTvU.crl (hash: hVD1wrI/dgsJ7KX6D2D9+O0RQbpO3xLZEXZX4LRxAoc=)
2: u_mH6EUqNkqz_nJQ2xMzHjAOs5k.roa (hash: Bwm8rVbQPci5MWzF+kRT+h1fK3xCwzJ+2otJGbrOfJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:38:0b:24:01:f8:a4:ba:02:cc:1e:aa:49:27:44:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e00a55f9d7b75396b4bfa13e78960a5a12f4ef5
Validity
Not Before: Oct 14 21:01:08 2026 GMT
Not After : Oct 15 21:01:08 2026 GMT
Subject: CN=dafbf9fa5d47f4430c8ec5622516611d9f7e1d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:86:33:bc:90:0d:fc:64:73:d7:ae:21:11:5f:
5b:81:22:f6:b4:53:ef:22:d6:5b:9a:20:1e:ec:9d:
05:06:29:8a:10:70:02:21:97:c8:dc:0d:be:da:69:
4d:59:c1:23:e5:cd:84:92:83:d1:ae:c7:4b:15:30:
ad:76:f2:a9:41:71:81:76:22:20:01:ef:9c:f1:b0:
9e:69:36:ba:c1:e4:9f:3e:1b:a6:76:5d:b5:62:e8:
c9:62:53:aa:8e:22:75:b8:6d:1b:7b:87:5f:1e:34:
9b:ab:75:60:b8:2d:6d:bf:73:16:b3:da:1e:b6:a2:
3e:a1:dd:ca:c6:9a:46:57:da:c4:81:05:8e:32:11:
82:bc:fb:f8:f1:3d:94:d2:f3:5a:27:70:f9:51:ad:
79:6d:e2:aa:15:f1:1e:25:9a:89:8c:ea:be:7a:f2:
fa:f7:7e:36:e3:bd:db:cc:58:c9:16:bd:99:ef:af:
d5:13:e0:32:55:c0:ad:b2:f5:e0:68:2c:ef:9e:79:
34:e2:1d:45:f7:0f:30:3c:93:f7:c5:18:01:9a:3b:
ca:18:7f:ea:c5:3d:4b:bd:1b:83:b7:3c:76:a0:90:
5e:26:c4:e8:21:e8:e8:b5:41:44:25:86:c2:a4:5d:
eb:d5:a4:e8:e1:fa:71:58:4b:87:0b:78:b2:c4:b4:
f0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FB:F9:FA:5D:47:F4:43:0C:8E:C5:62:25:16:61:1D:9F:7E:1D:1E
X509v3 Authority Key Identifier:
keyid:1E:00:A5:5F:9D:7B:75:39:6B:4B:FA:13:E7:89:60:A5:A1:2F:4E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e2:28:21:c2:ce:01:99:72:7c:88:e6:f7:33:04:30:8f:76:
68:71:14:60:64:d0:33:26:90:02:42:71:e7:68:19:09:38:e9:
44:ff:ea:f6:ac:67:87:fd:c5:8d:ed:be:7b:2e:a6:e3:6c:04:
fc:1f:1f:39:f8:21:54:a9:13:fc:e4:44:af:a0:d3:da:88:96:
58:51:a8:52:42:bc:26:4f:19:af:63:2a:91:c6:56:4e:b5:2d:
39:1e:84:03:dd:86:ea:d0:bd:de:4d:f0:87:8e:e9:57:0d:5c:
98:16:4f:f0:90:73:bc:14:19:da:2e:36:0c:20:2c:bb:ba:c7:
52:36:0c:93:68:11:cd:0f:13:ef:13:f7:39:9b:6a:45:ca:00:
39:71:5e:51:3d:00:e5:5c:48:ab:19:c9:3b:80:78:72:07:ff:
b9:2c:ba:b7:6b:94:b3:43:bc:98:fe:75:4f:f0:94:47:39:80:
03:7f:b1:e9:9c:e2:f7:2d:65:7d:d2:50:b2:4c:a5:58:05:af:
d8:45:14:66:fc:17:81:25:27:02:dc:46:fd:cd:e7:fb:50:2f:
0c:da:b7:f5:44:d7:11:1d:90:f1:d7:29:cf:8b:d0:83:fb:68:
f0:c3:28:eb:75:e2:08:c9:c4:4a:cc:ba:c4:be:b7:cb:a3:ec:
39:84:14:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE8OAskAfikugLMHqpJJ0RUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMDBhNTVmOWQ3Yjc1Mzk2YjRiZmExM2U3ODk2MGE1YTEy
ZjRlZjUwHhcNMjYxMDE0MjEwMTA4WhcNMjYxMDE1MjEwMTA4WjAzMTEwLwYDVQQD
EyhkYWZiZjlmYTVkNDdmNDQzMGM4ZWM1NjIyNTE2NjExZDlmN2UxZDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4YzvJAN/GRz164hEV9bgSL2tFPv
ItZbmiAe7J0FBimKEHACIZfI3A2+2mlNWcEj5c2EkoPRrsdLFTCtdvKpQXGBdiIg
Ae+c8bCeaTa6weSfPhumdl21YujJYlOqjiJ1uG0be4dfHjSbq3VguC1tv3MWs9oe
tqI+od3KxppGV9rEgQWOMhGCvPv48T2U0vNaJ3D5Ua15beKqFfEeJZqJjOq+evL6
9342473bzFjJFr2Z76/VE+AyVcCtsvXgaCzvnnk04h1F9w8wPJP3xRgBmjvKGH/q
xT1LvRuDtzx2oJBeJsToIejotUFEJYbCpF3r1aTo4fpxWEuHC3iyxLTwmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr7+fpdR/RDDI7FYiUWYR2ffh0eMB8GA1UdIwQY
MBaAFB4ApV+de3U5a0v6E+eJYKWhL071MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGdDbFg1MTdkVGxyU19vVDU0bGdwYUV2VHZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS82ODE1MjYtODYzZC00Njk4LWIxMjUt
Y2Y3ZWRmM2Y1ZWFjLzEvSGdDbFg1MTdkVGxyU19vVDU0bGdwYUV2VHZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS82ODE1MjYtODYzZC00Njk4LWIxMjUtY2Y3ZWRmM2Y1ZWFj
LzEvSGdDbFg1MTdkVGxyU19vVDU0bGdwYUV2VHZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+IoIcLO
AZlyfIjm9zMEMI92aHEUYGTQMyaQAkJx52gZCTjpRP/q9qxnh/3Fje2+ey6m42wE
/B8fOfghVKkT/OREr6DT2oiWWFGoUkK8Jk8Zr2MqkcZWTrUtOR6EA92G6tC93k3w
h47pVw1cmBZP8JBzvBQZ2i42DCAsu7rHUjYMk2gRzQ8T7xP3OZtqRcoAOXFeUT0A
5VxIqxnJO4B4cgf/uSy6t2uUs0O8mP51T/CURzmAA3+x6Zzi9y1lfdJQskylWAWv
2EUUZvwXgSUnAtxG/c3n+1AvDNq39UTXER2Q8dcpz4vQg/to8MMo63XiCMnESsy6
xL63y6PsOYQUAw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 08:20:13 2026 by rpki-client