Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
File: HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft (raw, json)
Hash identifier: Ssa5w0K8nBwt87QdfQRkD+B80TFbfcB89Lg4RqD0uOA=
Subject key identifier: B0:1C:D6:B1:4B:5B:B8:22:07:E9:3D:EA:49:71:AC:3C:26:5B:C2:1B
Authority key identifier: 1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0
Certificate issuer: /CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0
Certificate serial: 019E1DC7884A9103AF600F246D3A5960D5E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
Manifest number: 0FFC
Signing time: Tue 12 May 2026 20:01:16 +0000
Manifest this update: Tue 12 May 2026 20:01:16 +0000
Manifest next update: Wed 13 May 2026 20:01:16 +0000
Files and hashes: 1: HJcs-w12XR1Oa3_7Fjrfjatz6Nk.roa (hash: N2c+1xmqIJ2oL3KdyPfmWmiUkJmY9BIkjqzElqkXBQ0=)
2: HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl (hash: EK/ghiKqxzsSmUbc/SGoL4jYLLQXhOP5DZs7SFcpK5Q=)
3: xwRdqXvpZ1E4P0A6zAG37GCYRLg.asa (hash: 4iBkWP8qWume/2A2mXJkWl5EI5fYnKSC+vvo5StFXVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:88:4a:91:03:af:60:0f:24:6d:3a:59:60:d5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0
Validity
Not Before: May 12 20:01:16 2026 GMT
Not After : May 13 20:01:16 2026 GMT
Subject: CN=b01cd6b14b5bb82207e93dea4971ac3c265bc21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a1:b1:4a:b0:32:b4:3b:be:34:ae:4b:d7:f7:
b0:ba:98:47:f0:98:92:59:e0:9a:02:3a:2d:f9:82:
3e:ac:f6:c8:54:b3:1c:76:2a:df:14:dc:9d:de:dc:
84:cd:0f:72:29:b8:4c:14:00:fb:e3:62:1f:e8:64:
22:0e:39:16:9e:d1:13:c1:b0:65:98:e0:a9:4d:c3:
ff:a4:e4:12:e9:92:ef:98:45:22:15:16:0d:f3:96:
95:15:1c:d2:14:2d:c4:6d:aa:09:82:41:02:21:56:
15:7b:fa:64:5d:6c:85:e5:e6:a6:80:b2:60:60:a5:
2b:05:06:53:8f:42:57:c2:97:79:e4:66:06:fb:75:
22:4f:1b:97:80:d6:3b:c0:fe:59:76:4c:ad:57:d2:
e2:16:bd:80:14:1c:86:cf:00:33:b1:6e:f6:e1:08:
65:94:0d:4b:ae:b6:b3:71:b3:fd:6d:29:74:bb:86:
2a:ac:fd:d5:3f:b4:9f:e7:b1:b5:ab:8e:d2:f1:59:
c2:0b:cb:51:82:d5:4b:42:e9:39:b9:12:71:0b:c2:
33:66:d8:58:05:f4:b6:e6:69:82:2b:34:6e:71:f6:
22:ef:c5:15:7b:1e:37:57:43:b4:53:ae:33:4b:7e:
6a:68:02:5c:ac:21:73:ce:0e:1f:6d:9c:29:0d:22:
48:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1C:D6:B1:4B:5B:B8:22:07:E9:3D:EA:49:71:AC:3C:26:5B:C2:1B
X509v3 Authority Key Identifier:
keyid:1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a2:83:d8:9d:03:59:59:83:d2:3b:06:21:63:dd:dd:b6:71:
82:2f:60:d9:0e:92:81:30:6b:5b:15:1c:8c:16:cd:4a:fc:6e:
f2:63:33:c4:e3:a8:9a:74:2a:66:9a:a1:97:66:21:95:10:68:
1e:72:eb:0f:98:89:6e:99:20:f7:ef:1a:c3:0f:66:af:77:19:
90:20:95:a1:cd:c9:be:30:24:36:b2:6a:e9:72:8a:6c:0b:74:
01:23:c4:de:b1:c8:0c:df:fb:9b:1a:76:57:9f:d9:c3:a7:16:
9c:61:23:ba:b8:01:68:bc:6f:fa:22:ec:03:88:7a:85:16:10:
5d:dc:7e:ce:46:ff:6b:b0:b5:7d:95:f9:03:cf:a4:a1:7d:8b:
40:7d:2e:35:a4:ec:2b:e3:9f:49:69:10:81:19:f8:4d:d7:ee:
41:4d:d2:b2:96:1a:f6:09:fb:5b:a9:16:49:f1:79:e7:05:f7:
2a:7d:8e:cc:33:11:10:a1:5e:ae:f4:0c:27:53:67:42:a1:0b:
12:55:3a:6e:86:ae:bd:df:3c:33:63:b4:94:3d:92:74:88:3f:
d2:1e:19:f6:f6:72:f0:fa:41:0a:2b:46:8d:bb:c7:73:0a:08:
2f:5d:5e:79:14:e3:6c:b1:49:6d:36:b6:fa:e2:41:6c:65:f9:
d0:e4:73:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:18:12 2026 by rpki-client