Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
File: HkogILgtApTpCi1rLA8o0Rc7ZGU.mft (raw, json)
Hash identifier: v1+My3olRaO/ddAl7TPGRKCiHM+HpvdxijFL6vSkRXY=
Subject key identifier: 57:B9:80:7A:3E:DA:1C:0C:B6:94:90:86:13:AC:F9:9B:35:9F:A8:FF
Authority key identifier: 1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65
Certificate issuer: /CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
Certificate serial: 01A1D9EF20B2484803EE0E06ADD2F8D00545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
Manifest number: 1AF6
Signing time: Sat 14 Nov 2026 12:01:29 +0000
Manifest this update: Sat 14 Nov 2026 12:01:29 +0000
Manifest next update: Sun 15 Nov 2026 12:01:29 +0000
Files and hashes: 1: 3Z0Q8tqH9sCjpBnVUqTQKroHNQs.roa (hash: iEhzHIRnRxzpQUWkwXpH8+wLuqzBi2WgNixBv2cWr5c=)
2: 4dtT2zpOkX0M7815CYFyhrrEj7w.roa (hash: pUvuTTzJiPGDI0tk56sxaLiwIp0+DLwoX1SaGdq6b1Q=)
3: DPEXaJsdpwunEHWISAhP8hFXOUI.roa (hash: +8xOQY/MLqFDz3F9RapHgwM88JkcxWRhi/gr4+Z5Fes=)
4: HkogILgtApTpCi1rLA8o0Rc7ZGU.crl (hash: 2tP0o7deLf9osSRbWI3QAvaCYIqGUOqKBeVZBPMP7ow=)
5: nJNnJik0D06rHfwp0JH-RW1i8d4.roa (hash: PZkJCh1a5eNPEm8fstSBrrfjyNUedpDjFwbI97jj8c4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:ef:20:b2:48:48:03:ee:0e:06:ad:d2:f8:d0:05:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
Validity
Not Before: Nov 14 12:01:29 2026 GMT
Not After : Nov 15 12:01:29 2026 GMT
Subject: CN=57b9807a3eda1c0cb694908613acf99b359fa8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e6:87:8e:ce:6c:7f:52:ed:d9:ac:31:d8:e3:
3f:45:85:06:8a:c5:a8:68:59:b4:ea:c8:5d:18:3f:
98:4c:4c:c6:c7:cc:1a:79:0f:c4:1d:dd:81:64:36:
99:de:ea:53:93:fd:1b:13:fb:2a:ee:82:08:f3:ff:
e9:ee:dd:5f:6a:d3:93:00:6c:6d:91:24:e6:e5:0e:
1b:14:57:7d:30:86:54:20:c8:14:3b:39:76:b8:4a:
93:25:84:03:84:16:45:29:bd:04:c0:e9:3f:82:4f:
ab:db:89:f0:0f:d4:cc:2d:4d:c2:39:00:7b:e9:59:
9c:d1:e5:96:c7:b6:52:9c:1a:91:d6:7c:49:f1:f8:
0d:d1:0e:94:c7:46:48:fc:d5:7c:16:11:89:b6:c9:
4f:0b:16:95:35:a4:93:0d:7b:00:9c:7e:54:ac:4a:
9c:4e:2e:2d:7f:73:63:60:25:b5:f5:c6:1a:72:7a:
f4:16:27:39:66:60:99:09:bc:cc:50:80:29:ce:59:
11:ba:51:f1:cf:b1:65:c3:91:51:3a:e0:f5:af:de:
10:89:98:74:36:74:cb:21:63:75:26:c6:4b:cf:77:
55:f1:8c:ba:e8:11:ed:2e:1f:b2:45:25:17:ba:27:
3b:b2:7d:ff:be:7f:21:cb:63:da:b1:7f:3b:bb:48:
70:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B9:80:7A:3E:DA:1C:0C:B6:94:90:86:13:AC:F9:9B:35:9F:A8:FF
X509v3 Authority Key Identifier:
keyid:1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3f:2d:29:27:8d:20:dc:97:1c:93:6a:1f:a2:93:25:19:c5:
3a:21:21:99:32:06:38:9a:a9:6c:b1:99:49:1b:6f:8e:65:33:
a1:94:a6:c5:48:2c:88:33:d9:33:d1:0f:18:47:b9:49:b2:94:
74:33:8b:e6:9f:d7:a6:c0:35:56:61:9d:c8:48:a0:50:a1:26:
93:00:b1:d4:8e:63:ba:6f:f3:08:3c:cd:b5:5a:af:20:ad:b3:
46:a7:eb:5d:64:c9:3b:48:9e:2a:62:09:c2:ca:b4:a3:74:1a:
e0:1e:9a:90:e4:49:de:e0:03:14:a0:e1:12:ba:cb:1d:eb:b6:
35:e6:b4:20:ef:14:1a:ea:97:47:b8:81:32:7b:4e:86:42:25:
37:df:25:3a:4f:11:3e:89:1b:2a:17:d3:2f:85:1d:39:22:4a:
26:c3:77:09:e9:91:da:94:15:5e:fd:4c:9c:9e:b5:a5:71:ec:
1f:ac:db:a9:f5:3b:38:3d:18:3c:aa:09:a8:a1:4e:84:e7:67:
85:6d:ad:8c:0f:b6:7d:a2:18:21:15:cc:69:eb:c4:d9:2c:dd:
3f:63:60:6d:4a:69:91:bd:c7:93:f0:8d:2d:d3:8e:cd:94:e2:
44:cc:2d:2b:35:ec:76:f0:ca:09:55:3c:c6:65:90:8a:e7:82:
2b:6c:1c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:43:16 2026 by rpki-client