Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
File: HkogILgtApTpCi1rLA8o0Rc7ZGU.mft (raw, json)
Hash identifier: qWC/lAjp9Xnx+DCt2R9rKOi3HNDpe9v33pMURdR3bLI=
Subject key identifier: A1:BF:0A:21:1A:E8:22:14:1C:57:9D:F6:55:99:C4:50:9E:F7:A4:53
Authority key identifier: 1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65
Certificate issuer: /CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
Certificate serial: 019D2AA9DFA34BF9089314BB5D8B4F134797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 15:01:08 +0000
Manifest this update: Thu 26 Mar 2026 15:01:08 +0000
Manifest next update: Fri 27 Mar 2026 15:01:08 +0000
Files and hashes: 1: 3Z0Q8tqH9sCjpBnVUqTQKroHNQs.roa (hash: iEhzHIRnRxzpQUWkwXpH8+wLuqzBi2WgNixBv2cWr5c=)
2: 4dtT2zpOkX0M7815CYFyhrrEj7w.roa (hash: pUvuTTzJiPGDI0tk56sxaLiwIp0+DLwoX1SaGdq6b1Q=)
3: DPEXaJsdpwunEHWISAhP8hFXOUI.roa (hash: +8xOQY/MLqFDz3F9RapHgwM88JkcxWRhi/gr4+Z5Fes=)
4: HkogILgtApTpCi1rLA8o0Rc7ZGU.crl (hash: eFaBlDLkDJSQl0dBcqm8fwYd5xQEBovnQyf+44Au1DI=)
5: nJNnJik0D06rHfwp0JH-RW1i8d4.roa (hash: PZkJCh1a5eNPEm8fstSBrrfjyNUedpDjFwbI97jj8c4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:df:a3:4b:f9:08:93:14:bb:5d:8b:4f:13:47:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
Validity
Not Before: Mar 26 15:01:08 2026 GMT
Not After : Mar 27 15:01:08 2026 GMT
Subject: CN=a1bf0a211ae822141c579df65599c4509ef7a453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:a0:02:11:af:1f:9d:b9:a1:e6:8e:90:e2:
98:c7:04:a1:37:1a:3d:04:2d:3e:16:63:54:43:84:
d4:06:f3:bd:72:98:f5:a1:a6:c9:33:00:32:d5:30:
da:6f:ed:66:2d:41:8c:4f:91:e3:b6:f8:cc:7c:12:
1b:76:5e:4f:1e:87:58:80:e4:53:93:6b:d6:a7:a0:
19:50:31:b5:80:6e:a4:17:b2:4d:23:10:a3:4b:a4:
0d:b6:e6:a2:de:52:81:39:59:dd:e0:0e:72:89:16:
2e:15:ef:e7:9f:78:12:b6:2b:18:7a:d7:8a:6b:cd:
e6:09:34:a5:6c:89:e3:59:4c:21:cb:0b:c4:80:8a:
c0:1f:4d:33:ff:56:a4:fb:95:d4:94:7d:22:12:d3:
d1:a5:8f:0e:1d:96:2e:aa:59:a7:f5:05:7b:d1:9a:
4c:38:0a:bd:3f:27:d2:a4:33:b4:76:80:3a:05:70:
f1:03:61:87:d3:bc:e1:2a:29:db:89:e8:53:9b:ea:
bd:f8:42:8e:73:38:c4:77:e0:1f:06:48:f4:85:fe:
d9:92:b2:71:de:f7:4c:ea:c3:ab:de:82:4a:8a:c1:
e0:b8:2a:c6:1a:81:f3:3c:d3:3b:41:75:bc:27:6a:
89:86:0e:c5:7d:60:23:ef:4d:25:5c:05:90:25:a6:
76:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BF:0A:21:1A:E8:22:14:1C:57:9D:F6:55:99:C4:50:9E:F7:A4:53
X509v3 Authority Key Identifier:
keyid:1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:37:46:0a:10:ed:4a:e4:cb:2f:b3:10:da:d1:ac:22:01:52:
bf:b0:8b:73:11:87:b6:49:b1:32:57:35:22:7c:31:7e:4e:73:
33:15:14:a0:7b:19:61:e7:52:d3:41:25:08:25:cb:d4:64:42:
dc:0a:3c:f4:f2:7d:1f:64:ab:90:be:7f:01:ff:53:b2:27:fa:
2d:c9:cc:80:aa:5c:b3:62:0f:f4:a6:1e:c3:eb:85:9e:d5:7c:
84:6c:27:23:4c:b4:f2:a5:20:78:bb:fa:1b:b8:05:95:82:a9:
3d:01:67:ed:e4:0f:fb:24:8d:32:64:d6:2d:89:61:c4:7c:77:
80:68:05:9b:09:08:10:7e:c4:c8:9e:eb:aa:12:50:ba:78:3f:
7f:a2:63:30:33:18:6f:20:2f:13:5e:32:8f:8e:76:33:f6:26:
d6:bd:2f:41:ee:3c:e7:d9:91:01:d2:04:43:bd:f0:d8:4c:6e:
89:55:c1:0e:4a:9b:e5:3a:c2:16:b1:74:6b:3d:55:c1:a6:be:
06:ab:90:61:ce:e3:9c:c0:2d:59:1d:ec:27:5f:46:5a:a5:64:
1a:9a:82:1a:49:15:7f:d3:36:fc:63:a4:7d:17:ff:05:9a:27:
29:51:62:ed:41:be:48:59:82:dd:e7:ea:63:72:39:c4:fb:a9:
89:2d:ee:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqd+jS/kIkxS7XYtPE0eXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNGEyMDIwYjgyZDAyOTRlOTBhMmQ2YjJjMGYyOGQxMTcz
YjY0NjUwHhcNMjYwMzI2MTUwMTA4WhcNMjYwMzI3MTUwMTA4WjAzMTEwLwYDVQQD
EyhhMWJmMGEyMTFhZTgyMjE0MWM1NzlkZjY1NTk5YzQ1MDllZjdhNDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskagAhGvH525oeaOkOKYxwShNxo9
BC0+FmNUQ4TUBvO9cpj1oabJMwAy1TDab+1mLUGMT5HjtvjMfBIbdl5PHodYgORT
k2vWp6AZUDG1gG6kF7JNIxCjS6QNtuai3lKBOVnd4A5yiRYuFe/nn3gStisYeteK
a83mCTSlbInjWUwhywvEgIrAH00z/1ak+5XUlH0iEtPRpY8OHZYuqlmn9QV70ZpM
OAq9PyfSpDO0doA6BXDxA2GH07zhKinbiehTm+q9+EKOczjEd+AfBkj0hf7ZkrJx
3vdM6sOr3oJKisHguCrGGoHzPNM7QXW8J2qJhg7FfWAj700lXAWQJaZ2fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKG/CiEa6CIUHFed9lWZxFCe96RTMB8GA1UdIwQY
MBaAFB5KICC4LQKU6QotaywPKNEXO2RlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGtvZ0lMZ3RBcFRwQ2kxckxBOG8wUmM3WkdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80YzQ4YmItMzY2Yy00MWY1LTliMmQt
NTMwNDQwYzRmYTI5LzEvSGtvZ0lMZ3RBcFRwQ2kxckxBOG8wUmM3WkdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy80YzQ4YmItMzY2Yy00MWY1LTliMmQtNTMwNDQwYzRmYTI5
LzEvSGtvZ0lMZ3RBcFRwQ2kxckxBOG8wUmM3WkdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArTdGChDt
SuTLL7MQ2tGsIgFSv7CLcxGHtkmxMlc1Inwxfk5zMxUUoHsZYedS00ElCCXL1GRC
3Ao89PJ9H2SrkL5/Af9Tsif6LcnMgKpcs2IP9KYew+uFntV8hGwnI0y08qUgeLv6
G7gFlYKpPQFn7eQP+ySNMmTWLYlhxHx3gGgFmwkIEH7EyJ7rqhJQung/f6JjMDMY
byAvE14yj452M/Ym1r0vQe4859mRAdIEQ73w2ExuiVXBDkqb5TrCFrF0az1Vwaa+
BquQYc7jnMAtWR3sJ19GWqVkGpqCGkkVf9M2/GOkfRf/BZonKVFi7UG+SFmC3efq
Y3I5xPupiS3ufg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:39 2026 by rpki-client