Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
File: HkogILgtApTpCi1rLA8o0Rc7ZGU.mft (raw, json)
Hash identifier: P7xWS/fWvflgFx3TMBzvFXPOkl86XJEdWegOSwreZlo=
Subject key identifier: 4C:0A:42:19:24:4F:F6:BE:18:54:CB:C5:75:33:CF:F2:27:1C:7C:6B
Authority key identifier: 1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65
Certificate issuer: /CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
Certificate serial: 019D28BB75EE8552E5E0C6ADFF3759611E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:01:07 +0000
Manifest this update: Thu 26 Mar 2026 06:01:07 +0000
Manifest next update: Fri 27 Mar 2026 06:01:07 +0000
Files and hashes: 1: 3Z0Q8tqH9sCjpBnVUqTQKroHNQs.roa (hash: iEhzHIRnRxzpQUWkwXpH8+wLuqzBi2WgNixBv2cWr5c=)
2: 4dtT2zpOkX0M7815CYFyhrrEj7w.roa (hash: pUvuTTzJiPGDI0tk56sxaLiwIp0+DLwoX1SaGdq6b1Q=)
3: DPEXaJsdpwunEHWISAhP8hFXOUI.roa (hash: +8xOQY/MLqFDz3F9RapHgwM88JkcxWRhi/gr4+Z5Fes=)
4: HkogILgtApTpCi1rLA8o0Rc7ZGU.crl (hash: fOq7ehuiNuS5t231NtSr3hgGGur59WtGRwj9My4rf5o=)
5: nJNnJik0D06rHfwp0JH-RW1i8d4.roa (hash: PZkJCh1a5eNPEm8fstSBrrfjyNUedpDjFwbI97jj8c4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:75:ee:85:52:e5:e0:c6:ad:ff:37:59:61:1e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
Validity
Not Before: Mar 26 06:01:07 2026 GMT
Not After : Mar 27 06:01:07 2026 GMT
Subject: CN=4c0a4219244ff6be1854cbc57533cff2271c7c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:1c:dc:5f:db:35:24:90:33:22:23:9d:aa:
77:27:02:bc:7a:65:a5:9d:67:b0:02:8c:15:5e:00:
81:21:ce:08:ff:d0:26:66:61:09:73:9f:55:5b:61:
0e:97:50:f1:56:ce:5a:43:8e:67:80:bf:5d:70:db:
57:04:f8:be:2e:32:e5:87:ac:ce:85:b7:50:01:7d:
0b:ea:ef:c0:10:7d:12:ec:d1:2c:e8:86:fa:50:bc:
0a:09:93:fe:5e:e7:a8:56:0e:91:8c:0e:69:20:6c:
90:a7:64:e5:16:91:da:5a:8c:bc:02:20:84:6d:0f:
61:d8:55:35:f9:85:c4:b4:b7:71:8a:58:dc:4f:3b:
d6:a0:fc:a2:78:f8:22:f0:52:2a:42:c0:85:f0:42:
72:18:b1:08:92:e1:aa:21:6e:d3:92:97:84:f4:51:
0d:56:a3:05:55:8d:7a:57:20:b6:1e:ee:75:13:09:
75:90:fe:3e:fc:ac:fa:ec:e2:0c:13:53:4a:48:cd:
77:fc:c4:ea:aa:d4:83:c7:b2:76:85:d1:35:93:d8:
6c:03:6f:b4:17:f2:3d:00:b1:21:77:d1:c2:3c:2d:
8d:a0:67:81:b8:17:91:27:ff:e1:3a:a6:1a:c5:53:
30:b4:73:1f:fd:de:35:4d:a5:da:c1:30:00:8c:13:
fd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0A:42:19:24:4F:F6:BE:18:54:CB:C5:75:33:CF:F2:27:1C:7C:6B
X509v3 Authority Key Identifier:
keyid:1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:25:3e:a0:7b:99:11:3b:ed:b2:c2:43:c4:44:db:59:d1:5c:
f4:c3:1b:17:7c:55:f0:86:9a:cb:ca:c8:29:d2:03:ea:c5:09:
fd:7d:b2:be:c3:be:bb:0c:09:a9:f1:73:87:2f:82:fe:34:7e:
7c:7f:7a:8f:ef:7c:f2:36:23:53:85:e9:37:45:8d:46:b9:e0:
2d:63:d6:c1:16:68:63:16:9c:f2:a9:b5:60:84:ec:ea:9a:a1:
1c:3d:80:32:ad:6a:af:b5:9b:15:61:e0:df:00:ba:5d:52:b2:
71:16:2a:0d:a4:38:a7:f0:fb:78:a6:f1:1a:af:f5:32:d2:e2:
70:00:3d:11:77:32:e6:45:e3:3d:a7:aa:62:f8:a6:c0:8e:53:
78:d1:50:e2:15:ba:8b:22:80:49:ef:b3:4a:3d:05:96:c6:06:
75:3f:67:d9:ec:01:a1:d5:5c:82:82:21:4d:c1:2b:f7:8e:7e:
cf:bb:ac:c4:ac:bf:f1:ff:75:26:be:1c:e0:da:80:b6:94:26:
53:0f:c1:b0:52:bb:a5:ed:7f:e0:9b:2d:8d:11:a4:e0:77:0f:
61:86:c4:96:37:2c:19:56:f9:6f:33:4b:2b:a5:91:0f:b2:27:
82:88:bf:82:92:2a:ff:0e:59:37:f7:a8:17:8a:63:b6:52:c7:
b4:41:9c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:05:48 2026 by rpki-client