Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
File: HGg_lcmNLP6dec3T247oE4uzV3I.mft (raw, json)
Hash identifier: 0LVGiHejkJaC3/LLO6xWzTLz0ctzshCmwLsPSkapFdg=
Subject key identifier: D8:59:30:46:25:45:13:54:D1:85:0B:85:7B:DF:69:79:D1:E1:AE:FA
Authority key identifier: 1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
Certificate issuer: /CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Certificate serial: 019D269675BECA0654A364A006A2DDC9C47F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 20:01:27 +0000
Manifest this update: Wed 25 Mar 2026 20:01:27 +0000
Manifest next update: Thu 26 Mar 2026 20:01:27 +0000
Files and hashes: 1: 2JoxROCbPOHF6KtlD6vldAqTqX8.roa (hash: MYXtE2R+wBxrZPPj12Dpe+/LA+TCHl7zhSDFEOIzwnQ=)
2: HGg_lcmNLP6dec3T247oE4uzV3I.crl (hash: djFYKbBqGM54j9mG5U/FVw0KKShsOrW7RkHdqGW+QqQ=)
3: hx_-Nlwhp-rhcQWTiZp-K3bvoic.roa (hash: +6qNvM+Po303423yisqL4uil5GDRIr4RzBGe2Izpxbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:75:be:ca:06:54:a3:64:a0:06:a2:dd:c9:c4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Validity
Not Before: Mar 25 20:01:27 2026 GMT
Not After : Mar 26 20:01:27 2026 GMT
Subject: CN=d859304625451354d1850b857bdf6979d1e1aefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:16:22:6b:72:b5:5a:c4:7d:76:bc:7b:07:be:
a1:70:87:52:11:f0:01:64:02:29:8f:21:74:2c:d7:
ae:d6:7e:c3:eb:2f:8c:95:0e:7a:16:a9:bb:b4:63:
43:32:df:54:7e:a3:ea:f2:ee:e2:06:66:0a:03:71:
11:49:a4:de:6e:8e:a1:da:ca:48:03:c3:56:e8:5d:
81:36:11:5a:8f:6d:cf:e1:16:2b:c9:25:05:9b:51:
69:13:75:79:58:26:30:2a:84:e1:69:1c:dd:16:7d:
20:86:dd:03:f2:da:98:5e:be:16:a5:6f:5c:01:9b:
a3:36:63:d7:ce:c2:4a:0e:27:48:4a:1c:8d:f1:61:
92:87:0a:a6:b2:e5:e6:f6:4f:52:2d:9f:1a:64:3d:
6a:9a:67:b9:2e:5c:f5:c8:9a:0b:fa:2b:7f:2c:6e:
76:db:fd:90:b9:ef:ef:33:32:62:30:37:87:ac:3e:
cd:38:16:a0:6f:2c:a5:2d:a8:bb:42:bf:2d:81:0d:
02:5c:5b:14:ac:ef:dd:58:87:62:ca:3a:8e:f4:14:
13:e8:fb:49:21:45:e3:33:a2:f4:05:b0:9e:5e:56:
7e:4f:4d:56:60:c8:3a:5f:bb:92:f3:63:3a:c7:3a:
9d:2c:5e:c7:1d:14:24:25:cc:45:8a:6a:0f:bc:c9:
10:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:59:30:46:25:45:13:54:D1:85:0B:85:7B:DF:69:79:D1:E1:AE:FA
X509v3 Authority Key Identifier:
keyid:1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1d:b6:6f:a8:d7:13:02:ed:de:d6:91:54:51:87:d8:23:a9:
c5:ce:90:10:54:d0:02:12:95:e5:67:ec:fe:ba:80:40:c7:58:
26:0c:c1:34:bb:bb:2c:cb:fc:21:dd:d7:6b:88:be:c7:d1:6c:
c9:4a:4e:b5:4e:3a:9c:a3:51:30:e5:32:be:f4:74:39:3a:e4:
52:c4:62:f0:e0:12:00:2f:32:4a:c2:06:a2:21:3b:7f:d6:f3:
9f:c9:ae:ae:98:29:7e:c4:57:7e:1e:41:4d:dd:5c:d7:9e:44:
56:0a:98:3e:5a:f7:47:c6:8c:74:53:40:4c:c3:81:3c:46:c9:
17:18:cb:9a:0b:00:95:28:a2:04:ae:a8:76:7a:99:1d:4d:76:
27:4c:d1:54:07:9a:f0:f2:3e:41:2a:56:f2:c4:4e:26:eb:29:
98:2d:9c:86:84:66:10:f9:ad:a4:3e:09:97:f8:ae:c5:71:58:
a5:d0:45:11:86:79:62:9c:ff:7f:bb:15:bc:01:2f:a4:9c:45:
80:26:8a:ec:5b:0b:5a:e8:2c:79:1a:bd:d4:34:e8:d5:a1:12:
73:7e:5c:38:b9:8f:28:fc:40:36:27:46:ea:87:05:7d:e3:b9:
92:48:bc:a1:b4:09:ee:6d:b6:fc:1f:41:80:79:ae:ea:ff:94:
c3:67:1d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:07 2026 by rpki-client