Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
File: HGg_lcmNLP6dec3T247oE4uzV3I.mft (raw, json)
Hash identifier: YOxBy1mB1JWW4tp3/S+9JiMo0T64o95XsUGwm9kDjhc=
Subject key identifier: F5:D3:5F:A6:44:24:26:1F:FC:5F:5C:44:9A:FE:A5:4D:B7:48:E2:A3
Authority key identifier: 1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
Certificate issuer: /CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Certificate serial: 01A0E098A789F7A8941E83FE007D7F261BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
Manifest number: 1A73
Signing time: Sun 27 Sep 2026 02:01:35 +0000
Manifest this update: Sun 27 Sep 2026 02:01:35 +0000
Manifest next update: Mon 28 Sep 2026 02:01:35 +0000
Files and hashes: 1: 2JoxROCbPOHF6KtlD6vldAqTqX8.roa (hash: MYXtE2R+wBxrZPPj12Dpe+/LA+TCHl7zhSDFEOIzwnQ=)
2: HGg_lcmNLP6dec3T247oE4uzV3I.crl (hash: Oy27P+hxnGHsD92I1m2y6/w8S37Gni5EjnnlAWoHbVE=)
3: hx_-Nlwhp-rhcQWTiZp-K3bvoic.roa (hash: +6qNvM+Po303423yisqL4uil5GDRIr4RzBGe2Izpxbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:a7:89:f7:a8:94:1e:83:fe:00:7d:7f:26:1b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Validity
Not Before: Sep 27 02:01:35 2026 GMT
Not After : Sep 28 02:01:35 2026 GMT
Subject: CN=f5d35fa64424261ffc5f5c449afea54db748e2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:f9:0e:73:81:46:e0:ca:c3:80:42:9f:61:
5d:1f:2a:c2:f0:83:7e:85:0f:96:de:3e:5b:53:36:
54:8c:b2:78:5b:77:74:5d:30:96:74:1a:c8:c5:be:
36:f3:21:55:4a:62:c2:3b:5d:a6:01:d9:84:54:4b:
be:a7:53:9b:ba:12:6b:90:16:b4:a6:de:38:e4:8a:
59:47:a4:7e:5f:fa:e3:28:c5:a6:14:ea:a2:83:88:
5c:d2:94:a8:6b:8f:aa:75:6c:e7:a8:3f:3c:4d:42:
cf:37:6f:40:6c:43:c4:76:c0:0d:78:b8:79:a7:43:
94:d4:b8:84:61:e0:0c:67:bd:10:8c:3b:1a:01:45:
6e:64:9c:95:c1:da:f1:37:ae:10:26:be:af:64:0c:
79:76:84:ef:94:32:f0:88:12:88:af:b9:47:ef:92:
14:91:e2:ba:d1:40:c3:f3:ce:5f:6a:90:d2:dc:8b:
6a:d8:61:bf:22:80:0c:1a:0e:ea:09:71:96:66:65:
9d:db:d8:e8:1b:b3:d8:57:48:5f:af:22:43:67:7e:
f6:82:e9:ea:38:e8:20:09:1c:d5:6f:7a:f4:72:e2:
f2:6e:23:3c:38:50:92:3d:c1:f2:06:1c:55:0e:65:
9c:63:f9:b6:9f:11:77:dd:c2:16:4c:80:3a:b3:9b:
dc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D3:5F:A6:44:24:26:1F:FC:5F:5C:44:9A:FE:A5:4D:B7:48:E2:A3
X509v3 Authority Key Identifier:
keyid:1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e4:56:c8:fd:3b:bb:71:42:ca:e8:6a:86:e1:46:7d:a6:63:
f3:c4:7d:71:da:c1:86:2c:4d:8f:35:0d:f3:b3:8d:73:d8:ff:
0a:5d:8c:a3:08:2c:29:4b:ae:d8:04:8e:9e:08:41:a9:47:91:
62:35:44:5e:7e:63:d9:c1:fc:c2:85:6d:3d:1d:5a:81:b2:f8:
c7:41:bb:6f:d2:cf:00:d0:d3:1a:9e:bf:ce:a6:fa:23:36:5b:
54:79:71:9d:56:a1:b8:99:91:2a:33:ae:05:84:fb:8f:f7:26:
43:d8:89:51:cf:49:50:78:41:7c:fd:e4:87:73:9f:8a:f7:e7:
ad:99:fc:7a:de:17:4b:a7:79:63:af:7c:64:f0:30:3c:19:bd:
7f:47:cd:14:d4:c6:44:9e:82:30:f6:10:5a:55:e9:85:60:01:
0b:cf:d9:08:95:7a:d6:4a:3b:eb:72:e1:71:56:b1:83:fd:61:
f1:ff:83:45:e0:13:56:e5:f6:24:a6:d3:d3:4d:ed:47:1c:73:
5d:7c:ac:de:11:c1:5b:0e:30:55:29:83:d7:60:36:88:09:aa:
e6:f5:cf:9e:8b:c6:f0:30:d4:bb:d2:83:dd:6f:ce:c0:4d:d6:
aa:be:88:a2:4a:db:27:6c:14:cb:e9:da:1c:4d:c1:f7:23:db:
e0:2d:53:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgmKeJ96iUHoP+AH1/JhuqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNjgzZjk1Yzk4ZDJjZmU5ZDc5Y2RkM2RiOGVlODEzOGJi
MzU3NzIwHhcNMjYwOTI3MDIwMTM1WhcNMjYwOTI4MDIwMTM1WjAzMTEwLwYDVQQD
EyhmNWQzNWZhNjQ0MjQyNjFmZmM1ZjVjNDQ5YWZlYTU0ZGI3NDhlMmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzX5DnOBRuDKw4BCn2FdHyrC8IN+
hQ+W3j5bUzZUjLJ4W3d0XTCWdBrIxb428yFVSmLCO12mAdmEVEu+p1ObuhJrkBa0
pt445IpZR6R+X/rjKMWmFOqig4hc0pSoa4+qdWznqD88TULPN29AbEPEdsANeLh5
p0OU1LiEYeAMZ70QjDsaAUVuZJyVwdrxN64QJr6vZAx5doTvlDLwiBKIr7lH75IU
keK60UDD885fapDS3Itq2GG/IoAMGg7qCXGWZmWd29joG7PYV0hfryJDZ372gunq
OOggCRzVb3r0cuLybiM8OFCSPcHyBhxVDmWcY/m2nxF33cIWTIA6s5vctQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXTX6ZEJCYf/F9cRJr+pU23SOKjMB8GA1UdIwQY
MBaAFBxoP5XJjSz+nXnN09uO6BOLs1dyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEdnX2xjbU5MUDZkZWMzVDI0N29FNHV6VjNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81MDZmM2QtYzg2My00NjJmLTg3ZWIt
YjNhZTFlNGMzMmI3LzEvSEdnX2xjbU5MUDZkZWMzVDI0N29FNHV6VjNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC81MDZmM2QtYzg2My00NjJmLTg3ZWItYjNhZTFlNGMzMmI3
LzEvSEdnX2xjbU5MUDZkZWMzVDI0N29FNHV6VjNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeORWyP07
u3FCyuhqhuFGfaZj88R9cdrBhixNjzUN87ONc9j/Cl2MowgsKUuu2ASOnghBqUeR
YjVEXn5j2cH8woVtPR1agbL4x0G7b9LPANDTGp6/zqb6IzZbVHlxnVahuJmRKjOu
BYT7j/cmQ9iJUc9JUHhBfP3kh3OfivfnrZn8et4XS6d5Y698ZPAwPBm9f0fNFNTG
RJ6CMPYQWlXphWABC8/ZCJV61ko763LhcVaxg/1h8f+DReATVuX2JKbT003tRxxz
XXys3hHBWw4wVSmD12A2iAmq5vXPnovG8DDUu9KD3W/OwE3Wqr6IokrbJ2wUy+na
HE3B9yPb4C1Txw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:24:12 2026 by rpki-client