Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
File: hGbpF0La0bn0x5ayOzfres2FgWE.mft (raw, json)
Hash identifier: 9+GHFXa/HSliA8V3tS5YjfrsBpnsMG8ccxX0O9JNbeY=
Subject key identifier: 44:D0:D4:06:30:4D:48:C5:17:29:1D:72:13:54:98:31:E0:1F:A3:BB
Authority key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
Certificate issuer: /CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Certificate serial: 01A1DCEFCAAD729E174D48FA1FB83C261BDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
Manifest number: 1598
Signing time: Sun 15 Nov 2026 02:01:04 +0000
Manifest this update: Sun 15 Nov 2026 02:01:04 +0000
Manifest next update: Mon 16 Nov 2026 02:01:04 +0000
Files and hashes: 1: V6Mvsnc7Z774Ev5q6h6Mb-ytj-8.roa (hash: /GNFnTbzQDf+YRxBgnXt7mG8KTDdxxNld8mJ/4Y6skk=)
2: hGbpF0La0bn0x5ayOzfres2FgWE.crl (hash: Xt7Z6es9XHJDsPs8kMUEngCovsWTGAQJ0QgaLR8OvBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:ef:ca:ad:72:9e:17:4d:48:fa:1f:b8:3c:26:1b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Validity
Not Before: Nov 15 02:01:04 2026 GMT
Not After : Nov 16 02:01:04 2026 GMT
Subject: CN=44d0d406304d48c517291d7213549831e01fa3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:bd:1c:9a:b4:36:01:a5:92:6a:d1:04:29:
b5:f6:72:0c:83:a4:d0:4d:6f:40:b2:87:1c:9f:77:
06:a1:0b:37:b4:87:71:cc:be:cd:f9:71:79:2a:c6:
b6:34:16:93:e5:a4:11:1e:66:1a:e9:84:ac:ca:cc:
82:05:2c:46:e7:27:3a:41:44:8a:f5:fa:c5:51:90:
92:ac:fc:0c:07:cd:fa:fb:f9:81:4d:7d:fa:8d:40:
f1:25:63:8b:54:53:fb:6d:cf:df:b5:aa:52:ee:71:
fb:06:7c:6e:75:5f:34:c0:72:b9:0b:d4:cb:d1:9a:
c6:b1:87:7e:00:ba:43:9c:77:e6:f2:1a:03:32:eb:
89:f1:8d:75:95:e9:4b:aa:ce:fa:81:c2:8f:3e:ec:
2e:b0:32:96:35:e1:70:e6:55:5a:f2:b6:69:e4:2a:
e3:3b:c8:69:f9:73:31:3c:74:0b:78:5a:21:b1:93:
98:19:d2:ed:fe:2c:6b:67:df:05:69:eb:ac:b1:1b:
41:46:d7:1a:48:a1:09:a4:a1:c6:c9:5d:a6:3f:b5:
55:99:33:27:74:45:cd:ac:c7:34:1e:4e:b3:65:e9:
64:17:18:d9:d2:7e:af:c0:a7:73:60:9e:11:bf:55:
df:9d:ad:51:d6:ab:88:5d:ad:fb:46:18:0e:dc:d2:
de:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D0:D4:06:30:4D:48:C5:17:29:1D:72:13:54:98:31:E0:1F:A3:BB
X509v3 Authority Key Identifier:
keyid:84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:4e:14:ef:16:d8:ef:ca:f3:4c:2b:a9:38:77:d6:14:c3:c5:
7d:03:08:69:a2:41:31:88:43:bf:62:f2:d7:07:4c:7f:31:0c:
85:b8:3b:3a:d1:43:60:1d:e3:c2:ac:db:c2:6a:53:d3:69:1a:
d6:45:20:97:0b:a0:aa:43:69:f0:5f:c1:ec:97:ff:79:bf:f0:
12:9e:46:30:20:7d:49:21:fe:39:78:87:1a:7a:65:df:a7:00:
1f:ef:f1:79:f7:95:5b:52:bf:00:48:15:ea:8e:55:64:29:77:
42:a2:7a:8c:db:e0:5e:09:e7:cb:ac:04:80:0a:8c:1c:f0:85:
9c:37:dc:8a:07:cf:51:0e:1a:ad:8b:74:6d:75:9b:e9:55:2a:
3d:5a:73:40:fb:aa:0b:b7:e9:86:b6:b1:9e:94:07:65:7c:96:
96:c9:be:b1:6e:8b:ca:16:a6:f9:f0:b7:a5:ec:81:24:6c:65:
22:2c:af:80:10:c5:9d:e5:e7:8d:59:68:a9:3e:f5:71:e5:05:
d1:f2:b8:79:cd:22:72:f7:c9:e4:92:cf:cd:f3:00:f1:18:0c:
a0:07:0b:48:9a:53:fb:75:ed:a4:74:1f:31:fd:8d:47:7e:55:
fd:93:f3:52:4b:57:83:e3:d1:de:de:8f:f5:5d:47:b1:4e:bc:
9f:92:47:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:30:20 2026 by rpki-client