Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
File: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft (raw, json)
Hash identifier: 2p6R7ANRfoBkxDJEsyVO42twqdIpI2nKDeZuqS7DGIM=
Subject key identifier: 10:64:C9:E2:FA:A0:02:D0:03:6C:CC:FF:84:FB:F0:C0:5D:29:1A:23
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019D2A3C5C15B09C192E659A0D4E66208AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
Manifest number: 0179
Signing time: Thu 26 Mar 2026 13:01:31 +0000
Manifest this update: Thu 26 Mar 2026 13:01:31 +0000
Manifest next update: Fri 27 Mar 2026 13:01:31 +0000
Files and hashes: 1: 1-QZ5QX6tZmhmzxZXHuUL5oHNCBg.roa (hash: wAkCT4pki/s142AZPomCfPDcuTZDN7WfQUDeJjKJk/0=)
2: 9mXLft8tWj3ND21SZ2EnzTtS7VU.roa (hash: aPk5QCp+d6NH9kl7Q2Ikryx7fdjc3+hRQdArIsf7we0=)
3: F7OazNxmHQIZG_1NbQyBZDuRfp0.roa (hash: kfyCu9kGmBZWf6iCvzc+imifHO9IEOu6CS+tqE1Bls8=)
4: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl (hash: FAa4lUBzi81/abYBTeuBQF3304Ws83awcK+wsHrsCr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:5c:15:b0:9c:19:2e:65:9a:0d:4e:66:20:8a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: Mar 26 13:01:31 2026 GMT
Not After : Mar 27 13:01:31 2026 GMT
Subject: CN=1064c9e2faa002d0036cccff84fbf0c05d291a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:68:88:4d:01:d1:6b:2c:3a:27:cf:4b:2a:0c:
ca:04:bd:9d:f5:8f:91:5d:76:61:5a:43:b2:62:94:
58:b6:71:24:dc:45:49:68:b9:10:44:ad:b9:1a:e2:
cb:9c:e8:d4:0c:c5:4c:a6:42:a1:33:9c:4f:ee:55:
d2:2e:c2:d2:55:a3:8d:4c:bb:21:6d:d2:ee:3e:9a:
79:72:93:42:12:ea:02:91:7f:7f:3e:ba:fc:97:19:
31:b1:72:57:bf:67:81:c0:39:36:ce:a0:ca:6c:fc:
85:de:56:36:6e:c9:ed:cf:5c:4f:43:c6:fe:ea:83:
e5:ab:bd:85:86:61:b4:b3:ac:de:7d:e5:53:f3:d1:
16:0f:b3:ae:a0:03:c1:91:ae:6c:6d:8a:40:8b:66:
ca:8b:51:a1:70:ff:0b:5c:5c:e3:c5:15:75:8f:21:
4b:6a:c3:da:56:72:1b:e0:28:3c:83:72:a4:7f:fd:
b6:4f:04:5a:55:98:5e:88:64:4d:6e:65:2a:55:2a:
2e:5d:83:c7:49:a8:5c:4c:8e:81:1b:5d:6b:a5:a2:
e2:2b:f4:3e:bd:25:e7:be:16:e1:46:6d:d6:17:96:
59:19:2d:4b:47:22:a6:1c:cd:71:9c:7d:76:67:e1:
cd:6d:18:3e:d3:8b:be:3f:6d:82:48:13:4d:3f:99:
ae:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:64:C9:E2:FA:A0:02:D0:03:6C:CC:FF:84:FB:F0:C0:5D:29:1A:23
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:06:eb:c6:dd:13:f4:8e:c2:18:87:8d:6c:fb:a1:4e:c4:e2:
5e:22:5e:d9:94:9d:99:86:ef:04:4f:97:6c:4a:43:9c:c2:aa:
a1:10:e4:f3:6a:b8:cc:f6:17:06:e2:2b:84:50:19:03:17:3f:
d1:5e:77:9b:91:ea:23:5a:03:e6:01:d4:f1:5a:0b:97:6e:24:
1b:5b:f1:89:dc:8f:72:c3:d0:96:ba:3e:ce:58:f6:49:6b:86:
79:a9:e6:12:07:e9:d2:7e:4d:1c:77:f1:27:39:8d:56:23:06:
5d:83:41:8c:ba:ec:0c:d3:a6:3b:ec:5a:92:e6:32:05:66:75:
b6:c4:1f:42:af:8e:95:5a:5f:f5:9a:dd:f8:84:bd:cd:3d:94:
8f:d9:1d:20:e5:fa:6a:fa:d8:82:a4:1d:3d:82:94:6b:c9:1a:
ba:4e:71:e1:0b:f6:34:4b:92:d5:03:4c:23:30:97:b7:fc:f9:
af:31:79:78:ea:53:1b:b5:95:7f:82:36:e9:83:fe:c7:d9:cb:
35:40:fc:ff:e3:a8:b0:82:fc:1d:2d:6a:28:7a:2f:51:8f:18:
39:bf:db:d6:39:7e:5d:2b:3f:b7:45:7d:78:c1:b4:af:49:9c:
3d:9c:24:87:5a:64:9b:93:c9:2d:63:fc:7b:c3:68:0a:63:1e:
34:c8:16:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:23 2026 by rpki-client