Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft
File: hugNGBwlPRTaHgupwdVmb1Ym1YE.mft (raw, json)
Hash identifier: Td3iofJLTMaKKw3MIkLLwxk5yx4PqjHfqzjroM4PieM=
Subject key identifier: 30:39:B7:D9:69:D7:1F:17:7B:77:94:62:27:AF:60:4E:77:48:6C:F9
Authority key identifier: 86:E8:0D:18:1C:25:3D:14:DA:1E:0B:A9:C1:D5:66:6F:56:26:D5:81
Certificate issuer: /CN=86e80d181c253d14da1e0ba9c1d5666f5626d581
Certificate serial: 019D2A045CC7B7D9AFDDAAB12A043A0B7DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hugNGBwlPRTaHgupwdVmb1Ym1YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft
Manifest number: 02AD
Signing time: Thu 26 Mar 2026 12:00:22 +0000
Manifest this update: Thu 26 Mar 2026 12:00:22 +0000
Manifest next update: Fri 27 Mar 2026 12:00:22 +0000
Files and hashes: 1: Q0BAQv9Y2KCGzUH12IIJCejGo9E.roa (hash: ZXRjv/WoTKdvC9GZzFdW6WbAOuxyKMhJM7y9cqTP30I=)
2: hugNGBwlPRTaHgupwdVmb1Ym1YE.crl (hash: RbJCj3ViHdLqseZ++19g67SY90FwZyU25TsXyPbw4HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hugNGBwlPRTaHgupwdVmb1Ym1YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:5c:c7:b7:d9:af:dd:aa:b1:2a:04:3a:0b:7d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e80d181c253d14da1e0ba9c1d5666f5626d581
Validity
Not Before: Mar 26 12:00:22 2026 GMT
Not After : Mar 27 12:00:22 2026 GMT
Subject: CN=3039b7d969d71f177b77946227af604e77486cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:a2:7f:8a:18:5a:07:4d:82:f0:12:92:5e:
eb:c4:3a:dd:0c:a1:60:76:22:c2:46:28:1d:74:11:
73:00:39:ad:1f:45:0e:6f:45:21:88:c3:8e:8d:3c:
b6:2a:cc:84:90:8f:f3:96:53:5a:95:61:53:2f:bb:
87:da:cb:23:80:17:3d:f0:0a:89:42:60:3a:6f:da:
43:74:08:7c:d4:5a:71:3b:40:0e:8f:cd:3b:de:6b:
9c:92:55:b1:09:3b:7b:fc:13:34:59:5f:d8:69:56:
cf:81:30:54:e7:88:c6:aa:76:81:10:77:b1:dc:4a:
21:05:52:23:51:1e:27:cc:f7:10:ee:41:3d:82:45:
40:53:ad:2a:36:47:d8:c8:ff:a7:95:34:f1:e3:70:
86:27:3d:2d:af:e5:e4:10:e5:c4:ce:9a:10:67:c0:
38:c2:d5:85:3f:2d:3b:1b:2a:22:b7:53:34:9a:49:
80:32:b8:33:24:c7:ee:0b:00:39:0e:2e:5a:90:04:
56:0a:9b:c7:75:01:12:97:9a:d8:22:c0:7b:dd:31:
19:81:ad:2c:2f:3c:26:7f:33:8f:ad:1d:57:bb:0d:
81:66:e2:6f:a7:e0:d9:4c:d7:9c:53:f3:47:15:3f:
73:72:e9:a8:66:36:9f:11:b3:30:e2:96:bf:64:5c:
73:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:39:B7:D9:69:D7:1F:17:7B:77:94:62:27:AF:60:4E:77:48:6C:F9
X509v3 Authority Key Identifier:
keyid:86:E8:0D:18:1C:25:3D:14:DA:1E:0B:A9:C1:D5:66:6F:56:26:D5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hugNGBwlPRTaHgupwdVmb1Ym1YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:77:02:34:03:67:13:34:f1:7a:21:60:6a:a6:cb:37:40:41:
1c:d2:f5:fc:f2:f3:ad:e2:05:a7:53:b2:d0:7d:9e:4d:ce:4f:
12:d3:3a:dc:7f:97:b2:09:29:25:f5:56:d2:c8:3d:39:bf:4f:
33:3d:04:7d:a3:1c:3a:8a:2b:48:d9:ed:a4:d1:c6:5d:39:af:
6f:32:62:e9:3b:ac:21:4f:07:8c:5e:fb:5b:16:e4:ac:52:7c:
29:7b:d9:ae:70:2a:fd:d8:df:a7:66:5e:28:03:5b:01:61:cf:
4f:48:3b:02:ea:82:24:d1:5c:53:c3:da:e3:bb:10:6f:eb:2d:
27:21:fa:5e:e7:d2:f0:56:c6:51:6a:4a:97:3a:f4:19:db:d6:
e6:97:18:a6:39:45:82:8a:d5:79:ee:a3:5a:69:1d:4a:6b:5d:
f5:df:c3:a4:ad:59:d0:53:1e:a6:e2:82:87:a6:af:3b:b7:75:
61:05:b1:43:7b:9a:29:eb:df:12:c7:e6:26:1f:4a:50:3f:b2:
2a:a1:da:1e:c5:f3:37:8c:24:8a:23:92:ec:ef:6e:bd:15:21:
15:0b:4a:a2:15:c5:4a:44:47:ad:2f:87:8a:9a:89:4d:87:0b:
04:a3:72:91:06:a0:e4:11:a0:7e:5b:39:56:0f:1f:b9:c3:cd:
bc:84:71:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:11:48 2026 by rpki-client