Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/HG6_RlgqJDp5jt3zWrIx917Fo4I.mft
File: HG6_RlgqJDp5jt3zWrIx917Fo4I.mft (raw, json)
Hash identifier: mWRf4p54yNtsDR+DJJn7xNUrfrl8OYIGv16HeQIygaM=
Subject key identifier: 2A:2E:05:FB:FF:D0:D7:61:C9:8E:76:C4:BE:F7:F7:A6:91:7D:95:04
Authority key identifier: 1C:6E:BF:46:58:2A:24:3A:79:8E:DD:F3:5A:B2:31:F7:5E:C5:A3:82
Certificate issuer: /CN=1c6ebf46582a243a798eddf35ab231f75ec5a382
Certificate serial: 019D38D2F35C55ED4CD724A7CEE7342898EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HG6_RlgqJDp5jt3zWrIx917Fo4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/HG6_RlgqJDp5jt3zWrIx917Fo4I.mft
Manifest number: 0185
Signing time: Sun 29 Mar 2026 09:00:42 +0000
Manifest this update: Sun 29 Mar 2026 09:00:42 +0000
Manifest next update: Mon 30 Mar 2026 09:00:42 +0000
Files and hashes: 1: HG6_RlgqJDp5jt3zWrIx917Fo4I.crl (hash: n0f3iJuFT3kGu1PCbZ6HjnoSkCwzq7d0eUB2daOYQPo=)
2: jjX5TXmjG0znDgx0gHsc11UZHgo.roa (hash: xQ6rZw7zcUclwGeNTNHTKDo+9jup2gmdqUUpBERqC/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/HG6_RlgqJDp5jt3zWrIx917Fo4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/HG6_RlgqJDp5jt3zWrIx917Fo4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/HG6_RlgqJDp5jt3zWrIx917Fo4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f3:5c:55:ed:4c:d7:24:a7:ce:e7:34:28:98:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6ebf46582a243a798eddf35ab231f75ec5a382
Validity
Not Before: Mar 29 09:00:42 2026 GMT
Not After : Mar 30 09:00:42 2026 GMT
Subject: CN=2a2e05fbffd0d761c98e76c4bef7f7a6917d9504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:29:4e:c9:5a:65:89:a5:24:b9:dd:dd:b8:
73:0a:47:57:c1:e8:fe:ec:7b:34:fa:6a:1a:6d:09:
6f:d4:ea:ff:8f:73:c9:bd:96:c9:a4:ca:b2:68:91:
ff:7f:aa:9c:12:4a:61:79:a4:a6:11:1d:82:c0:40:
eb:b7:7f:d5:f8:bd:96:ac:e1:93:73:b5:1e:ec:34:
63:94:e3:f8:ef:da:4d:fe:19:73:2c:cf:ad:c8:c9:
2d:d8:f5:18:60:8b:36:5a:3d:cb:1d:47:f1:cb:0d:
cc:39:74:28:8e:a9:54:b5:65:af:63:6e:4d:9b:b4:
a2:41:51:3f:13:58:f6:ed:af:22:80:93:6a:b7:dc:
0d:58:47:14:d6:40:4c:7c:0c:6d:9f:66:43:6a:0d:
7a:83:ea:85:59:e7:1f:90:d6:18:96:d0:99:87:31:
08:98:63:1d:c6:f4:c8:8f:3c:b1:8b:84:19:86:43:
a4:29:87:63:09:ba:96:ab:cd:a0:2d:26:83:a0:b2:
c7:18:54:2c:c2:ce:b7:9f:82:02:9b:12:59:ee:5a:
46:03:ea:75:e7:6a:fb:43:ca:ec:c0:97:f9:d5:63:
4c:5b:18:e4:77:b8:a2:9b:ad:56:55:a6:ca:f1:f6:
d3:61:9b:5b:38:f0:2b:e5:16:a1:16:0d:27:63:5d:
70:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2E:05:FB:FF:D0:D7:61:C9:8E:76:C4:BE:F7:F7:A6:91:7D:95:04
X509v3 Authority Key Identifier:
keyid:1C:6E:BF:46:58:2A:24:3A:79:8E:DD:F3:5A:B2:31:F7:5E:C5:A3:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG6_RlgqJDp5jt3zWrIx917Fo4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/HG6_RlgqJDp5jt3zWrIx917Fo4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/HG6_RlgqJDp5jt3zWrIx917Fo4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4c:e6:37:59:7c:21:2f:9d:c8:f9:d1:77:46:b4:ca:fc:b2:
47:e1:83:3f:df:c1:9f:0b:9e:0b:a8:b8:bc:46:39:71:72:3d:
2c:26:ec:ae:f5:ea:1c:31:4b:e5:c5:47:4d:82:5f:34:71:46:
e5:f3:07:cd:5a:46:54:dc:da:48:a6:bf:5e:1b:cd:c9:e7:6b:
bc:9f:29:e5:30:06:eb:7c:3c:5b:25:4c:13:de:07:3e:31:22:
3c:87:2d:69:e8:86:4d:e1:4c:d7:bc:38:b2:22:9b:61:d7:88:
1c:ec:d2:07:b3:06:36:a8:cb:b2:9c:3b:5c:c5:a5:56:7f:6e:
13:53:ba:71:86:c3:09:de:2f:3a:10:24:6f:13:80:da:b8:a6:
1d:ab:f0:95:60:90:93:35:cd:c4:4e:20:c1:4d:42:89:70:41:
b3:fc:21:d9:5c:7d:43:bf:37:bf:85:c3:26:a3:c9:5f:5f:d4:
61:da:ee:4f:b6:7c:ae:14:62:56:e5:e6:17:1e:88:7d:85:50:
5c:d9:d2:7b:a5:6c:fb:47:6c:59:87:f7:5d:69:ad:a3:07:d7:
13:e6:e8:5f:4e:15:4d:45:e9:48:e3:0f:51:dc:c9:ac:80:99:
99:3f:ee:39:77:c4:2b:4d:b4:f4:c3:81:56:fe:74:3d:e1:b7:
6c:85:5a:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040vNcVe1M1ySnzuc0KJjuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNmViZjQ2NTgyYTI0M2E3OThlZGRmMzVhYjIzMWY3NWVj
NWEzODIwHhcNMjYwMzI5MDkwMDQyWhcNMjYwMzMwMDkwMDQyWjAzMTEwLwYDVQQD
EygyYTJlMDVmYmZmZDBkNzYxYzk4ZTc2YzRiZWY3ZjdhNjkxN2Q5NTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprYpTslaZYmlJLnd3bhzCkdXwej+
7Hs0+moabQlv1Or/j3PJvZbJpMqyaJH/f6qcEkpheaSmER2CwEDrt3/V+L2WrOGT
c7Ue7DRjlOP479pN/hlzLM+tyMkt2PUYYIs2Wj3LHUfxyw3MOXQojqlUtWWvY25N
m7SiQVE/E1j27a8igJNqt9wNWEcU1kBMfAxtn2ZDag16g+qFWecfkNYYltCZhzEI
mGMdxvTIjzyxi4QZhkOkKYdjCbqWq82gLSaDoLLHGFQsws63n4ICmxJZ7lpGA+p1
52r7Q8rswJf51WNMWxjkd7iim61WVabK8fbTYZtbOPAr5RahFg0nY11wjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCouBfv/0NdhyY52xL7396aRfZUEMB8GA1UdIwQY
MBaAFBxuv0ZYKiQ6eY7d81qyMfdexaOCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEc2X1JsZ3FKRHA1anQzeldySXg5MTdGbzRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMDlkMzAtYjFmNi00NDQyLWEyZGIt
MmIzMzVhYzY2YWY1LzEvSEc2X1JsZ3FKRHA1anQzeldySXg5MTdGbzRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8zMDlkMzAtYjFmNi00NDQyLWEyZGItMmIzMzVhYzY2YWY1
LzEvSEc2X1JsZ3FKRHA1anQzeldySXg5MTdGbzRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUzmN1l8
IS+dyPnRd0a0yvyyR+GDP9/BnwueC6i4vEY5cXI9LCbsrvXqHDFL5cVHTYJfNHFG
5fMHzVpGVNzaSKa/XhvNyedrvJ8p5TAG63w8WyVME94HPjEiPIctaeiGTeFM17w4
siKbYdeIHOzSB7MGNqjLspw7XMWlVn9uE1O6cYbDCd4vOhAkbxOA2rimHavwlWCQ
kzXNxE4gwU1CiXBBs/wh2Vx9Q783v4XDJqPJX1/UYdruT7Z8rhRiVuXmFx6IfYVQ
XNnSe6Vs+0dsWYf3XWmtowfXE+boX04VTUXpSOMPUdzJrICZmT/uOXfEK0209MOB
Vv50PeG3bIValw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:14 2026 by rpki-client