Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
File: hGzXvBkUIFasr5VzyqGvjehxgVY.mft (raw, json)
Hash identifier: FxIZdBXGH4X8z6WP/IPPRswbIN976D70kiMg/4AlT6g=
Subject key identifier: 00:2A:DA:D7:A9:59:86:EC:73:C3:F5:A7:5D:8E:C9:1F:BA:0E:6D:C8
Authority key identifier: 84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
Certificate issuer: /CN=846cd7bc19142056acaf9573caa1af8de8718156
Certificate serial: 01A06800884B41AEA670816249DC9A92D823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
Manifest number: 0582
Signing time: Thu 03 Sep 2026 16:01:00 +0000
Manifest this update: Thu 03 Sep 2026 16:01:00 +0000
Manifest next update: Fri 04 Sep 2026 16:01:00 +0000
Files and hashes: 1: hGzXvBkUIFasr5VzyqGvjehxgVY.crl (hash: R55proVYDCVbhxisfxN30lwNAedcsS0vWVH/5niYPvU=)
2: uoOfCKkTnW2JzFJRrSJDBT5bTzc.roa (hash: jS+d7zXHIn78Fh4bwNdoOL3BSqCzsjrWEmoa3PN6ng4=)
3: wOpotjYca3hIDPpRRC4dKRWIXpY.roa (hash: ILk18RM+vK4poNQ402hCagvt+4XgooFqtYGnOzDde5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:00:88:4b:41:ae:a6:70:81:62:49:dc:9a:92:d8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846cd7bc19142056acaf9573caa1af8de8718156
Validity
Not Before: Sep 3 16:01:00 2026 GMT
Not After : Sep 4 16:01:00 2026 GMT
Subject: CN=002adad7a95986ec73c3f5a75d8ec91fba0e6dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:43:c4:2b:cf:dc:e6:39:31:6e:4f:5e:2b:ab:
92:41:c9:df:e2:cc:29:6e:6b:38:58:4d:aa:6c:6f:
f8:a7:94:10:37:f9:72:ef:10:90:aa:fb:0f:fc:cd:
3e:78:c5:4f:e2:12:f5:59:64:05:df:28:7f:ca:4e:
29:d7:3a:11:2b:f2:bf:0b:88:40:ce:f2:24:d4:a7:
df:f2:4c:0a:48:18:3b:3d:8d:81:18:84:4c:c5:c4:
22:0e:8a:fe:26:2b:d3:69:d4:aa:f3:61:fb:66:ab:
9d:82:c5:1d:9d:ef:66:03:e4:9e:6e:24:f8:5e:b3:
a5:b9:84:1d:2e:32:b9:49:d4:53:59:f4:10:74:3c:
95:81:06:d8:53:26:30:25:cb:53:65:55:b9:31:3d:
53:7d:82:55:c7:0c:4e:ae:c5:83:12:bd:c6:17:95:
62:5b:72:bb:da:6e:48:8a:f9:ae:78:00:88:cf:5a:
ce:8e:38:ca:2c:2b:15:cd:79:23:5b:d8:e0:16:2c:
f5:78:51:37:1e:39:a1:70:65:74:31:28:44:05:83:
ec:0d:88:42:c1:15:ea:9d:35:9a:64:36:f1:13:0c:
cc:3d:71:bb:e4:77:0e:b1:c6:7e:88:93:61:75:9f:
14:07:23:0e:d8:c8:89:75:49:be:1b:0f:b9:9b:ab:
6b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2A:DA:D7:A9:59:86:EC:73:C3:F5:A7:5D:8E:C9:1F:BA:0E:6D:C8
X509v3 Authority Key Identifier:
keyid:84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6f:2a:e4:4c:b1:28:11:5f:3c:34:a6:95:3f:06:d1:f1:ae:
e5:91:ea:bf:f7:38:fd:a7:4c:38:2e:60:99:70:c9:76:a4:dc:
53:98:ee:87:ce:ce:65:b9:8f:e9:e6:af:51:e8:c8:3c:dc:c3:
3b:94:e0:26:a6:c3:29:10:10:af:18:54:eb:6d:a1:cb:47:4b:
00:cc:5b:fe:3c:01:e9:7d:d3:20:08:e2:9a:2c:4e:8c:da:6d:
37:8d:35:af:6a:ad:37:83:00:cf:42:86:e3:a8:19:9f:20:63:
4b:7f:bb:c9:0d:d9:7b:51:24:ec:3f:0a:fb:93:96:21:6d:b6:
bd:a3:6f:a5:c4:ac:e1:b3:6d:9b:79:0c:50:fa:6e:a8:db:23:
81:b4:6d:fa:a8:9a:4f:66:0f:68:03:ee:6b:68:8b:55:27:45:
d9:6b:14:37:6d:14:46:2f:57:a9:cf:66:d6:60:e0:59:3a:1f:
2e:6c:97:e3:bd:43:55:96:14:dc:de:99:1a:03:59:d9:90:0c:
98:80:2f:ea:e2:4e:56:21:6c:7b:0e:48:82:9f:1d:b7:96:c1:
92:ae:59:54:10:75:5b:3c:28:ed:39:bf:5a:e5:cd:f9:02:de:
92:0e:32:48:40:97:64:11:07:31:90:9e:45:c2:39:21:97:5e:
c1:a0:e0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:48:09 2026 by rpki-client