Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
File: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft (raw, json)
Hash identifier: Dt+gOSFbSGFTBgDiga2Gfo7lA990t+ayJK42KyixCkE=
Subject key identifier: C7:4E:F8:46:6C:6F:EB:9D:9E:7D:BA:44:DA:A9:CD:93:4D:88:A0:59
Authority key identifier: 86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76
Certificate issuer: /CN=8600aaf13d4de9c95b63759ad18636abc8e26376
Certificate serial: 019D37F79281148F9E194AC150A39DD5BD4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
Manifest number: 1163
Signing time: Sun 29 Mar 2026 05:01:04 +0000
Manifest this update: Sun 29 Mar 2026 05:01:04 +0000
Manifest next update: Mon 30 Mar 2026 05:01:04 +0000
Files and hashes: 1: 56PKH7YMrBCc9R8BOdvmQYxeMC8.roa (hash: D+8+obK3QpwhAemmlTLP2YO6xby6ajF6Y8nUY7wgtXA=)
2: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl (hash: Co3RewOO3gVi3DQ8YVw5QpXrpb+QbNgHbS1RDx4PYwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:92:81:14:8f:9e:19:4a:c1:50:a3:9d:d5:bd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8600aaf13d4de9c95b63759ad18636abc8e26376
Validity
Not Before: Mar 29 05:01:04 2026 GMT
Not After : Mar 30 05:01:04 2026 GMT
Subject: CN=c74ef8466c6feb9d9e7dba44daa9cd934d88a059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6c:14:99:7b:18:d5:f9:4f:a0:a1:62:f9:b2:
d3:4c:df:73:6e:d8:83:ab:86:46:1b:be:d5:77:5f:
0c:95:c9:64:7a:61:52:49:23:e7:27:b6:44:1a:8d:
78:c7:d2:5a:dc:e1:8e:c1:0e:ce:d1:c3:57:24:2c:
b2:8c:d1:2f:46:6b:dd:28:2b:17:e8:f4:05:32:d1:
4c:ae:e0:a4:08:d2:d2:1c:85:06:6c:c7:a3:4e:09:
b8:a0:b4:b9:cb:a8:25:90:8a:8f:4b:f8:db:91:59:
c2:c9:42:68:bd:aa:65:b6:1f:a2:73:0b:da:f8:4a:
06:94:b1:e9:dd:6f:65:3b:dd:55:31:8d:70:ea:6f:
55:d8:31:08:16:11:76:99:6e:ce:15:eb:91:36:9c:
c8:21:7a:3d:7b:a1:c1:1c:01:cc:ba:2e:71:5c:e8:
08:67:31:10:8a:51:d0:5d:01:b8:9c:53:3a:85:34:
01:b9:bc:d9:2b:65:e3:be:53:2c:6f:43:93:a7:77:
6e:e2:fe:f8:8a:35:04:b1:42:64:6c:c1:3a:b3:3c:
0a:4f:bb:db:c0:00:8c:3d:7b:4b:db:c8:e0:44:d9:
a5:22:5c:dd:73:e3:81:32:cc:78:66:bc:5c:60:04:
a7:b4:e5:92:91:62:11:52:87:f8:ea:33:dc:82:5d:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4E:F8:46:6C:6F:EB:9D:9E:7D:BA:44:DA:A9:CD:93:4D:88:A0:59
X509v3 Authority Key Identifier:
keyid:86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:dc:ec:5f:da:d6:c3:12:85:92:fd:8e:88:91:9b:b9:8c:83:
eb:7a:b2:1b:4a:c4:16:f5:0b:e4:2a:e7:c1:3b:e7:d3:1e:03:
56:91:d1:e9:60:ac:63:e5:df:ca:38:01:18:28:31:1a:d9:4f:
df:9c:43:e5:96:23:90:4c:45:4f:84:3a:da:d2:1d:35:70:b5:
93:f7:06:4e:63:a8:a0:a8:ed:22:92:cc:58:f1:b0:1a:54:61:
ca:63:7d:2a:63:83:89:7f:d6:ea:cd:ff:df:35:29:4c:a7:c4:
d7:9b:90:c7:b1:c6:7b:40:c0:dd:a7:59:d9:b7:3d:06:11:4a:
fb:89:f9:60:89:1b:db:5a:32:3a:ea:62:b7:09:60:ab:f1:4b:
58:2f:92:e8:c2:af:53:98:9c:90:9c:d8:ad:6b:cf:48:12:b5:
3e:bb:35:07:10:c4:85:cb:b3:c3:26:b4:83:e3:57:d1:77:0b:
be:30:6b:3a:af:f4:56:dc:5a:f5:8c:e5:d0:c6:71:c8:42:07:
16:30:94:9f:92:29:bc:bf:08:5b:da:4a:dd:0a:cf:75:03:36:
a2:79:e1:53:4c:aa:f4:9e:e4:7f:5e:c7:fd:35:39:8b:59:2f:
97:de:07:d9:4e:d4:72:c2:f4:30:06:9f:0b:8c:e3:43:10:0e:
a4:d0:27:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:27 2026 by rpki-client