Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
File: hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft (raw, json)
Hash identifier: 14CkRCfk3Rhge2iSWOpQOWSjdyKYQrZnb5Afhpg+waQ=
Subject key identifier: C8:57:76:B4:2E:A9:91:39:74:AC:1D:16:FF:A9:43:8B:8F:81:69:7C
Authority key identifier: 86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
Certificate issuer: /CN=86022e162f6e6b9755ce4ce845120e62939506f7
Certificate serial: 01A05A7B6182A771A600561E2D3FD6277029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
Manifest number: 1987
Signing time: Tue 01 Sep 2026 01:00:30 +0000
Manifest this update: Tue 01 Sep 2026 01:00:30 +0000
Manifest next update: Wed 02 Sep 2026 01:00:30 +0000
Files and hashes: 1: DRi6gZm2ApJ9zWvuSIffTh_44j0.roa (hash: NDQ8jCUezYMaYn3NL3pjn/AqInQQgH2COtpVWhCKawg=)
2: hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl (hash: t3y0BiFP8bDbnGvxJJ3Xu7c/yo7J8jsWXNcbkhj8jCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:7b:61:82:a7:71:a6:00:56:1e:2d:3f:d6:27:70:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86022e162f6e6b9755ce4ce845120e62939506f7
Validity
Not Before: Sep 1 01:00:30 2026 GMT
Not After : Sep 2 01:00:30 2026 GMT
Subject: CN=c85776b42ea9913974ac1d16ffa9438b8f81697c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:0f:b4:30:ba:66:d5:13:ee:7a:4d:c8:e4:
23:e8:65:a4:4c:07:57:15:4c:f2:db:94:c5:c0:53:
13:13:e2:0a:b1:7e:3f:56:ba:7f:d4:b0:26:cf:a4:
af:de:a3:af:78:a7:28:d9:14:a4:3a:0b:68:68:0b:
f6:f0:9e:d6:ef:f8:ea:30:8d:3e:c2:87:a6:11:63:
c5:ae:b9:08:62:68:40:19:dd:75:91:b9:92:40:48:
24:ab:85:0d:9b:7b:01:39:d8:44:49:32:dd:13:48:
91:9a:b6:13:ce:45:51:e9:a9:68:e9:bf:c0:21:7b:
34:c6:1d:b8:0d:57:4a:a7:05:18:60:69:f8:18:c6:
67:c0:bc:a0:cd:98:41:f7:5c:76:73:50:70:8b:cb:
08:15:0e:8d:48:ae:07:d7:7b:6b:a5:d3:09:3d:4c:
71:50:51:ba:92:80:bf:8a:c1:73:2d:de:ac:ed:79:
3a:4e:27:e2:5e:e0:6c:e7:b5:05:8b:06:3b:df:57:
a8:7f:06:ca:e6:3d:2a:d7:e0:ee:06:ca:b9:9e:d6:
d6:e2:6c:f3:a3:8f:72:a9:66:89:c1:63:60:22:4c:
ab:2a:ab:c0:ce:56:90:71:91:e0:fa:f9:4a:36:39:
c0:c1:3c:92:70:2d:46:79:88:cb:9c:0e:d4:a4:de:
fc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:57:76:B4:2E:A9:91:39:74:AC:1D:16:FF:A9:43:8B:8F:81:69:7C
X509v3 Authority Key Identifier:
keyid:86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7c:19:36:52:73:9c:79:f6:a6:cc:ce:96:26:60:49:3b:03:
6a:9a:9c:75:8c:4a:3f:04:bd:5e:60:05:6b:52:57:2c:1a:da:
80:3c:e1:b8:7e:f6:6f:7d:9a:18:86:56:dd:54:1c:d1:d1:aa:
ee:6a:ab:59:36:3d:ae:32:28:23:23:af:4f:be:b1:60:e9:32:
ed:7f:20:26:c7:3c:9c:bf:eb:3b:f2:ca:0e:43:e9:dc:73:b8:
14:d9:fc:52:4c:05:75:49:ac:7f:c8:29:55:92:f9:f3:26:8e:
63:91:a7:71:ad:e7:a8:a2:07:38:5c:93:03:17:7a:41:8f:b1:
70:99:fd:d6:97:79:19:9f:c5:b5:05:06:53:14:d7:e5:2e:0a:
26:d4:e9:cf:6d:4d:8c:a6:1a:97:e7:3d:f9:29:0d:d5:a3:0c:
e1:e7:de:fd:8d:7e:9e:57:62:0f:6e:97:6a:b3:15:16:28:0e:
45:bc:3a:9a:e8:0e:e8:1f:2c:95:4b:0d:2a:1b:46:33:77:29:
79:9b:fc:ca:d1:cd:1a:a7:e7:c7:51:5c:4c:7c:bc:4b:05:65:
d3:5c:4a:5a:a7:32:c0:a8:b0:d7:b0:48:a4:e8:a9:5b:09:3d:
f3:4d:e9:ff:7f:0b:c4:08:2e:14:6e:a1:2b:3c:c5:5e:b9:b8:
cb:6e:f1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:40:55 2026 by rpki-client