Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
File: hGOGJiDUZ8inn49E7zW7YK-CP50.mft (raw, json)
Hash identifier: p1sEynwRraAagBc+lHsPu8kc5T0mc4j2spb87ClH5GA=
Subject key identifier: FF:C6:57:79:76:B2:8F:6D:F1:83:66:B1:6E:69:D8:33:C3:2F:FA:E5
Authority key identifier: 84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
Certificate issuer: /CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Certificate serial: 019D39AF3B0ECC6FD339713B8E0738148D79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
Manifest number: 0E29
Signing time: Sun 29 Mar 2026 13:01:18 +0000
Manifest this update: Sun 29 Mar 2026 13:01:18 +0000
Manifest next update: Mon 30 Mar 2026 13:01:18 +0000
Files and hashes: 1: ao51ShN_hsLIYI5m8nig7Cs4o3s.roa (hash: JBy8r6a0LgooRemhjrW8orAn22Q6qTJMcSOAq/Cj8Bs=)
2: hGOGJiDUZ8inn49E7zW7YK-CP50.crl (hash: H20gT2NoM7iC+U5G6eM+PGCI4VXXcKnOOyqsF4I1GHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:3b:0e:cc:6f:d3:39:71:3b:8e:07:38:14:8d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Validity
Not Before: Mar 29 13:01:18 2026 GMT
Not After : Mar 30 13:01:18 2026 GMT
Subject: CN=ffc6577976b28f6df18366b16e69d833c32ffae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fe:34:99:d8:4c:c8:85:4d:17:9c:c9:a4:6a:
9d:36:4f:bc:5b:9c:16:0d:c6:5f:63:98:b9:01:5d:
ec:4b:f8:03:a7:b4:eb:a2:42:d4:92:f6:84:db:14:
64:80:c4:0d:aa:fc:fd:6d:75:88:77:d3:6d:5b:09:
00:8a:95:bc:8c:bf:30:ac:d8:bf:33:a2:be:f7:2f:
4c:11:75:f9:a8:b0:7c:dd:14:82:51:ce:58:0a:19:
d4:fb:ac:ad:ce:06:80:29:b9:b2:03:3b:12:24:18:
e2:23:72:a5:c6:6d:a7:57:92:96:d0:65:95:db:fa:
b1:54:c5:81:5c:7d:f0:72:65:8c:09:6f:6a:73:89:
ca:22:cb:34:b0:92:b1:1e:e8:ab:aa:9e:56:15:22:
99:70:46:f7:ef:6d:10:c1:a2:ad:65:46:e1:6e:85:
bc:49:af:3b:0f:c0:ef:fe:e0:91:34:46:f5:6c:c9:
d7:0c:9a:61:28:18:9a:54:cb:00:4a:a4:d3:49:1f:
0e:50:4a:6e:41:79:36:ac:91:f7:e6:c1:fa:7b:85:
ef:06:97:4e:a0:6c:82:67:e3:78:bb:26:ce:fc:e8:
14:94:64:fa:2f:1f:3b:cf:ab:ee:40:b1:b9:f1:b7:
a7:ce:09:e6:4e:bc:4a:5a:05:f9:2c:dc:d8:27:2f:
70:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C6:57:79:76:B2:8F:6D:F1:83:66:B1:6E:69:D8:33:C3:2F:FA:E5
X509v3 Authority Key Identifier:
keyid:84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:bd:d1:83:8e:3a:90:cd:94:64:c1:af:a4:10:94:c5:b5:2d:
ec:64:8a:35:a7:5b:6b:1e:75:24:ac:41:c2:d9:2f:06:7b:1e:
31:eb:62:36:82:67:d0:11:1d:c6:2f:d0:04:51:72:90:09:2c:
1f:d7:6c:ef:9e:e9:92:13:3c:77:6b:9f:00:e4:fa:06:26:78:
66:75:c7:59:45:19:b0:58:7f:3a:c4:29:72:bd:fc:86:43:47:
09:97:76:9c:59:50:76:c9:4a:d3:6a:ab:95:dc:75:a3:77:3b:
87:67:2c:a2:15:f6:7b:8d:c7:55:af:9c:9f:08:4d:54:50:fa:
34:32:e6:c3:6c:ac:5f:5a:03:15:11:27:ca:c8:22:92:89:06:
ec:45:9b:ad:9e:89:81:3c:60:f6:e1:39:62:33:43:b1:4b:f5:
08:03:07:30:1c:ca:b8:fd:d4:28:7a:8a:11:0d:db:e5:73:27:
a7:7f:8e:cf:ec:93:15:59:ae:42:e4:f1:db:b4:86:ba:19:e5:
80:2c:f6:c5:5c:a5:54:f5:34:38:aa:68:f6:3e:38:be:4c:13:
95:31:22:36:14:39:50:7c:f2:0c:93:6e:48:aa:d3:9a:e1:57:
62:cd:bf:5f:88:fb:32:4e:d3:cf:30:e6:a0:3f:e0:6e:b4:01:
04:84:f5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:20 2026 by rpki-client