Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
File: HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft (raw, json)
Hash identifier: gLL/JdOsU4gHjRTxZsNnOhyk955WX36exdqXZHZfOMM=
Subject key identifier: 9B:21:0B:6E:ED:0F:E1:F5:D1:FD:CE:35:53:39:F1:14:DA:0D:E2:08
Authority key identifier: 1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
Certificate issuer: /CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Certificate serial: 01A1784C21E608B4DC161097F4E05CA2D927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
Manifest number: 1AC5
Signing time: Mon 26 Oct 2026 13:00:17 +0000
Manifest this update: Mon 26 Oct 2026 13:00:17 +0000
Manifest next update: Tue 27 Oct 2026 13:00:17 +0000
Files and hashes: 1: 2KPFTLeDrSm9M4_XVjKhQsAeW5w.roa (hash: oiy5/t8+xoYRfuAXJZSTJK9AhNzpLlj1CftKpmctdeM=)
2: HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl (hash: dI2jNAsMm3+4bIwYB3KJ9SjqEHWWTnzLxKABb6h8YrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:4c:21:e6:08:b4:dc:16:10:97:f4:e0:5c:a2:d9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Validity
Not Before: Oct 26 13:00:17 2026 GMT
Not After : Oct 27 13:00:17 2026 GMT
Subject: CN=9b210b6eed0fe1f5d1fdce355339f114da0de208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:cb:57:36:8d:4b:4d:5f:f5:91:21:8c:c0:8d:
9f:ec:b7:0f:39:f7:4f:ff:4d:e3:f7:85:47:35:3e:
36:ef:dc:47:7f:5e:3d:e1:90:6e:7a:12:23:87:cb:
df:a0:1b:9c:ea:5c:aa:15:c5:7f:5e:1e:3d:17:40:
06:9b:cb:c2:ee:32:fd:5f:3e:f6:32:94:5e:a4:49:
9b:e0:19:9a:cd:c5:a6:f9:b9:8d:80:d2:e9:15:33:
ff:52:3f:e6:21:fc:1e:0d:d5:a9:5e:f8:34:33:d7:
4a:ba:8b:55:6f:a3:52:b1:0f:77:f3:68:97:99:cd:
c2:b6:50:3b:4d:fe:c5:d5:f9:d5:1c:c0:2b:14:3e:
59:52:b4:ed:75:da:6d:73:34:c3:fe:39:97:c7:9b:
26:2c:3e:56:02:7c:f4:32:ae:23:cd:0f:0d:89:fd:
9e:59:8d:b5:31:99:2c:cb:49:87:a2:eb:94:89:c0:
ea:7a:56:86:1a:6a:f8:21:a3:dc:b5:b3:2c:0b:27:
3f:5b:b6:8f:13:ef:ae:df:43:d5:59:46:02:58:71:
2a:fd:f7:31:59:fb:e5:f6:a5:da:6b:9e:42:34:a1:
a5:16:b9:0c:d1:47:60:ed:ea:1a:89:dd:f6:ab:b3:
56:d4:f3:ce:d2:f9:b6:87:bc:a5:74:a1:d7:92:94:
8e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:21:0B:6E:ED:0F:E1:F5:D1:FD:CE:35:53:39:F1:14:DA:0D:E2:08
X509v3 Authority Key Identifier:
keyid:1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:65:a3:52:b8:8a:25:01:86:0f:91:fa:c6:a1:8e:ce:9a:d4:
56:35:03:e3:08:1b:6d:95:7b:14:14:e7:9d:5a:8f:cb:00:aa:
96:4c:7b:6f:f0:7b:1e:a7:04:13:3f:61:d4:ec:62:fe:92:f8:
a0:26:5e:b1:98:85:10:a2:12:a4:95:6e:ac:b8:6f:5f:cd:30:
9a:cf:95:2b:b0:76:62:53:7a:a0:07:bd:43:8d:75:94:ed:44:
a9:cd:b2:87:95:e8:df:0b:ab:6c:dc:29:41:80:c8:bf:c0:6e:
0e:c8:e3:f7:ca:77:31:c2:9f:b7:ea:1e:5b:93:44:4b:f0:85:
53:9e:75:a9:27:31:6f:aa:bc:1f:0e:66:d6:28:4e:a1:76:c2:
c9:6a:ba:84:8a:84:ec:60:8b:91:33:99:13:3b:f7:44:04:b4:
c1:32:73:94:7d:d1:b9:82:2c:2f:b0:4c:5a:49:29:69:d9:32:
17:67:6f:d2:39:c0:2e:2d:be:b0:9d:b9:5f:62:cb:cb:de:44:
e5:d9:9d:91:12:3e:98:9d:7f:e6:ae:3e:b0:a7:d8:1f:f4:bf:
ee:46:72:ac:24:ca:2a:0e:9e:37:ca:39:ca:cf:31:02:c9:45:
35:76:5f:b2:ba:77:aa:65:db:ed:97:cc:d4:5a:1b:09:5d:c9:
31:94:d8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:01:42 2026 by rpki-client