Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
File: HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft (raw, json)
Hash identifier: 0nVZpuq6ypMDlzmu7T2uDY0ZXUw0LMoNS66Z+4GY8E0=
Subject key identifier: 6D:67:AE:1F:DB:6A:D0:E8:5E:A1:09:AF:D9:1C:B0:32:73:94:AD:A6
Authority key identifier: 1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
Certificate issuer: /CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Certificate serial: 01A17C28EF9CDD1F9D1B0D287F6E278F76A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 07:00:19 +0000
Manifest this update: Tue 27 Oct 2026 07:00:19 +0000
Manifest next update: Wed 28 Oct 2026 07:00:19 +0000
Files and hashes: 1: 2KPFTLeDrSm9M4_XVjKhQsAeW5w.roa (hash: oiy5/t8+xoYRfuAXJZSTJK9AhNzpLlj1CftKpmctdeM=)
2: HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl (hash: AlDTzLEq4puCOHUJ3epsrLXIX5qrX8fCB9TIOug+Ibk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:28:ef:9c:dd:1f:9d:1b:0d:28:7f:6e:27:8f:76:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Validity
Not Before: Oct 27 07:00:19 2026 GMT
Not After : Oct 28 07:00:19 2026 GMT
Subject: CN=6d67ae1fdb6ad0e85ea109afd91cb0327394ada6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:1c:e2:e4:a8:27:9f:20:32:55:59:05:d0:
4b:62:4b:15:75:8e:dc:1d:d7:fd:23:50:1f:d9:8b:
6e:0a:e3:16:c8:37:d5:f0:8a:08:e2:da:15:1e:f5:
01:0b:d7:a1:09:38:b2:df:88:cc:17:f1:de:78:9d:
bf:f8:99:3d:86:e5:ba:ee:f3:c1:db:76:36:1c:59:
9f:f2:29:82:03:45:39:12:bb:a2:7b:16:f6:31:78:
04:20:41:75:1c:99:9d:d8:97:7e:42:60:a4:64:25:
41:9d:8a:9d:b1:96:ca:fb:f7:f8:47:57:b4:62:ab:
2d:aa:32:2d:b8:9c:24:9f:18:8d:ba:5a:b2:f0:ad:
26:62:46:9a:0b:22:b0:b2:c0:cc:a6:9d:7c:1f:18:
66:25:61:0e:d5:30:72:e9:5e:26:23:c3:38:d4:ea:
fb:4f:3d:f3:b8:56:cb:b6:d3:3c:4d:bb:a7:35:5b:
e9:a1:66:ff:35:64:2a:84:eb:7f:92:64:a0:a1:eb:
3e:e5:1e:2f:62:a0:f8:d1:df:1f:97:1d:15:b5:61:
26:6d:66:0f:a4:99:63:d5:4e:c8:17:ae:f8:7b:0d:
5a:3b:ed:45:73:84:a1:33:ff:b7:fe:3b:66:f3:89:
a1:0c:7e:61:ea:13:93:63:64:25:3f:d8:40:25:89:
9b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:67:AE:1F:DB:6A:D0:E8:5E:A1:09:AF:D9:1C:B0:32:73:94:AD:A6
X509v3 Authority Key Identifier:
keyid:1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:56:a3:ef:17:d3:fc:17:25:e6:85:19:6a:05:19:90:a5:83:
9c:49:13:cd:14:40:f5:ee:c2:20:6e:ee:cc:17:c0:cd:00:de:
de:64:9e:d1:b7:8c:b5:57:24:69:d5:67:6b:4b:e4:7b:8f:e3:
98:a8:6f:e3:d7:23:1b:a7:04:2a:7e:f5:c1:a0:c3:94:51:86:
00:f1:0d:2b:b3:3a:fe:f0:92:41:55:58:32:34:33:e6:fb:77:
bc:59:64:29:45:b3:f4:7f:f1:3c:b3:2a:d4:5b:aa:22:31:60:
3d:a9:ca:f7:98:7c:bb:a6:c8:e4:d2:2b:cc:50:82:7c:69:b6:
6d:43:22:05:6b:06:47:dd:3c:93:0a:79:25:13:75:9f:dd:a5:
c5:00:55:c0:d6:3b:fd:06:05:12:b4:79:9b:a5:fb:eb:a9:49:
4a:35:cd:bd:f7:74:dc:f8:c8:29:c2:77:f3:97:a7:c9:e5:8b:
b2:f3:83:8b:18:2a:31:b4:ea:40:1b:4f:e5:90:09:db:00:4c:
29:0a:9f:91:94:de:93:7b:62:68:cc:c2:30:b8:ef:67:5c:b1:
10:7a:76:43:5a:44:ed:95:c9:2c:e4:5e:da:bc:d9:6b:8b:b2:
67:c2:85:e4:d2:89:37:b9:c0:1a:f9:01:3b:89:a7:b4:22:d2:
3f:f0:24:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:03:48 2026 by rpki-client