Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
File: HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft (raw, json)
Hash identifier: //bS91dkM1AhMaNB4NKAWQzYZ/0ELZuUYVNwnn/giJI=
Subject key identifier: 7F:A5:D5:EB:BD:77:4F:0C:88:3A:A5:CC:45:FC:DE:90:17:CB:4F:43
Authority key identifier: 1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
Certificate issuer: /CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Certificate serial: 019FA11712BE7AF69A64CAF03BE315490621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 01:01:11 +0000
Manifest this update: Mon 27 Jul 2026 01:01:11 +0000
Manifest next update: Tue 28 Jul 2026 01:01:11 +0000
Files and hashes: 1: 2KPFTLeDrSm9M4_XVjKhQsAeW5w.roa (hash: oiy5/t8+xoYRfuAXJZSTJK9AhNzpLlj1CftKpmctdeM=)
2: HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl (hash: +AfygiqogSEEQ4abYpvCuYjrlLwm62fQRbWF5cIJfGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:17:12:be:7a:f6:9a:64:ca:f0:3b:e3:15:49:06:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Validity
Not Before: Jul 27 01:01:11 2026 GMT
Not After : Jul 28 01:01:11 2026 GMT
Subject: CN=7fa5d5ebbd774f0c883aa5cc45fcde9017cb4f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:34:23:41:ff:a6:1d:d4:6e:99:1a:9e:e4:62:
3c:eb:2f:76:82:30:26:7e:5c:29:9b:48:b8:51:be:
6f:3b:a6:40:1f:68:b4:00:bc:9c:f6:d9:c5:cb:34:
c1:f9:5e:0e:6a:8a:08:19:4b:d4:b8:0e:26:6b:90:
ff:56:d4:0b:d8:e2:12:63:ef:e7:67:a2:d2:95:af:
a1:59:19:17:f4:b6:71:94:5d:c8:7a:38:22:1f:9e:
b7:3c:96:67:89:e1:f5:e2:05:39:fc:44:d9:50:5a:
62:51:29:44:53:27:5e:45:7d:24:57:d8:51:12:f5:
4f:c6:2b:a0:07:b9:79:25:1e:30:b0:01:ef:5a:ff:
d9:ee:03:0e:a9:7a:3a:d5:eb:a2:02:db:40:fe:a4:
9b:2f:8c:ff:d7:51:22:63:5c:c0:46:13:90:49:fd:
39:1b:2e:18:5b:7c:37:80:e8:dd:c5:b6:62:05:17:
cc:4b:7f:60:6d:c6:05:48:75:41:94:e4:eb:f3:3f:
bc:e9:07:f8:4e:09:27:cc:18:6d:ef:87:7d:a6:c2:
4d:a1:96:00:f8:24:1d:7f:e4:db:8c:75:7d:42:04:
4b:ce:d7:3f:31:fd:56:f1:16:58:64:1d:82:3a:3d:
23:fc:75:db:95:3d:a5:d4:e1:3b:85:47:68:fe:ea:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A5:D5:EB:BD:77:4F:0C:88:3A:A5:CC:45:FC:DE:90:17:CB:4F:43
X509v3 Authority Key Identifier:
keyid:1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ad:b2:fe:c9:52:2c:eb:cf:d3:95:38:02:0c:a0:70:1d:3a:
5a:55:c3:80:74:e0:5c:90:4e:08:d7:36:5b:90:3a:ef:71:88:
7a:c7:48:9f:a0:f5:fd:ee:8d:0c:91:16:ae:e0:c3:40:c6:78:
42:3a:6e:46:d5:2d:75:c6:1c:a7:4a:e3:51:fd:f0:72:24:e4:
68:28:eb:58:47:45:5d:6d:4c:5b:a8:4c:63:56:be:12:8e:c0:
e5:d6:55:87:9d:53:71:45:0a:54:15:94:34:90:9f:13:12:8e:
b0:d0:23:55:e0:c4:1e:3a:bb:c1:5b:5d:6b:30:03:e5:f1:86:
02:0f:be:a9:be:9e:d4:bf:41:04:68:ca:3e:08:53:2d:23:df:
c2:59:bc:db:b4:dc:0f:4d:e3:d4:4b:9d:c3:74:56:a8:20:91:
9e:b9:a0:22:1c:7c:c5:97:33:93:3b:2d:25:9b:2c:fe:f7:83:
70:23:07:0b:14:51:a9:3a:d7:10:e3:a7:00:7e:d6:6f:20:9b:
ba:99:41:da:9f:e0:97:2b:8c:0c:2d:49:ce:4c:14:e5:c2:8b:
e7:20:ce:6d:30:18:48:bc:cd:08:9e:1c:9d:76:47:07:a3:de:
ac:a2:4f:8b:87:48:42:ff:1b:2c:51:7a:c2:62:32:4c:a5:75:
ee:af:c6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:19:38 2026 by rpki-client