Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
File: HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft (raw, json)
Hash identifier: Q1A+v3nFYPkdEJB/PE8TXjUwksV7ULce4EGjKnL61As=
Subject key identifier: 01:FC:2D:B6:39:AB:8C:5A:E7:67:92:01:58:FC:45:45:56:28:79:7A
Authority key identifier: 1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
Certificate issuer: /CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Certificate serial: 01A08CB1B499AE4615E9125304025D234CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
Manifest number: 1A4B
Signing time: Thu 10 Sep 2026 19:00:51 +0000
Manifest this update: Thu 10 Sep 2026 19:00:51 +0000
Manifest next update: Fri 11 Sep 2026 19:00:51 +0000
Files and hashes: 1: 2KPFTLeDrSm9M4_XVjKhQsAeW5w.roa (hash: oiy5/t8+xoYRfuAXJZSTJK9AhNzpLlj1CftKpmctdeM=)
2: HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl (hash: WGW0DwZfkcqFwzK43Fpp+XAxJgdEohbrf6vpzzWQu8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:b4:99:ae:46:15:e9:12:53:04:02:5d:23:4c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Validity
Not Before: Sep 10 19:00:51 2026 GMT
Not After : Sep 11 19:00:51 2026 GMT
Subject: CN=01fc2db639ab8c5ae767920158fc45455628797a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:ec:e3:e4:e7:b8:5e:6c:63:f4:b9:eb:62:
ac:a3:43:79:26:0b:03:7e:e3:11:40:f8:b4:dd:b2:
51:25:6e:e0:26:a5:68:bf:a1:37:43:87:7c:3a:2f:
a0:2c:b3:81:4b:57:4a:9f:38:c9:f2:80:98:ed:53:
ae:c1:e5:e7:51:35:ae:ca:99:32:57:98:e5:50:43:
cf:f0:b6:f0:a6:63:0e:cd:5f:77:2a:35:25:b6:2c:
6f:4d:2e:db:60:31:f7:7e:2d:91:46:d2:a4:78:55:
56:2d:9f:62:58:7b:0a:4c:0c:0c:73:89:f3:4f:40:
85:86:d9:49:2f:1a:3f:fa:53:ea:eb:4e:b2:56:a0:
c6:8a:8d:3e:f8:43:00:0c:47:e2:00:8f:fb:c9:0b:
d6:4b:43:fc:d2:69:3a:dc:04:a4:46:54:b3:a0:6c:
f8:19:3e:a7:87:51:f9:76:b0:9a:6e:da:11:8e:de:
9c:93:c3:cf:4a:1c:bd:2b:be:73:9f:86:1f:09:46:
c8:c8:c5:9b:75:db:13:39:86:c8:df:fb:3f:9b:9a:
ec:09:ea:40:7e:c8:88:fa:5f:4a:32:93:cf:83:53:
f6:7e:69:49:4a:1a:6b:e0:33:0b:01:7d:fb:a4:20:
2d:bc:8a:2b:d9:da:31:5c:4e:c9:d3:ac:83:09:10:
d7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FC:2D:B6:39:AB:8C:5A:E7:67:92:01:58:FC:45:45:56:28:79:7A
X509v3 Authority Key Identifier:
keyid:1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3d:6f:5a:7b:1a:86:4e:48:46:b8:82:71:3f:3f:42:fc:5f:
1b:8c:b0:ce:99:28:59:62:36:f6:41:59:c3:d9:3d:a7:ed:de:
26:78:04:22:ec:2d:21:bd:27:9a:a5:e5:d9:25:0a:09:71:a1:
01:76:f2:a4:4b:c1:f9:d3:20:d3:f3:ad:9d:95:15:bf:cf:58:
9b:9e:fd:44:56:8b:6d:b5:68:86:65:43:4f:ba:ba:4b:c5:d3:
70:27:0e:02:02:33:a4:ef:19:d6:d4:eb:a6:11:dc:bf:00:61:
a4:70:11:c4:c8:fe:d9:d4:3e:38:24:f9:44:81:28:6a:65:90:
66:84:e0:19:46:27:99:79:23:c5:e9:27:c9:85:28:7a:02:9a:
0f:89:b2:18:22:ce:8f:da:e4:aa:2f:52:1a:25:55:f1:71:ea:
12:a7:65:fc:ee:15:c6:23:97:82:1b:d3:17:19:1f:22:3a:78:
2b:b5:f7:8f:10:da:d8:58:05:8e:1d:50:dd:c2:06:91:3b:af:
64:be:3e:76:ca:27:b7:d9:1f:af:ea:fd:3d:33:11:67:a0:21:
fb:d7:54:c3:81:90:f1:69:43:b1:e2:08:8b:d1:82:ad:f7:f8:
c5:cb:f7:f8:0f:33:a6:a6:79:e0:6b:6f:cf:6c:6b:ae:d7:d2:
0a:9f:ce:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:11:26 2026 by rpki-client