Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
File: hhgk6bM0tNUOg8Sd-boZziW-gZM.mft (raw, json)
Hash identifier: uDuBve8LGgKYaau0/JLG15SXZSZVZKX3IDeIsELvMVU=
Subject key identifier: C1:1F:F2:C8:AE:06:5A:12:58:CD:66:80:EC:03:85:51:30:25:C8:22
Authority key identifier: 86:18:24:E9:B3:34:B4:D5:0E:83:C4:9D:F9:BA:19:CE:25:BE:81:93
Certificate issuer: /CN=861824e9b334b4d50e83c49df9ba19ce25be8193
Certificate serial: 01A17E85B333124DA9DA65A91717EE5564D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
Manifest number: 029D
Signing time: Tue 27 Oct 2026 18:00:53 +0000
Manifest this update: Tue 27 Oct 2026 18:00:53 +0000
Manifest next update: Wed 28 Oct 2026 18:00:53 +0000
Files and hashes: 1: GtDxiNHeYhaopEz7nkSxj4Uwws0.roa (hash: xLrL13cfFz66vUPjaMWCOfLQuaEtZXy6c6DNYKUuXaU=)
2: dTkGUafttT6-8GpfaFN-_DQscaU.roa (hash: go6kdC6kI78p8haD5O5Bqq/07FTC8kyj7opP+hvQavw=)
3: hhgk6bM0tNUOg8Sd-boZziW-gZM.crl (hash: dw8Ll6Saz3MjAtW93iCVAPsoL9NiyH/jnUQR4kpqGK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:85:b3:33:12:4d:a9:da:65:a9:17:17:ee:55:64:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861824e9b334b4d50e83c49df9ba19ce25be8193
Validity
Not Before: Oct 27 18:00:53 2026 GMT
Not After : Oct 28 18:00:53 2026 GMT
Subject: CN=c11ff2c8ae065a1258cd6680ec0385513025c822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:67:c8:1a:22:35:3c:3d:4d:6e:fd:49:47:32:
6a:37:ae:d8:67:13:ae:4f:2f:65:92:a2:fa:4e:00:
82:83:b1:cd:de:e5:56:28:b4:16:6f:b8:62:c1:33:
f1:a7:d0:8f:dd:8c:97:ee:c7:fd:96:28:d7:bd:c2:
b4:a2:92:17:66:3b:36:20:c2:ca:ef:69:b3:89:59:
54:f6:34:e8:16:94:9e:63:ef:71:ac:3f:aa:f3:e8:
b9:54:b5:b9:7c:b7:24:99:55:c4:d8:b3:de:9e:3f:
d2:44:c0:2c:5e:a6:59:41:70:02:25:e4:fd:0e:30:
98:11:4c:71:b2:30:28:84:c2:18:22:17:73:eb:9c:
bb:ab:a6:18:58:81:be:d7:fa:e8:d6:d0:d2:b6:69:
aa:fc:3b:68:20:c2:fd:0e:c8:8e:ef:80:58:6b:69:
55:ee:f3:ef:5f:b4:79:9b:44:d7:63:73:5e:c3:c7:
07:74:99:7a:59:79:38:ac:45:a7:7a:a6:c2:89:07:
be:35:0c:3d:b1:42:bb:50:e6:85:1a:c0:8d:10:ee:
52:d9:da:31:d9:36:aa:23:3f:e8:b1:85:79:58:65:
92:4d:df:ca:2b:79:c4:7b:0b:3e:6b:3b:68:14:6d:
bb:d5:8e:e5:0e:ed:71:37:ed:5d:d0:4b:6d:bd:ad:
a7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1F:F2:C8:AE:06:5A:12:58:CD:66:80:EC:03:85:51:30:25:C8:22
X509v3 Authority Key Identifier:
keyid:86:18:24:E9:B3:34:B4:D5:0E:83:C4:9D:F9:BA:19:CE:25:BE:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:0f:db:55:91:03:da:4a:eb:84:cc:17:5b:e8:66:68:a7:62:
7a:1e:6e:cc:ed:94:68:fa:99:47:d1:15:2f:bd:ee:90:a5:c1:
5c:ab:8a:c9:ae:cb:15:9b:c0:8d:84:c7:cd:ae:a3:b6:f5:1b:
17:4b:37:62:28:f4:d2:f0:84:5a:56:7f:9e:69:86:40:29:b1:
7e:6b:1d:d3:3d:ef:46:28:40:58:c3:fd:1d:c4:81:75:3d:37:
07:55:f0:22:01:21:39:b2:67:ab:2c:c0:70:d3:7a:c4:60:21:
f3:8a:e4:2f:b1:62:29:7e:18:6d:f8:b8:ee:c0:18:60:6f:52:
d0:a6:5b:ff:5c:9c:1c:fc:e7:a0:f9:af:17:8f:8b:8a:ae:05:
71:45:92:4f:31:67:10:7d:df:c8:8f:d8:92:ab:3d:90:ba:2c:
cf:71:21:bf:9e:01:28:35:a2:a7:1f:b6:e6:46:46:a4:65:e2:
06:81:bd:78:1c:7c:06:76:9e:a4:58:0a:34:78:6e:e7:f9:22:
df:99:02:12:26:65:c2:4e:4d:dd:c1:f2:dd:26:75:92:97:d0:
dd:90:72:32:1c:ac:9a:71:f6:1f:06:c2:36:d4:b4:fd:f2:b9:
74:50:e3:0c:5b:89:1a:65:56:40:21:95:16:0d:6d:9d:1d:e2:
5c:68:76:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:31:31 2026 by rpki-client