Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
File: hhgk6bM0tNUOg8Sd-boZziW-gZM.mft (raw, json)
Hash identifier: YhaJzLvug3jg4uM3YyZhR45QYvZM0M/Jdk4SE7fhCNc=
Subject key identifier: 62:6F:C9:16:A4:04:F2:0D:4C:51:02:B0:EA:9D:8C:38:B9:77:0A:B1
Authority key identifier: 86:18:24:E9:B3:34:B4:D5:0E:83:C4:9D:F9:BA:19:CE:25:BE:81:93
Certificate issuer: /CN=861824e9b334b4d50e83c49df9ba19ce25be8193
Certificate serial: 019D3789B043F6873551EFFADC4B5BD17276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
Manifest number: 66
Signing time: Sun 29 Mar 2026 03:01:03 +0000
Manifest this update: Sun 29 Mar 2026 03:01:03 +0000
Manifest next update: Mon 30 Mar 2026 03:01:03 +0000
Files and hashes: 1: GtDxiNHeYhaopEz7nkSxj4Uwws0.roa (hash: xLrL13cfFz66vUPjaMWCOfLQuaEtZXy6c6DNYKUuXaU=)
2: dTkGUafttT6-8GpfaFN-_DQscaU.roa (hash: go6kdC6kI78p8haD5O5Bqq/07FTC8kyj7opP+hvQavw=)
3: hhgk6bM0tNUOg8Sd-boZziW-gZM.crl (hash: 7/ubufhBu2gohPmUNaTXvYnA6o3xHGIfq8QAoqa+57U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:b0:43:f6:87:35:51:ef:fa:dc:4b:5b:d1:72:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861824e9b334b4d50e83c49df9ba19ce25be8193
Validity
Not Before: Mar 29 03:01:03 2026 GMT
Not After : Mar 30 03:01:03 2026 GMT
Subject: CN=626fc916a404f20d4c5102b0ea9d8c38b9770ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:97:19:b9:f7:fe:f6:b4:d4:ce:e4:1f:34:f0:
24:88:94:02:eb:fa:a9:6c:3a:cf:a4:92:93:fd:be:
aa:26:c7:7d:2f:09:e8:73:5f:55:8f:b8:d6:69:ef:
34:ec:f9:62:19:ab:c4:55:2b:25:1a:ee:f2:04:8b:
d2:28:cf:71:1d:55:ce:1d:57:d0:71:ff:53:a3:2a:
b5:f8:d0:22:06:6d:cc:ea:5f:ec:32:b7:66:ce:cb:
09:86:01:11:b9:39:55:4e:39:61:68:9b:3c:68:a5:
72:b9:45:3e:3a:1f:4c:a2:5f:3f:cc:98:c0:ae:e6:
d8:31:d8:56:1c:05:30:a4:96:e6:72:85:01:c3:0f:
6c:16:0b:3a:0f:14:9a:ed:10:b2:07:e0:43:a2:48:
9f:ee:d0:a0:ba:5c:7e:7b:be:56:bf:24:87:da:63:
76:d9:b1:07:c6:f4:ee:69:7f:c1:7c:df:23:a3:9d:
e9:17:f8:ac:34:52:e7:0d:06:b3:8f:0f:37:14:c5:
69:e0:94:c1:16:86:f5:61:db:d3:35:47:d9:ba:7a:
86:9a:7e:1b:d8:02:5b:cf:d9:5d:1d:d7:de:43:55:
ce:4d:5a:74:94:ba:d5:0c:a4:26:e9:03:dd:33:d0:
7a:f9:cc:cc:08:3b:3e:b8:40:91:59:44:eb:fc:b5:
33:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6F:C9:16:A4:04:F2:0D:4C:51:02:B0:EA:9D:8C:38:B9:77:0A:B1
X509v3 Authority Key Identifier:
keyid:86:18:24:E9:B3:34:B4:D5:0E:83:C4:9D:F9:BA:19:CE:25:BE:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:a0:4b:d4:aa:5c:0a:2c:01:42:a2:1e:7d:54:6b:14:86:5e:
1a:90:75:c7:87:d7:fe:ca:f7:84:c0:73:e0:1b:44:e5:a0:c4:
36:fd:65:81:30:9f:d2:73:28:51:5f:bd:eb:77:3e:89:f7:04:
b9:16:ec:25:f6:a7:c1:a8:1c:3b:59:5c:e8:5b:39:e1:12:33:
c9:db:69:f6:43:01:73:05:3f:7a:4f:81:f5:a5:02:31:4d:43:
23:8b:f7:19:56:c3:14:6e:d7:be:de:3a:dd:3a:1c:9e:c1:92:
11:c2:b2:26:1e:9b:de:09:8c:59:25:bf:44:bd:af:ad:3e:ed:
a9:78:56:66:e1:68:97:f4:96:0f:c2:a4:1c:eb:52:aa:07:07:
3d:1b:6a:49:40:38:27:b9:16:a0:80:8e:3f:5c:17:17:5a:37:
91:1a:0d:c5:38:ae:7d:f9:82:5a:c5:2a:2b:89:5a:79:5b:17:
bf:5d:a7:d3:49:f7:11:25:35:d7:21:14:13:93:c8:c3:d0:46:
9d:63:90:7f:34:6c:29:06:b2:41:d6:d6:79:45:7b:17:70:7c:
52:bb:46:78:fd:23:a1:19:32:ac:17:70:4b:7a:42:c8:55:03:
e2:0b:e2:ac:d9:37:c8:c2:da:ab:8a:53:d1:12:18:e9:14:63:
8e:03:05:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:18 2026 by rpki-client