Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
File: hhgk6bM0tNUOg8Sd-boZziW-gZM.mft (raw, json)
Hash identifier: 4YjjB/tFg83n2hI76H8MQyYxmSapqDQXjE92EXvhRLg=
Subject key identifier: D4:B3:16:CA:08:C0:F9:3B:F0:9C:F0:84:A7:CA:0F:1E:65:92:BC:BE
Authority key identifier: 86:18:24:E9:B3:34:B4:D5:0E:83:C4:9D:F9:BA:19:CE:25:BE:81:93
Certificate issuer: /CN=861824e9b334b4d50e83c49df9ba19ce25be8193
Certificate serial: 019FA184BDEAFC9E1FB9FB628148AC66240E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
Manifest number: 01A6
Signing time: Mon 27 Jul 2026 03:00:58 +0000
Manifest this update: Mon 27 Jul 2026 03:00:58 +0000
Manifest next update: Tue 28 Jul 2026 03:00:58 +0000
Files and hashes: 1: GtDxiNHeYhaopEz7nkSxj4Uwws0.roa (hash: xLrL13cfFz66vUPjaMWCOfLQuaEtZXy6c6DNYKUuXaU=)
2: dTkGUafttT6-8GpfaFN-_DQscaU.roa (hash: go6kdC6kI78p8haD5O5Bqq/07FTC8kyj7opP+hvQavw=)
3: hhgk6bM0tNUOg8Sd-boZziW-gZM.crl (hash: 0g6JaZmAkNWUPT5nRQAc4+mH2DD8fQAC9vMXILTJ5ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:bd:ea:fc:9e:1f:b9:fb:62:81:48:ac:66:24:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861824e9b334b4d50e83c49df9ba19ce25be8193
Validity
Not Before: Jul 27 03:00:58 2026 GMT
Not After : Jul 28 03:00:58 2026 GMT
Subject: CN=d4b316ca08c0f93bf09cf084a7ca0f1e6592bcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a5:bb:46:19:d1:53:e2:58:17:bf:3c:18:6f:
77:df:2e:ab:41:0f:1e:45:3e:67:3c:49:10:37:c0:
23:c6:35:2c:15:6f:42:38:c6:19:9d:14:6b:04:73:
38:21:00:14:b3:6a:46:6a:69:6b:fd:fb:47:65:a3:
47:fe:4b:45:3a:18:6c:69:5b:af:5f:35:7a:ab:aa:
6d:2c:e5:56:33:a1:00:a8:37:4d:0c:26:66:07:88:
f9:d3:3b:43:10:28:da:6e:ac:53:42:d2:a7:5a:bf:
02:e2:fc:78:01:c2:d5:b4:92:25:d1:ac:d1:f5:e1:
cf:90:6f:94:5a:e5:25:c3:f2:c4:24:ee:68:a3:a5:
74:35:df:ac:c5:1e:de:54:dc:9c:27:63:8d:79:25:
ea:4e:a5:b3:88:2e:e5:b9:fb:ee:e3:7f:31:ef:52:
b1:81:2c:1b:5f:f5:24:ba:9b:83:fc:fb:74:e1:41:
fa:fe:04:d0:0f:26:7b:7c:07:04:b4:16:ab:c4:cf:
fd:8d:ca:98:4e:6a:ac:9c:6a:74:b1:71:39:d4:95:
c0:a8:00:9b:ac:5e:06:cf:3c:09:32:a3:c6:78:c1:
68:3c:99:84:eb:55:83:61:54:1c:d6:f5:be:1d:ad:
04:24:94:34:06:da:d1:56:ee:5c:cf:b7:7d:31:50:
68:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B3:16:CA:08:C0:F9:3B:F0:9C:F0:84:A7:CA:0F:1E:65:92:BC:BE
X509v3 Authority Key Identifier:
keyid:86:18:24:E9:B3:34:B4:D5:0E:83:C4:9D:F9:BA:19:CE:25:BE:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:87:0f:91:ea:b0:23:33:21:24:19:c3:a1:75:86:37:5f:65:
49:6e:7c:64:4c:c0:8f:8b:0e:73:82:5e:19:94:7c:4e:2c:4f:
a7:68:db:f7:2e:f7:4f:65:74:0d:84:98:15:35:cc:53:c5:5c:
5d:ef:72:cb:90:35:9a:e1:f8:6b:c7:7c:04:9c:ec:a0:49:df:
33:79:b2:83:07:48:00:2c:07:0f:b0:ba:93:5d:e8:c2:7a:39:
69:d2:07:ab:d5:37:e6:ab:d9:7d:62:e4:c0:6f:19:4c:64:ee:
96:0b:d3:78:a4:de:57:7b:08:96:57:1b:6d:8a:2c:5c:31:25:
98:cd:34:08:51:6e:b7:1f:cf:ec:e9:ae:f9:f6:0a:c3:ae:2f:
4e:8d:00:70:25:0a:3e:0e:b9:85:4e:c0:98:e1:c6:43:b5:bd:
89:3c:fa:7d:c9:b4:c6:3d:22:f9:ae:6f:67:eb:8b:b9:5d:89:
8d:94:39:4c:a1:e4:e7:30:b2:13:05:4e:d7:63:52:99:72:c1:
62:f0:30:6b:07:b1:2e:bc:27:d5:ba:d8:73:ed:9a:fb:b7:03:
90:19:33:ae:7e:5a:03:8e:ed:43:7a:40:f4:5a:5e:f5:6e:b7:
28:46:f3:3c:1a:d5:59:b7:a4:c4:9a:bd:95:ec:3f:ff:bf:4d:
ab:48:38:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:57:13 2026 by rpki-client