Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
File: HgClX517dTlrS_oT54lgpaEvTvU.mft (raw, json)
Hash identifier: ZCuDO13jJjPEsUw6+fhLjjXOW/cR61ynINkrTVV+6W8=
Subject key identifier: 3A:2E:84:74:66:BA:C2:E0:35:D7:B3:59:7E:D3:0B:98:26:AA:3A:54
Authority key identifier: 1E:00:A5:5F:9D:7B:75:39:6B:4B:FA:13:E7:89:60:A5:A1:2F:4E:F5
Certificate issuer: /CN=1e00a55f9d7b75396b4bfa13e78960a5a12f4ef5
Certificate serial: 01A147CEADF826C91FB1EF95DEE9E2DF663F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
Manifest number: 1260
Signing time: Sat 17 Oct 2026 03:01:29 +0000
Manifest this update: Sat 17 Oct 2026 03:01:29 +0000
Manifest next update: Sun 18 Oct 2026 03:01:29 +0000
Files and hashes: 1: HgClX517dTlrS_oT54lgpaEvTvU.crl (hash: CLbRuKfNv3QbvkeC7/jwwsUna06FWvWJ/rcstXqoVK8=)
2: u_mH6EUqNkqz_nJQ2xMzHjAOs5k.roa (hash: Bwm8rVbQPci5MWzF+kRT+h1fK3xCwzJ+2otJGbrOfJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 03:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:ce:ad:f8:26:c9:1f:b1:ef:95:de:e9:e2:df:66:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e00a55f9d7b75396b4bfa13e78960a5a12f4ef5
Validity
Not Before: Oct 17 03:01:29 2026 GMT
Not After : Oct 18 03:01:29 2026 GMT
Subject: CN=3a2e847466bac2e035d7b3597ed30b9826aa3a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:25:3c:41:c7:ce:1b:89:33:f0:45:dc:53:1d:
44:c0:5e:f6:5a:f6:a8:4e:1d:43:75:bf:6a:e8:3b:
23:21:d4:d7:2e:60:4d:d7:57:52:b4:17:0f:50:9a:
c0:d1:5c:4a:1b:60:38:52:b3:b8:0e:75:c2:7c:1e:
91:72:d8:56:dc:94:72:73:37:db:89:ce:ad:a4:49:
19:1a:9b:7c:13:72:74:69:a9:00:42:1c:70:29:61:
9f:bf:b3:61:6d:49:2a:34:9a:7e:3f:c0:f1:5e:ce:
81:f7:15:a2:55:1e:b7:a0:c8:40:2d:cb:87:81:dc:
cf:e2:ba:0c:34:9c:e1:1f:a6:14:71:7b:c2:fd:3b:
54:62:5d:86:fb:6f:d9:f8:7d:c8:14:1b:cf:79:e7:
1f:ce:3b:e9:2d:bc:e0:88:e4:ad:cb:62:ac:ff:98:
ce:d0:8a:c6:fc:84:46:95:ee:1c:da:44:19:be:e6:
a0:4d:2e:f1:a6:9f:15:7a:17:bc:aa:f8:09:81:d7:
5c:8f:c6:27:82:18:a9:db:a9:3f:33:f6:f3:48:90:
61:67:fe:47:0d:f8:10:2a:3b:15:7c:83:89:25:48:
e5:16:02:40:ae:2f:5a:f4:6f:cc:17:b3:b9:cf:3c:
27:f8:5c:bb:1a:8d:df:27:98:2a:be:f3:55:73:fa:
35:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2E:84:74:66:BA:C2:E0:35:D7:B3:59:7E:D3:0B:98:26:AA:3A:54
X509v3 Authority Key Identifier:
keyid:1E:00:A5:5F:9D:7B:75:39:6B:4B:FA:13:E7:89:60:A5:A1:2F:4E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:19:b4:62:d1:6b:f5:05:c5:54:3c:a9:24:6f:0b:cb:41:78:
0c:1f:b9:98:dc:a4:98:b3:33:20:56:d6:05:5f:92:a2:75:71:
be:ec:0c:ab:6c:41:e0:4a:94:3d:eb:55:c1:f7:3f:79:a9:82:
a5:50:1e:89:81:a4:ec:b4:61:f8:77:f3:d1:8c:e1:a4:14:22:
af:38:f5:8a:f4:b7:a6:41:36:9f:5d:4f:b3:05:48:5c:df:d7:
7f:9f:cc:d2:10:ca:b8:8d:b8:7c:0f:2e:c0:5a:17:ea:46:5b:
dd:6f:00:62:2f:1f:f0:c5:41:9a:4a:01:06:c0:8d:e5:e8:85:
41:26:7c:c6:15:2c:34:db:73:95:d9:03:29:35:2c:02:28:93:
cf:bb:0d:17:e8:fc:b6:c1:02:a6:29:a0:5b:0e:a2:0a:33:a9:
5b:71:c6:ea:0c:d0:a7:c1:f7:81:33:23:bc:ec:b9:cf:39:5a:
a6:4d:d2:19:5b:53:b0:7d:bf:e2:85:9a:2e:00:90:92:f9:cc:
00:ff:b1:9c:ff:a0:6c:7f:99:54:6e:8d:b4:84:3e:32:f3:29:
4f:04:df:75:89:10:4b:1e:b6:c5:90:0b:fc:ee:81:4f:57:30:
a4:a7:27:b1:fe:43:21:79:a5:89:ee:35:87:54:6e:8c:fa:b4:
cc:9d:22:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFHzq34Jskfse+V3uni32Y/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMDBhNTVmOWQ3Yjc1Mzk2YjRiZmExM2U3ODk2MGE1YTEy
ZjRlZjUwHhcNMjYxMDE3MDMwMTI5WhcNMjYxMDE4MDMwMTI5WjAzMTEwLwYDVQQD
EygzYTJlODQ3NDY2YmFjMmUwMzVkN2IzNTk3ZWQzMGI5ODI2YWEzYTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCU8QcfOG4kz8EXcUx1EwF72Wvao
Th1Ddb9q6DsjIdTXLmBN11dStBcPUJrA0VxKG2A4UrO4DnXCfB6RcthW3JRyczfb
ic6tpEkZGpt8E3J0aakAQhxwKWGfv7NhbUkqNJp+P8DxXs6B9xWiVR63oMhALcuH
gdzP4roMNJzhH6YUcXvC/TtUYl2G+2/Z+H3IFBvPeecfzjvpLbzgiOSty2Ks/5jO
0IrG/IRGle4c2kQZvuagTS7xpp8Vehe8qvgJgddcj8Ynghip26k/M/bzSJBhZ/5H
DfgQKjsVfIOJJUjlFgJAri9a9G/MF7O5zzwn+Fy7Go3fJ5gqvvNVc/o1xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDouhHRmusLgNdezWX7TC5gmqjpUMB8GA1UdIwQY
MBaAFB4ApV+de3U5a0v6E+eJYKWhL071MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGdDbFg1MTdkVGxyU19vVDU0bGdwYUV2VHZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS82ODE1MjYtODYzZC00Njk4LWIxMjUt
Y2Y3ZWRmM2Y1ZWFjLzEvSGdDbFg1MTdkVGxyU19vVDU0bGdwYUV2VHZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS82ODE1MjYtODYzZC00Njk4LWIxMjUtY2Y3ZWRmM2Y1ZWFj
LzEvSGdDbFg1MTdkVGxyU19vVDU0bGdwYUV2VHZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRm0YtFr
9QXFVDypJG8Ly0F4DB+5mNykmLMzIFbWBV+SonVxvuwMq2xB4EqUPetVwfc/eamC
pVAeiYGk7LRh+Hfz0YzhpBQirzj1ivS3pkE2n11PswVIXN/Xf5/M0hDKuI24fA8u
wFoX6kZb3W8AYi8f8MVBmkoBBsCN5eiFQSZ8xhUsNNtzldkDKTUsAiiTz7sNF+j8
tsECpimgWw6iCjOpW3HG6gzQp8H3gTMjvOy5zzlapk3SGVtTsH2/4oWaLgCQkvnM
AP+xnP+gbH+ZVG6NtIQ+MvMpTwTfdYkQSx62xZAL/O6BT1cwpKcnsf5DIXmlie41
h1RujPq0zJ0iaA==
-----END CERTIFICATE-----
Generated at Sat Oct 17 12:37:51 2026 by rpki-client