Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
File: HGg_lcmNLP6dec3T247oE4uzV3I.mft (raw, json)
Hash identifier: LfJ/PM9xZBtkj86XP3NptrfEe5bpAnBhOPtIZrn0lcg=
Subject key identifier: 54:91:18:52:09:06:9A:8A:2D:3A:81:7A:8F:B2:7E:A1:9B:0B:FA:11
Authority key identifier: 1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
Certificate issuer: /CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Certificate serial: 019CECA66DBD29F6C65E22711A8EB16C29DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
Manifest number: 1867
Signing time: Sat 14 Mar 2026 14:00:55 +0000
Manifest this update: Sat 14 Mar 2026 14:00:55 +0000
Manifest next update: Sun 15 Mar 2026 14:00:55 +0000
Files and hashes: 1: 2JoxROCbPOHF6KtlD6vldAqTqX8.roa (hash: MYXtE2R+wBxrZPPj12Dpe+/LA+TCHl7zhSDFEOIzwnQ=)
2: HGg_lcmNLP6dec3T247oE4uzV3I.crl (hash: lWFoxumdTRzW2dLSZibnQzukCKnp1C6lZXnVebIXp9I=)
3: hx_-Nlwhp-rhcQWTiZp-K3bvoic.roa (hash: +6qNvM+Po303423yisqL4uil5GDRIr4RzBGe2Izpxbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:a6:6d:bd:29:f6:c6:5e:22:71:1a:8e:b1:6c:29:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Validity
Not Before: Mar 14 14:00:55 2026 GMT
Not After : Mar 15 14:00:55 2026 GMT
Subject: CN=5491185209069a8a2d3a817a8fb27ea19b0bfa11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:b2:43:f9:45:d3:ce:6b:5d:d5:8b:c9:29:
81:9f:c3:16:db:c4:f2:ac:79:39:43:2d:e7:f7:95:
79:0e:9f:fa:eb:a0:bf:ae:0c:84:db:7e:28:05:d2:
24:81:8d:fb:d0:82:2d:ff:dc:16:6c:59:28:c4:41:
ca:f8:b3:95:1e:ac:a4:ee:00:64:62:a9:ed:b8:d3:
9a:9c:0e:f2:fa:e7:59:b6:00:2d:d7:43:f1:b7:54:
1a:23:19:03:8f:e2:a3:67:6c:05:db:23:f8:7f:a5:
72:f5:8b:29:93:52:93:d8:ab:a7:7f:b1:48:95:12:
02:12:1e:16:7b:53:57:30:42:3e:2a:7f:17:f8:5f:
5d:8a:e6:60:b3:4b:14:97:36:02:da:37:a4:8a:f3:
87:21:47:b7:6c:cb:9e:54:a4:7d:5f:30:3d:d9:6b:
43:1c:04:db:f3:87:f9:d6:ad:e0:da:05:15:bf:ce:
56:fd:dc:5b:12:a0:d0:13:ed:7b:43:00:4b:ed:97:
26:c0:fb:64:d2:4d:b3:ba:f7:9a:6b:c0:0d:c6:15:
ba:8f:81:f5:bb:11:59:44:c1:2a:5b:10:a9:f3:a0:
89:9b:30:b2:eb:6f:d9:8e:ca:57:58:f3:b4:2b:46:
84:b9:d2:8d:28:79:9b:05:18:2c:f0:3a:9c:d0:21:
02:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:91:18:52:09:06:9A:8A:2D:3A:81:7A:8F:B2:7E:A1:9B:0B:FA:11
X509v3 Authority Key Identifier:
keyid:1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b2:cd:9a:0f:8e:93:a4:30:bf:65:bc:94:5f:27:40:df:be:
ee:08:ee:f1:cd:60:f9:18:59:ee:00:a9:3d:72:3d:56:bc:82:
4a:ca:a5:0f:cb:f8:69:18:64:28:f5:97:e6:0d:b8:4b:b3:85:
8b:99:3c:e0:10:be:bc:2f:0a:6b:7c:0e:84:d8:73:fc:e9:86:
fe:b4:89:4c:9c:4f:74:1c:22:a5:6f:a2:f8:3d:7e:98:9a:73:
22:91:fa:ff:a5:8f:ff:ce:18:1c:0d:bb:16:ef:7e:2c:61:84:
f3:ad:48:90:15:fa:5c:c6:3d:27:72:1e:a7:17:90:90:cb:74:
bb:95:0c:27:17:73:2e:72:22:0a:86:8f:eb:83:4d:d0:b9:cc:
cc:02:12:4f:98:bc:b2:be:51:ec:06:a4:33:7e:0c:88:56:47:
55:a5:ab:d6:41:5a:f3:fa:f7:a2:08:f6:95:dd:32:e2:40:01:
6d:e2:f3:2a:b6:48:99:d4:d7:ad:e8:89:30:51:ae:32:bd:d2:
f2:54:9a:31:03:2b:2a:3b:6c:3f:7f:ea:6d:ca:ff:a8:74:83:
11:10:54:97:e3:f1:20:c0:de:a9:71:f5:59:8a:b9:4b:d8:0d:
fb:55:ba:89:13:af:03:ff:fa:69:60:a9:8d:af:dc:c2:c6:08:
63:11:15:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 18:05:44 2026 by rpki-client