Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/hggCY9xXAxYNlv_vEuxeilJR7KY.mft
File: hggCY9xXAxYNlv_vEuxeilJR7KY.mft (raw, json)
Hash identifier: g+o0ZUdhrEo0CR0s4Ga0iDFvNdZYdzAo9HZLwpx/c/0=
Subject key identifier: DD:19:28:DF:DF:4C:5D:A9:6C:AB:E3:28:73:38:09:5C:56:70:D4:4A
Authority key identifier: 86:08:02:63:DC:57:03:16:0D:96:FF:EF:12:EC:5E:8A:52:51:EC:A6
Certificate issuer: /CN=86080263dc5703160d96ffef12ec5e8a5251eca6
Certificate serial: 01A181BDEC294DB7A69C775F7AEDD51A613F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hggCY9xXAxYNlv_vEuxeilJR7KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/hggCY9xXAxYNlv_vEuxeilJR7KY.mft
Manifest number: 0141
Signing time: Wed 28 Oct 2026 09:01:09 +0000
Manifest this update: Wed 28 Oct 2026 09:01:09 +0000
Manifest next update: Thu 29 Oct 2026 09:01:09 +0000
Files and hashes: 1: _jyQypfJZvzwEBtd-UUJ7WFp16Q.roa (hash: izhnazNeKvtnL76Htwicfo/+b153O8jjCPIw/x6B0CI=)
2: hggCY9xXAxYNlv_vEuxeilJR7KY.crl (hash: 8bdjaf5o9yI5EJu7+ZIfN5uV4m5uiKP6PYthfocwi9s=)
3: lOqOjjEaxzWeb5pHUx6iX-eYmX8.roa (hash: WtwzQti38pa09U4PS1k9X/tQpZJ23T8DdI17kBh4BC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/hggCY9xXAxYNlv_vEuxeilJR7KY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/hggCY9xXAxYNlv_vEuxeilJR7KY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hggCY9xXAxYNlv_vEuxeilJR7KY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:ec:29:4d:b7:a6:9c:77:5f:7a:ed:d5:1a:61:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86080263dc5703160d96ffef12ec5e8a5251eca6
Validity
Not Before: Oct 28 09:01:09 2026 GMT
Not After : Oct 29 09:01:09 2026 GMT
Subject: CN=dd1928dfdf4c5da96cabe3287338095c5670d44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:8d:db:4b:64:ce:c2:cd:fe:ad:82:b9:43:
ba:44:95:97:1a:97:3f:79:7f:04:3f:9b:2e:a2:28:
5d:3e:a8:18:cf:d1:27:32:39:1b:4d:6a:d0:28:d2:
0b:a8:46:40:f1:17:97:12:a6:fd:a5:60:09:57:a6:
2d:3a:51:80:5a:23:d8:63:c4:a4:bd:e1:9a:e3:54:
fa:ec:79:54:ed:06:47:f2:4a:46:89:ad:a8:c0:09:
80:b1:76:56:cc:27:5c:77:6b:64:c2:19:38:d8:33:
b8:f7:d8:8b:04:c7:00:f0:95:64:d8:9d:7b:96:20:
44:c1:63:cd:0e:49:ea:88:94:f5:28:b5:c4:bf:7d:
ce:45:1e:77:d9:cd:58:7f:96:c4:f5:28:f9:a5:cf:
92:d1:9f:c5:4f:59:63:0a:f6:c3:c8:11:30:4f:8a:
26:2a:48:0f:d9:cd:1e:74:25:53:dc:5a:1d:a2:9a:
bc:37:52:a7:53:b1:5f:f9:82:32:83:3a:b3:ec:1e:
0a:5f:cc:44:d1:a5:59:22:a1:04:fa:54:1f:8c:fb:
5f:7f:a3:bb:29:70:5d:6b:dc:f1:53:c2:49:d3:c6:
a4:f2:21:50:f2:25:9c:4b:ab:81:6f:cf:8e:0f:67:
a1:0d:68:0a:9f:c2:ea:3e:15:08:a3:1d:33:68:77:
b0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:19:28:DF:DF:4C:5D:A9:6C:AB:E3:28:73:38:09:5C:56:70:D4:4A
X509v3 Authority Key Identifier:
keyid:86:08:02:63:DC:57:03:16:0D:96:FF:EF:12:EC:5E:8A:52:51:EC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hggCY9xXAxYNlv_vEuxeilJR7KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/hggCY9xXAxYNlv_vEuxeilJR7KY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/hggCY9xXAxYNlv_vEuxeilJR7KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:37:f6:ce:04:02:7f:82:78:1e:a6:34:19:7c:65:c4:75:27:
58:c4:c1:31:b8:30:4c:33:a8:48:b7:de:7d:32:ec:de:75:01:
1d:ff:73:1b:7a:93:af:d1:66:8f:33:9c:79:a8:80:c0:80:65:
25:1e:42:08:7b:82:a3:c7:44:7f:f6:44:3d:4e:ac:20:a0:54:
ec:01:f2:45:85:ee:50:45:b6:a1:9c:64:a7:fc:57:94:eb:d4:
30:8d:d4:e8:f0:a9:7c:bd:17:38:5d:af:8a:ba:68:b4:d5:f6:
57:3f:bd:0d:65:23:96:d2:ef:cc:1e:e2:7d:ba:d1:f5:35:cf:
65:e6:bb:26:d1:c8:ea:3a:13:90:44:99:10:50:1b:f5:80:66:
07:55:7c:0e:e4:2d:f9:7b:5a:5a:a5:27:52:27:c4:51:6e:d1:
1d:ec:c0:1f:e1:90:6c:ce:54:bd:c5:72:27:d1:87:9c:fe:80:
0a:3f:e2:f5:49:80:cb:a9:3f:21:a1:9b:40:b0:75:37:33:68:
d4:1e:a8:08:c6:ce:98:40:17:3f:fd:25:1b:97:86:aa:0e:6e:
13:e9:8d:70:5c:83:8f:4c:d4:4b:5c:fa:40:b2:17:ee:e4:10:
76:20:95:3b:61:39:b2:55:1e:a1:23:91:b6:f4:4d:b5:ef:9c:
36:3a:5d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:13:03 2026 by rpki-client