Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.mft
File: hiGwt9-gp4iPde_yDzIUWgs_DdU.mft (raw, json)
Hash identifier: MPmC1gTzB0XgpJg4m3TMRyphQCcZWtYjXG2RavBO3LM=
Subject key identifier: D2:78:C2:4A:C8:5C:84:E3:7B:65:28:7D:7E:BF:14:99:A8:9F:8F:E9
Authority key identifier: 86:21:B0:B7:DF:A0:A7:88:8F:75:EF:F2:0F:32:14:5A:0B:3F:0D:D5
Certificate issuer: /CN=8621b0b7dfa0a7888f75eff20f32145a0b3f0dd5
Certificate serial: 01A14271A67691F123E573F3DAFF0C4C3998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiGwt9-gp4iPde_yDzIUWgs_DdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.mft
Manifest number: 1AA7
Signing time: Fri 16 Oct 2026 02:01:46 +0000
Manifest this update: Fri 16 Oct 2026 02:01:46 +0000
Manifest next update: Sat 17 Oct 2026 02:01:46 +0000
Files and hashes: 1: hiGwt9-gp4iPde_yDzIUWgs_DdU.crl (hash: Kpq9GvN5jq6CWK1+nKDPm9jzVx12558lFnH/Uy4BPLg=)
2: kLUM1YAOMcHfG5kPB5ctMeQ6zO4.roa (hash: wZEOFTFIMct/33jsnIoNoec+GVySts9zmn8n8Vg4eB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hiGwt9-gp4iPde_yDzIUWgs_DdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:71:a6:76:91:f1:23:e5:73:f3:da:ff:0c:4c:39:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8621b0b7dfa0a7888f75eff20f32145a0b3f0dd5
Validity
Not Before: Oct 16 02:01:46 2026 GMT
Not After : Oct 17 02:01:46 2026 GMT
Subject: CN=d278c24ac85c84e37b65287d7ebf1499a89f8fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:89:40:9f:ae:40:3d:56:9b:aa:cf:50:b2:64:
e3:b6:d4:50:51:5e:9b:eb:b7:1c:c0:f1:5c:da:bb:
79:6d:98:9e:79:34:d4:38:69:1e:c4:34:16:cf:a3:
1a:0e:ba:b6:ba:2f:25:ea:cb:f0:c5:a3:eb:af:e0:
e1:13:80:64:a6:3d:a4:42:a0:a8:b8:ee:0e:19:9b:
61:83:b9:40:26:75:94:8a:c5:47:9f:c8:18:9c:1c:
ae:4f:66:89:08:50:65:59:ee:92:88:59:5b:b6:57:
f0:3c:b9:f9:ce:7e:36:2c:b3:3e:5d:f3:a9:f6:75:
c5:20:13:a1:ef:ea:8b:b6:cd:2a:38:55:2f:2b:02:
f6:1c:4f:51:c2:52:04:cf:af:82:ed:a4:7c:2e:34:
e3:14:1b:68:d5:c0:95:7b:c1:fb:e2:30:6e:91:e4:
e7:b0:ab:34:f3:c7:1f:cb:7e:c0:5e:b7:d5:33:ff:
c6:b9:92:87:28:0e:82:40:86:48:90:af:82:7b:2f:
c7:3e:6f:43:a3:3c:ec:a5:28:54:15:d2:ff:e2:2b:
e2:70:d9:ee:1d:90:7f:df:c0:f5:71:f9:00:42:1e:
9c:6e:91:1b:ae:b1:3f:37:38:86:76:2c:12:32:5e:
35:a8:f7:f9:65:e2:f7:ff:7e:43:2b:f7:34:ec:aa:
f3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:78:C2:4A:C8:5C:84:E3:7B:65:28:7D:7E:BF:14:99:A8:9F:8F:E9
X509v3 Authority Key Identifier:
keyid:86:21:B0:B7:DF:A0:A7:88:8F:75:EF:F2:0F:32:14:5A:0B:3F:0D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiGwt9-gp4iPde_yDzIUWgs_DdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c9:a7:d3:b1:0d:63:9c:b6:94:e8:70:e1:15:23:f7:cc:76:
93:70:18:1f:f6:7c:3a:4f:be:ac:f9:4a:4a:3c:03:a3:25:e9:
4c:33:a1:05:69:94:86:29:7c:48:64:05:47:bd:84:6d:ba:0a:
72:36:a0:c0:3c:74:7d:9a:fe:bb:24:0b:c1:6d:8b:83:2d:dd:
b1:70:f8:62:2d:65:9b:a9:94:26:94:76:4e:5c:cb:5a:48:54:
03:1c:3b:2f:a2:1e:e2:8b:c3:a0:d6:0b:f3:ae:2f:0f:13:0c:
d7:63:68:20:b5:05:51:5c:f2:80:44:a7:9c:c5:23:4b:bf:ff:
8d:82:30:78:8b:1c:ed:01:55:d2:eb:b9:47:65:6d:86:51:3d:
24:70:40:a6:5e:e8:f8:90:b0:fa:a4:20:4e:9b:7b:90:26:69:
3f:a2:17:7e:5d:45:f8:c3:eb:be:94:26:bd:27:3d:56:ad:3e:
d3:91:48:4a:dd:5f:21:4c:01:73:03:3d:f3:7f:2b:0f:d7:94:
a5:68:85:53:f4:cd:13:32:58:c3:0f:40:26:89:9b:f3:df:11:
ed:da:7b:8b:18:86:3b:2f:10:8b:a0:a3:12:ce:66:f4:ef:5a:
29:ac:13:97:97:eb:81:af:85:d9:32:f7:ec:88:6c:85:ff:88:
fc:de:bf:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 11:33:37 2026 by rpki-client