
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.mft
File: hiGwt9-gp4iPde_yDzIUWgs_DdU.mft (raw, json)
Hash identifier: k9w8CJdCyx7aBsPaNdYyHG5QW0M/3wEhC1VI9BvADXE=
Subject key identifier: 66:8E:D3:33:2D:B7:10:7D:66:53:A8:99:57:56:A2:47:85:5E:A2:F5
Authority key identifier: 86:21:B0:B7:DF:A0:A7:88:8F:75:EF:F2:0F:32:14:5A:0B:3F:0D:D5
Certificate issuer: /CN=8621b0b7dfa0a7888f75eff20f32145a0b3f0dd5
Certificate serial: 01A001DD0F7049ABA535843CA9B45BF0D230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiGwt9-gp4iPde_yDzIUWgs_DdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 20:00:59 +0000
Manifest this update: Fri 14 Aug 2026 20:00:59 +0000
Manifest next update: Sat 15 Aug 2026 20:00:59 +0000
Files and hashes: 1: hiGwt9-gp4iPde_yDzIUWgs_DdU.crl (hash: sT7viX24nYcxpOF9Otf9v/n+p7ln//upBkbXHImAWSM=)
2: kLUM1YAOMcHfG5kPB5ctMeQ6zO4.roa (hash: wZEOFTFIMct/33jsnIoNoec+GVySts9zmn8n8Vg4eB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hiGwt9-gp4iPde_yDzIUWgs_DdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:0f:70:49:ab:a5:35:84:3c:a9:b4:5b:f0:d2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8621b0b7dfa0a7888f75eff20f32145a0b3f0dd5
Validity
Not Before: Aug 14 20:00:59 2026 GMT
Not After : Aug 15 20:00:59 2026 GMT
Subject: CN=668ed3332db7107d6653a8995756a247855ea2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:d6:56:d8:f9:42:53:09:bb:f8:07:6b:5d:
46:5f:15:41:40:fb:22:47:2a:2a:83:8d:c8:ef:40:
fa:ed:c9:93:24:e7:27:a5:dc:1d:f6:ef:35:fe:37:
f3:73:6b:64:a8:5b:55:63:d9:da:2b:97:1b:e8:83:
40:52:bc:07:61:89:a9:be:f3:65:1b:8b:f2:ea:31:
8a:78:76:ea:f9:89:e1:f0:64:2a:55:9d:8c:c5:e7:
52:e1:61:d6:3c:55:07:be:7a:d2:02:af:15:04:1d:
eb:42:b2:7c:7c:2d:ea:99:77:05:0c:e8:4a:eb:b3:
d4:07:3d:6e:95:dc:1b:fc:52:c0:39:96:5d:a2:0e:
fd:ba:25:72:a7:cb:39:03:fa:8b:70:e9:53:5c:c6:
dd:55:4f:e9:08:d2:d0:8c:6c:23:5e:34:e4:dc:bd:
21:61:81:44:a7:13:92:af:df:dd:2f:49:a7:49:b2:
bd:69:18:93:53:62:d6:c1:ec:ac:7f:2b:20:fb:bb:
70:df:69:82:9d:c9:ba:a9:6a:4c:83:61:70:76:bc:
29:14:c8:a5:df:91:9a:ab:6f:64:34:14:16:86:49:
91:31:ae:74:05:68:34:f8:73:de:d4:80:bb:52:8d:
b6:52:2a:20:43:8d:6d:fc:8e:b7:6c:54:d4:37:df:
c3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8E:D3:33:2D:B7:10:7D:66:53:A8:99:57:56:A2:47:85:5E:A2:F5
X509v3 Authority Key Identifier:
keyid:86:21:B0:B7:DF:A0:A7:88:8F:75:EF:F2:0F:32:14:5A:0B:3F:0D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiGwt9-gp4iPde_yDzIUWgs_DdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f7:68:d2:60:cd:f7:d3:d2:ae:82:cc:35:47:96:e0:97:4e:
ac:06:b8:59:88:6d:9c:4f:ae:68:5d:26:3f:67:ba:8c:a6:9a:
ac:af:be:79:c4:bc:b8:bd:e1:11:43:7e:dd:ea:00:13:b2:90:
af:47:fe:65:46:d5:ea:47:3d:b0:cf:20:b0:a8:77:dc:dc:43:
d9:f5:da:d5:43:49:f7:4c:79:58:59:c6:6b:4b:c0:13:77:33:
24:42:0f:b7:30:f8:87:01:e4:1d:bf:55:79:3a:8d:ce:6d:dd:
76:89:f3:65:63:8a:8f:d5:db:de:5b:7a:f1:45:8a:76:7b:0c:
bc:2a:50:d9:4d:65:78:b1:2f:2e:1c:f9:5a:36:6c:57:75:aa:
34:26:bf:10:95:46:97:c8:53:b5:aa:31:6a:7d:d8:8a:c7:25:
85:d3:0a:a0:66:3e:69:34:15:56:4c:06:61:77:87:a2:bd:40:
ac:94:15:4a:bf:18:52:b8:e3:78:5c:70:63:b7:48:ed:f7:ed:
1b:da:15:ea:42:25:24:eb:81:eb:e9:32:98:4a:ba:d1:27:23:
2a:28:64:e1:32:88:16:7e:59:8d:08:4f:60:fa:8c:db:70:e1:
bc:2c:4a:25:dd:e1:8d:35:c1:cc:04:40:8e:d1:34:e7:f9:5b:
bb:51:69:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:38:10 2026 by rpki-client