Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft
File: hugNGBwlPRTaHgupwdVmb1Ym1YE.mft (raw, json)
Hash identifier: +2iCJJ8ND5RoUFZYXIsHaMOt7sOooqIsSJGXg6/Yn+Q=
Subject key identifier: A7:B0:61:0A:AA:E9:60:01:2F:F1:5C:4F:BF:C8:C4:95:AD:42:51:EF
Authority key identifier: 86:E8:0D:18:1C:25:3D:14:DA:1E:0B:A9:C1:D5:66:6F:56:26:D5:81
Certificate issuer: /CN=86e80d181c253d14da1e0ba9c1d5666f5626d581
Certificate serial: 01A094D906B19EDC9D214F8DB1AE30DDE06D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hugNGBwlPRTaHgupwdVmb1Ym1YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft
Manifest number: 0472
Signing time: Sat 12 Sep 2026 09:00:46 +0000
Manifest this update: Sat 12 Sep 2026 09:00:46 +0000
Manifest next update: Sun 13 Sep 2026 09:00:46 +0000
Files and hashes: 1: Q0BAQv9Y2KCGzUH12IIJCejGo9E.roa (hash: ZXRjv/WoTKdvC9GZzFdW6WbAOuxyKMhJM7y9cqTP30I=)
2: hugNGBwlPRTaHgupwdVmb1Ym1YE.crl (hash: cN67f4KqgH7E1TGOzmLr5Y2dyMLd0927skegg66OFKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hugNGBwlPRTaHgupwdVmb1Ym1YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:94:d9:06:b1:9e:dc:9d:21:4f:8d:b1:ae:30:dd:e0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e80d181c253d14da1e0ba9c1d5666f5626d581
Validity
Not Before: Sep 12 09:00:46 2026 GMT
Not After : Sep 13 09:00:46 2026 GMT
Subject: CN=a7b0610aaae960012ff15c4fbfc8c495ad4251ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:74:55:12:a4:35:78:e4:bd:4c:06:11:c2:14:
de:bd:1b:b0:0e:55:ac:c6:a4:fc:b0:3a:6f:93:b5:
19:a2:81:54:45:47:8a:d9:bd:b0:bc:7a:01:d0:96:
ba:2e:f6:fe:b2:60:36:5f:c5:f4:6d:ba:be:cc:32:
b9:e6:7f:79:c1:6c:22:f1:f1:8d:fe:a5:ad:93:69:
a4:fa:98:ac:f5:d8:22:7f:b4:e8:b5:2d:b3:a1:3a:
fe:a5:08:66:b6:01:7c:70:f6:b7:2f:ee:54:3a:41:
a4:70:9c:bd:f7:a0:e4:1c:0f:4d:03:b6:6c:fa:dd:
e8:7a:73:e0:ae:ec:0d:c0:83:bb:81:f8:97:5d:36:
ae:49:fe:59:46:9d:54:ab:51:f6:fc:0e:42:fe:38:
c2:be:1b:c2:b1:01:c4:88:50:51:ee:e4:d9:5f:8f:
62:07:9d:85:88:50:97:49:51:90:77:a7:7f:44:37:
d7:4b:87:6a:78:fa:5a:d9:4d:5e:5e:a6:c3:3b:52:
e3:d6:22:38:74:e5:29:1a:0d:db:e8:39:92:be:e2:
b3:79:f4:01:c1:92:34:21:c0:02:13:f6:ea:c9:c8:
d6:83:c4:4b:1c:64:34:b4:11:ce:26:e0:9c:c3:7d:
eb:2f:2f:cf:69:f4:e3:e8:ed:e9:92:7e:e9:00:44:
c2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B0:61:0A:AA:E9:60:01:2F:F1:5C:4F:BF:C8:C4:95:AD:42:51:EF
X509v3 Authority Key Identifier:
keyid:86:E8:0D:18:1C:25:3D:14:DA:1E:0B:A9:C1:D5:66:6F:56:26:D5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hugNGBwlPRTaHgupwdVmb1Ym1YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:54:ea:1e:17:e3:e9:92:74:47:05:a0:05:52:ec:77:95:5b:
5a:33:44:db:b8:1c:01:c7:35:c3:f7:a2:d6:1b:42:0b:fe:9b:
a1:91:8b:c1:7c:0c:d4:0b:a7:df:56:f5:a3:e4:cf:4a:23:47:
21:78:b5:83:d0:c5:6d:32:68:44:ff:5b:46:1a:49:38:9b:23:
68:b4:60:39:5b:8c:25:53:ac:6f:20:42:9d:18:c1:bf:9f:45:
93:ec:50:3f:a6:c3:ac:38:59:c4:6a:73:ec:21:0a:db:88:bd:
f1:7b:dd:c6:20:8e:d1:e7:12:a4:5a:82:05:be:7e:e8:1e:00:
15:de:13:4d:e2:66:d2:f5:f3:fd:ef:13:f2:b4:1a:87:25:dc:
60:71:77:0a:81:0e:ad:6b:5f:1a:63:84:f5:7d:f0:53:7c:cd:
5b:e7:6a:ee:7a:9c:61:cc:32:15:8a:6d:e6:70:80:f8:92:bf:
62:ae:10:e9:3a:31:2f:ac:8c:a8:47:c1:a3:c4:3b:a7:9f:cb:
b9:a4:93:f1:12:4c:03:4a:35:38:06:a4:20:e0:62:fd:3a:50:
17:8a:56:34:0b:41:fd:96:4c:c5:21:6c:4d:da:03:de:c2:d0:
c5:ed:68:ba:26:de:0f:10:8d:0e:ca:43:a8:54:30:90:9f:f2:
85:bb:d0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 19:55:40 2026 by rpki-client