Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
File: HgUGRdac54HkkMDzxJle5tTmB4s.mft (raw, json)
Hash identifier: OdS2AunQrv0edh5nWwgYzMVuTHOJeiAsUuKo3RKHS2c=
Subject key identifier: 5D:44:1E:2E:C9:31:1E:AA:C5:A5:EE:7E:B7:A1:CE:0A:10:38:0E:16
Authority key identifier: 1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
Certificate issuer: /CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Certificate serial: 019CAF7E9F53FE71DEA721C77A5B6066B7AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
Manifest number: 0A22
Signing time: Mon 02 Mar 2026 17:00:36 +0000
Manifest this update: Mon 02 Mar 2026 17:00:36 +0000
Manifest next update: Tue 03 Mar 2026 17:00:36 +0000
Files and hashes: 1: 5IFZ-RmjX0QAE3XiRGeeU_gKW5s.roa (hash: x/Xn+2RJGz1zNEVIxZWPaaeHvskHVXZOixdJtJ5ELpU=)
2: HgUGRdac54HkkMDzxJle5tTmB4s.crl (hash: MzalFSrCEqFYjTbnZkgP2x1wIQkH50MCA3DtPND6eNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:9f:53:fe:71:de:a7:21:c7:7a:5b:60:66:b7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Validity
Not Before: Mar 2 17:00:36 2026 GMT
Not After : Mar 3 17:00:36 2026 GMT
Subject: CN=5d441e2ec9311eaac5a5ee7eb7a1ce0a10380e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:88:ad:b2:26:1c:d8:6e:22:3a:28:27:67:
37:19:e6:80:1d:af:11:41:8f:9a:ad:10:5d:ca:0a:
b5:a9:2a:c6:dc:5b:39:10:79:af:02:94:e9:fb:da:
aa:99:86:f4:ae:c5:47:3a:19:ad:08:a8:e3:64:1e:
81:23:b1:22:92:69:aa:96:4f:00:ac:fd:22:2d:67:
09:89:7a:28:d1:f4:c0:f2:ac:6c:69:e1:78:82:e0:
a1:62:0d:f6:56:27:e7:0d:3a:47:09:50:b0:fd:46:
2b:12:16:5b:c5:d6:4b:41:f9:71:40:eb:45:8e:09:
5c:07:c3:f7:be:a2:85:20:cb:d3:56:5b:77:29:9e:
cb:e0:4d:5a:fc:98:a2:51:0f:1b:f1:e5:4e:a6:c9:
01:58:df:5a:35:0a:f6:b1:51:26:d8:38:90:06:55:
6d:80:8a:58:73:80:65:15:2a:75:74:73:8c:27:c6:
b6:ad:a0:11:40:95:0a:ac:47:f8:f9:93:b0:fa:b4:
de:b5:f9:b1:a0:07:c2:7d:5e:bb:d2:da:38:92:82:
8e:7e:80:41:f5:f4:dd:f2:2a:99:8a:b6:fa:cc:73:
4c:39:a7:fa:0c:14:4d:de:4a:8a:0c:05:65:36:98:
91:79:3e:78:34:d9:dc:8e:06:3a:b3:de:ae:4f:94:
f6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:44:1E:2E:C9:31:1E:AA:C5:A5:EE:7E:B7:A1:CE:0A:10:38:0E:16
X509v3 Authority Key Identifier:
keyid:1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1d:0e:b1:4f:22:01:6f:be:6a:30:dc:b9:3d:0d:6c:c6:73:
1c:4a:a8:f6:10:e8:5c:6d:3f:52:3e:3c:08:19:6a:63:c2:2d:
f7:81:32:d9:bf:a5:12:ec:d1:b1:fd:a1:d5:ca:c8:57:34:6c:
df:17:2b:08:c3:79:ac:bc:08:e2:5b:26:20:88:b2:57:48:0b:
e9:b4:1f:70:ea:50:0c:57:59:27:b2:2c:ec:b4:95:a0:f2:0b:
61:37:f2:3d:02:94:62:96:f0:4b:b7:2d:3d:3a:cc:6e:ae:43:
b8:92:06:0f:1e:a8:9c:56:e7:c4:3f:31:11:16:01:52:04:61:
fe:30:ed:c1:3a:e6:f8:bc:73:76:6c:cc:7a:b3:33:df:41:a0:
3f:da:cf:02:b5:5d:71:ed:6d:66:6a:ef:c2:62:13:70:f2:7c:
6a:27:2a:42:1d:ab:ff:78:70:f0:5a:2e:f7:32:2d:8e:57:c8:
0c:90:7f:2a:5f:08:f5:3b:e5:14:3d:cd:3f:b6:f4:85:04:9c:
8e:2a:d6:ba:26:2e:ec:4f:22:59:c5:6e:11:bb:86:71:cd:02:
0b:ca:24:3d:3f:35:5a:d4:2f:df:89:1e:a4:16:c0:00:d9:c7:
26:30:50:18:55:f6:13:d6:8a:38:79:08:7c:a4:4f:a9:a3:ae:
9e:cd:4b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:57 2026 by rpki-client