Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
File: HgUGRdac54HkkMDzxJle5tTmB4s.mft (raw, json)
Hash identifier: LYJa3mAamwhkYMGHk+SYWV0jAp1hfttqtntnEUiH9Sw=
Subject key identifier: 6F:DC:72:64:4F:12:D3:FD:0B:D4:76:75:F4:8F:87:C5:5B:9A:D6:2C
Authority key identifier: 1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
Certificate issuer: /CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Certificate serial: 019D992B45C7935AB29C493CF80A705BBA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
Manifest number: 0A9B
Signing time: Fri 17 Apr 2026 02:00:43 +0000
Manifest this update: Fri 17 Apr 2026 02:00:43 +0000
Manifest next update: Sat 18 Apr 2026 02:00:43 +0000
Files and hashes: 1: 5IFZ-RmjX0QAE3XiRGeeU_gKW5s.roa (hash: x/Xn+2RJGz1zNEVIxZWPaaeHvskHVXZOixdJtJ5ELpU=)
2: HgUGRdac54HkkMDzxJle5tTmB4s.crl (hash: Ra4pM9gVlCOm/5I9DImCPIrDzHugLBEVkhIcLbLXfU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:45:c7:93:5a:b2:9c:49:3c:f8:0a:70:5b:ba:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Validity
Not Before: Apr 17 02:00:43 2026 GMT
Not After : Apr 18 02:00:43 2026 GMT
Subject: CN=6fdc72644f12d3fd0bd47675f48f87c55b9ad62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d5:00:6c:5a:d1:53:c8:73:46:87:1a:e2:d5:
b3:4b:7f:4b:61:d9:75:33:62:8d:dc:ed:d3:e5:7b:
06:e0:f8:11:3f:90:2a:a5:27:38:a5:60:7a:e0:10:
28:8b:ca:27:a4:d7:a4:e3:44:3a:8c:d6:14:c4:85:
d5:97:3c:b0:3f:76:d3:88:0b:98:0a:e7:23:6b:e6:
25:a4:fc:37:f3:6c:d4:a0:f2:0c:5b:84:2d:91:28:
c9:93:09:02:9c:ee:2e:95:44:07:20:21:91:16:93:
81:ff:1f:9c:90:db:dc:63:a6:eb:be:71:0a:ae:fe:
06:05:d7:3e:66:27:43:f5:6d:1d:6a:49:d7:be:42:
6d:2c:8c:41:72:45:48:3a:b5:75:09:d8:33:4c:a6:
04:d9:c1:c8:c8:3f:d6:67:7e:26:3a:03:69:bd:1b:
9d:6c:1e:f3:b7:98:da:32:fa:db:cb:6b:76:fa:f7:
ce:db:1e:3f:9b:36:69:a2:c2:57:bd:5e:9a:df:0b:
74:05:a2:82:58:70:af:bb:fc:3b:2f:58:08:26:a6:
b6:be:7e:50:9c:11:09:b5:a5:fd:cb:6a:85:5a:3d:
2e:0f:4b:b1:43:ac:4e:35:fa:0e:53:aa:70:2c:f9:
a3:81:7a:85:b9:0f:c9:b1:3e:8d:2e:6a:18:a0:30:
e0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DC:72:64:4F:12:D3:FD:0B:D4:76:75:F4:8F:87:C5:5B:9A:D6:2C
X509v3 Authority Key Identifier:
keyid:1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:55:0b:45:1b:ac:27:6d:8e:cd:7e:c9:2f:c8:60:87:e9:27:
bf:4f:71:ca:b8:5e:58:df:44:1b:f8:56:f6:05:1c:e2:ef:e3:
46:eb:73:3b:63:93:d4:59:6c:29:69:6d:32:c4:04:72:21:75:
d4:09:5f:2c:f6:0e:9d:13:32:de:66:fb:98:2e:d1:f6:12:10:
af:05:ba:01:e4:c5:1d:d9:65:54:c5:4f:f5:3d:1d:7a:d1:3e:
c4:4e:53:55:88:ae:77:e4:30:0b:fd:d0:f5:54:e6:80:29:4a:
51:b2:d9:13:d6:4d:97:d4:24:fe:ff:34:9a:7a:9f:74:43:31:
98:86:5b:b6:15:d5:19:99:bf:0f:78:b8:81:64:6f:9a:ba:39:
76:58:b1:42:a8:44:b6:d6:bb:b2:8e:b3:19:6a:9f:4a:9a:37:
5f:3d:20:87:0a:69:96:a0:fb:e3:8b:72:11:44:e9:21:b1:b5:
55:78:95:c4:9b:26:75:c8:53:88:d1:af:76:b7:24:ba:61:6b:
da:a0:20:35:83:cd:67:18:95:3a:75:02:05:1a:53:9a:cb:3b:
84:20:da:80:a8:9d:95:ac:97:cd:a1:48:6e:ae:b9:60:ab:cb:
da:3e:c0:af:83:26:92:11:fb:54:ac:e7:a5:4d:45:2d:d6:11:
ae:32:d7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:09 2026 by rpki-client