Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
File: hGzXvBkUIFasr5VzyqGvjehxgVY.mft (raw, json)
Hash identifier: Vb1sW8ZkEjG3CaT9rqNrbNj/QhLWC9oJdUXXR6Fu6bI=
Subject key identifier: 3F:6B:A8:BF:71:93:C6:97:A6:B7:F0:F4:30:D6:A7:20:F3:40:DE:97
Authority key identifier: 84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
Certificate issuer: /CN=846cd7bc19142056acaf9573caa1af8de8718156
Certificate serial: 01A12CFBC85289FAD15123236B720230F954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
Manifest number: 05E8
Signing time: Sun 11 Oct 2026 22:01:00 +0000
Manifest this update: Sun 11 Oct 2026 22:01:00 +0000
Manifest next update: Mon 12 Oct 2026 22:01:00 +0000
Files and hashes: 1: hGzXvBkUIFasr5VzyqGvjehxgVY.crl (hash: l+XriR0tLvADafYHJ4+U25Itv82JMPSQBC1/nbnmcFM=)
2: uoOfCKkTnW2JzFJRrSJDBT5bTzc.roa (hash: jS+d7zXHIn78Fh4bwNdoOL3BSqCzsjrWEmoa3PN6ng4=)
3: wOpotjYca3hIDPpRRC4dKRWIXpY.roa (hash: ILk18RM+vK4poNQ402hCagvt+4XgooFqtYGnOzDde5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:fb:c8:52:89:fa:d1:51:23:23:6b:72:02:30:f9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846cd7bc19142056acaf9573caa1af8de8718156
Validity
Not Before: Oct 11 22:01:00 2026 GMT
Not After : Oct 12 22:01:00 2026 GMT
Subject: CN=3f6ba8bf7193c697a6b7f0f430d6a720f340de97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:36:12:a6:bc:ab:7d:75:21:5e:73:d9:38:e0:
69:f3:04:c0:09:e8:6e:05:70:a9:b4:47:52:82:6f:
e2:d0:ad:7a:5f:f5:70:4f:cd:d8:8c:21:04:96:88:
b9:c0:e7:f0:be:5f:18:14:97:a5:1d:b6:ab:11:42:
df:40:30:4f:d7:ff:2c:35:7b:6f:b0:2b:ab:a0:6f:
14:f4:50:6c:18:9f:ff:05:02:b8:91:01:46:05:01:
ae:e6:88:cd:0b:6d:99:fe:dc:38:ff:9a:5f:a8:e9:
28:d1:2e:ff:eb:04:b4:ee:f2:93:ad:3b:5a:18:42:
84:63:97:57:2a:40:93:be:17:04:3c:61:24:55:ef:
c4:f9:15:28:47:c3:22:94:43:e9:87:68:b8:d6:b6:
11:5c:31:e4:6e:c8:30:07:1e:87:17:92:53:17:1b:
96:2a:5f:ed:5b:e0:9e:0c:a6:33:a9:80:ff:1c:4c:
4c:e5:6c:ca:ff:49:a6:02:e2:1a:f3:ba:e0:12:25:
06:5f:c6:6c:d2:e9:88:f4:5d:17:8b:dc:b2:63:5c:
4f:2c:aa:a1:e7:30:51:33:9b:f0:09:49:3d:6c:bc:
98:a2:60:54:db:3f:55:a3:df:ed:a9:d7:55:bc:bf:
e1:56:3b:15:94:07:8b:03:02:16:10:78:34:70:4b:
5f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6B:A8:BF:71:93:C6:97:A6:B7:F0:F4:30:D6:A7:20:F3:40:DE:97
X509v3 Authority Key Identifier:
keyid:84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d1:28:49:a2:5b:46:9c:9e:36:b1:95:68:ba:e9:6e:a8:ec:
df:c2:71:02:cd:ab:96:c7:16:5f:01:cb:39:65:af:7d:e8:e6:
76:2b:f4:2c:58:36:e1:11:04:16:cd:62:7b:ad:86:d2:cb:4a:
05:f6:83:05:59:78:46:cb:a6:7e:41:ba:cd:99:4f:74:b4:1f:
7a:74:09:73:7f:7f:3f:ae:50:ef:be:ec:f8:9c:08:b7:31:93:
66:0b:8e:30:ae:34:81:a7:98:7f:f8:ed:d7:88:7d:bd:72:16:
58:50:cc:80:31:84:6b:44:12:77:02:ef:f6:51:ba:b7:bc:ba:
1e:ea:92:51:6e:55:fe:50:75:26:ad:03:bb:14:c1:35:aa:70:
5f:0e:f2:6f:c6:9b:55:8e:79:fe:48:6a:81:78:fc:cc:76:c8:
a1:c9:a8:05:85:fc:37:24:8a:99:8c:1c:a2:7f:f9:3a:94:da:
4b:23:49:ce:6f:39:00:30:99:14:d6:75:86:3f:4b:89:a6:5f:
de:c9:65:bd:9f:2c:b4:2a:df:1f:40:76:a7:ed:7f:93:be:6b:
a5:a5:42:66:93:f2:3a:3b:45:b0:37:e7:ab:a1:91:62:4d:cd:
6f:e7:69:8f:5d:2f:ee:1b:99:05:88:b3:59:a9:98:d4:92:b3:
d4:5c:b7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:10:17 2026 by rpki-client