Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
File: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft (raw, json)
Hash identifier: uMZogkG3voWQXLJW4kdv3pcsEk6eMlMsEalarKbacEc=
Subject key identifier: F0:49:C0:9F:21:B4:32:71:A4:42:0D:29:F4:D0:C9:FD:43:EB:8C:F2
Authority key identifier: 86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76
Certificate issuer: /CN=8600aaf13d4de9c95b63759ad18636abc8e26376
Certificate serial: 019CAAFD6FB952849B898D8478CA65892711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
Manifest number: 111A
Signing time: Sun 01 Mar 2026 20:01:01 +0000
Manifest this update: Sun 01 Mar 2026 20:01:01 +0000
Manifest next update: Mon 02 Mar 2026 20:01:01 +0000
Files and hashes: 1: 56PKH7YMrBCc9R8BOdvmQYxeMC8.roa (hash: D+8+obK3QpwhAemmlTLP2YO6xby6ajF6Y8nUY7wgtXA=)
2: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl (hash: p1mW221Dw5dKC5Dldldxh4/1ZHJSH7KYE2R3BDIp/QY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:6f:b9:52:84:9b:89:8d:84:78:ca:65:89:27:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8600aaf13d4de9c95b63759ad18636abc8e26376
Validity
Not Before: Mar 1 20:01:01 2026 GMT
Not After : Mar 2 20:01:01 2026 GMT
Subject: CN=f049c09f21b43271a4420d29f4d0c9fd43eb8cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:d1:00:2e:a1:27:95:22:4a:d8:d7:e7:4b:
e0:93:56:8c:b2:1f:21:df:8f:e4:8c:cb:9d:4d:37:
d3:9a:19:9a:85:f2:83:e6:3f:13:7e:eb:96:ad:8e:
c2:2e:f4:18:aa:3d:9d:1e:4b:62:fc:3e:a0:71:fb:
30:a1:bd:9e:95:16:7c:c2:89:42:1c:9b:a3:01:8e:
eb:f4:35:4e:79:51:ce:14:43:79:61:bd:c9:24:73:
74:38:d1:42:18:1e:51:25:47:d4:17:98:b0:db:e3:
bc:d5:16:c4:64:9b:80:40:6e:68:d0:97:97:c3:74:
ce:02:60:18:b9:8a:1d:59:54:30:b7:52:9c:95:3a:
3e:4a:08:07:2c:d3:54:0c:71:e3:48:1b:dc:32:62:
98:4f:c3:98:5f:e7:c7:df:ad:e6:6c:85:53:1d:3d:
5a:10:15:91:bf:cb:b2:70:36:7d:a9:39:f1:c0:aa:
92:9c:5f:b4:d6:10:64:7b:36:c9:36:b9:ac:df:70:
32:ca:68:8d:52:5a:aa:0e:72:19:90:01:14:c8:8a:
cf:0e:09:14:2f:9f:3d:d9:79:e9:16:ad:38:f4:04:
9c:5f:27:c2:2e:fa:3e:17:8e:bf:76:70:f0:da:81:
e5:01:b8:98:d2:81:be:58:10:3d:2a:db:2f:00:13:
e0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:49:C0:9F:21:B4:32:71:A4:42:0D:29:F4:D0:C9:FD:43:EB:8C:F2
X509v3 Authority Key Identifier:
keyid:86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2c:77:39:04:85:ce:b2:a5:ea:46:e5:87:61:4e:46:41:43:
c8:6f:b9:fd:02:8c:63:39:3c:bc:c2:e1:c2:5b:42:3f:bf:b7:
a9:c4:85:67:e7:e2:ac:52:56:07:ec:63:cf:09:3a:21:67:bc:
4d:f7:d5:ac:d5:5f:94:79:ce:70:30:f5:ea:ad:0c:f8:07:9f:
0a:42:50:1f:fb:ed:a0:3a:c7:6f:f1:07:a0:a8:df:32:04:df:
f4:ad:28:1e:19:b1:3f:cb:6d:6c:c5:51:0c:70:63:59:f4:14:
b3:2a:63:6f:84:34:4f:d8:89:47:ae:0f:c3:d2:2a:38:47:1b:
ef:f0:1d:c1:19:f5:43:6f:35:f7:33:9f:55:af:39:cb:f8:53:
ab:f4:18:2d:54:1c:8c:5e:ed:84:e3:19:65:c8:a7:2f:ac:18:
95:6d:d1:5e:cd:76:67:00:98:2e:e5:9f:da:53:f5:bc:31:1c:
cc:c6:c5:bd:b6:e4:3c:f2:a9:ac:d8:37:57:c2:fb:10:aa:e5:
af:e7:08:e5:82:a2:1e:ed:d6:ed:f1:e5:ad:0b:01:fe:16:6a:
bd:f9:bd:9d:a0:17:3b:5a:7c:d9:b8:0e:5c:7f:7f:56:18:1e:
b8:00:45:3a:a3:88:98:1b:8d:a0:82:15:20:1e:80:8d:7d:b8:
d3:e5:0e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:03:54 2026 by rpki-client