Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
File: hhgk6bM0tNUOg8Sd-boZziW-gZM.mft (raw, json)
Hash identifier: fI2U86u2r/JYP9k2H3aFccAqU/13rr4xVLgkmdBtqhM=
Subject key identifier: AC:3D:16:F8:70:25:3B:C1:B2:E8:58:5F:77:DA:7F:86:92:D1:1E:77
Authority key identifier: 86:18:24:E9:B3:34:B4:D5:0E:83:C4:9D:F9:BA:19:CE:25:BE:81:93
Certificate issuer: /CN=861824e9b334b4d50e83c49df9ba19ce25be8193
Certificate serial: 01A121D3BA38694B713499D4A1B9B0D702F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
Manifest number: 026D
Signing time: Fri 09 Oct 2026 18:01:26 +0000
Manifest this update: Fri 09 Oct 2026 18:01:26 +0000
Manifest next update: Sat 10 Oct 2026 18:01:26 +0000
Files and hashes: 1: GtDxiNHeYhaopEz7nkSxj4Uwws0.roa (hash: xLrL13cfFz66vUPjaMWCOfLQuaEtZXy6c6DNYKUuXaU=)
2: dTkGUafttT6-8GpfaFN-_DQscaU.roa (hash: go6kdC6kI78p8haD5O5Bqq/07FTC8kyj7opP+hvQavw=)
3: hhgk6bM0tNUOg8Sd-boZziW-gZM.crl (hash: kCaNcEnQQKCZu8uaziX0mj9O/N4vHQngkdJ3Mqg4oyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:d3:ba:38:69:4b:71:34:99:d4:a1:b9:b0:d7:02:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861824e9b334b4d50e83c49df9ba19ce25be8193
Validity
Not Before: Oct 9 18:01:26 2026 GMT
Not After : Oct 10 18:01:26 2026 GMT
Subject: CN=ac3d16f870253bc1b2e8585f77da7f8692d11e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:48:7a:ea:23:3b:dc:5f:50:ad:2c:1c:04:
68:58:9d:d3:16:fc:85:b9:26:59:d4:1b:77:c9:3b:
3c:da:6b:9a:bb:da:15:cf:99:25:0c:63:51:ef:9b:
dc:e7:9c:74:8d:89:6f:72:0e:19:39:58:e9:27:31:
1e:0a:24:1e:42:bf:cd:28:7b:4e:1d:aa:68:69:ef:
a1:f6:e4:1c:1a:15:1d:38:64:ce:de:16:8e:6f:25:
39:75:c1:05:e5:71:8c:8c:c6:1d:db:be:05:06:4a:
db:96:e2:86:39:40:2c:06:2b:bb:b7:0a:3c:36:81:
16:b0:2d:fb:a2:0f:2e:59:21:5d:02:8c:a8:98:d4:
50:90:c4:3c:dd:67:9c:a0:35:a4:80:a0:3b:0d:8c:
e4:9a:ad:5e:95:fb:4b:fb:51:f4:54:14:52:40:c9:
58:9e:5b:40:1d:33:35:fd:3d:84:c3:34:fa:fe:7f:
ca:f2:24:29:0d:5d:60:f5:0b:f2:37:09:ab:f4:d1:
03:06:a4:7c:46:67:cc:29:2b:77:8f:c8:12:df:22:
2a:de:65:92:cc:45:4a:21:a7:51:c6:08:69:fb:14:
a5:be:b5:21:f7:f7:d8:6b:23:b0:4c:69:e8:d4:2d:
a5:e4:85:1c:a1:a9:c8:f2:b3:33:b2:c5:26:fd:7d:
d6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3D:16:F8:70:25:3B:C1:B2:E8:58:5F:77:DA:7F:86:92:D1:1E:77
X509v3 Authority Key Identifier:
keyid:86:18:24:E9:B3:34:B4:D5:0E:83:C4:9D:F9:BA:19:CE:25:BE:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:40:e2:03:4a:82:8e:fc:7e:e6:3d:b4:02:1f:ab:60:e6:83:
55:b2:e4:74:8a:f2:fa:d1:85:3d:dd:3e:77:4e:e1:5f:44:95:
a2:4d:b1:33:c3:f9:38:a1:63:f9:e3:d6:59:e8:ac:60:1e:65:
17:c2:7a:c6:c0:01:1e:a6:c2:37:3e:6e:70:86:66:3c:db:4c:
d8:54:eb:2f:48:2a:ec:4d:e6:82:7f:dc:04:ea:5e:dc:cf:95:
3d:d7:19:9c:c3:8a:02:6d:16:37:a7:1d:50:ad:9a:62:d0:5a:
ab:26:f7:e0:7f:3d:e1:83:e9:61:7a:35:b7:71:67:de:42:09:
5f:c6:df:b3:4d:86:db:50:a7:20:2f:7b:37:65:6e:29:8e:80:
03:f2:09:1d:62:a8:4e:ad:a8:3f:56:7e:73:9c:c8:73:1b:d9:
39:27:39:d2:bd:a2:82:ad:c8:59:16:7e:02:17:13:1f:fb:be:
73:03:d9:03:e9:8e:40:98:a3:e3:1c:2c:e6:1a:54:c3:3d:6c:
18:55:3f:30:97:58:9b:e0:ef:8f:0b:92:25:40:12:6b:01:49:
6a:82:a9:a6:6a:77:50:48:cf:4e:fe:13:bc:4e:52:66:b8:e0:
69:bf:b5:4b:a6:66:30:89:a5:60:ac:b6:14:4c:ac:db:4a:22:
ab:88:05:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:36:39 2026 by rpki-client