Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
File: hhgk6bM0tNUOg8Sd-boZziW-gZM.mft (raw, json)
Hash identifier: Fgfn343V7aXvfLEz4d61U/4TkRftFdLdNJmpexAOw60=
Subject key identifier: A4:47:4A:D6:D0:E6:B9:D7:19:64:36:C6:81:FF:73:75:5C:15:36:89
Authority key identifier: 86:18:24:E9:B3:34:B4:D5:0E:83:C4:9D:F9:BA:19:CE:25:BE:81:93
Certificate issuer: /CN=861824e9b334b4d50e83c49df9ba19ce25be8193
Certificate serial: 019D9BF528A2AF7574C9725AEF90E82E3901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
Manifest number: 9A
Signing time: Fri 17 Apr 2026 15:00:28 +0000
Manifest this update: Fri 17 Apr 2026 15:00:28 +0000
Manifest next update: Sat 18 Apr 2026 15:00:28 +0000
Files and hashes: 1: GtDxiNHeYhaopEz7nkSxj4Uwws0.roa (hash: xLrL13cfFz66vUPjaMWCOfLQuaEtZXy6c6DNYKUuXaU=)
2: dTkGUafttT6-8GpfaFN-_DQscaU.roa (hash: go6kdC6kI78p8haD5O5Bqq/07FTC8kyj7opP+hvQavw=)
3: hhgk6bM0tNUOg8Sd-boZziW-gZM.crl (hash: RHT3td+cgOmEzsYd0/nEwX+pJWFI6+vMjh6K65PJVq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:28:a2:af:75:74:c9:72:5a:ef:90:e8:2e:39:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861824e9b334b4d50e83c49df9ba19ce25be8193
Validity
Not Before: Apr 17 15:00:28 2026 GMT
Not After : Apr 18 15:00:28 2026 GMT
Subject: CN=a4474ad6d0e6b9d7196436c681ff73755c153689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e1:a4:c0:8e:47:88:4c:2e:b2:b0:49:d3:33:
e5:44:c1:5a:c7:d6:7c:90:f8:9f:bd:ed:3f:96:d8:
27:bb:79:7c:79:4d:8e:e7:8f:a6:4d:be:88:cf:06:
bb:ba:6b:24:4b:e5:eb:d4:f1:0f:2b:38:ea:65:06:
58:ea:f6:1c:68:fa:7a:ee:e6:85:84:d3:de:2b:f9:
d2:64:50:7b:e4:ef:d2:ec:8d:53:be:2c:12:2b:6d:
16:39:4f:c0:c6:75:39:9b:18:30:4a:43:24:f3:59:
16:3f:c8:dd:94:ee:80:b1:f5:a4:50:ee:7e:06:7f:
c5:90:22:93:99:9f:1f:f1:8c:0d:fa:d6:0b:75:4b:
1d:60:ae:26:bb:76:5a:31:b3:e2:77:73:56:35:ac:
18:e3:a4:70:b3:f6:68:0e:2b:8f:2b:2b:10:8d:5f:
fa:31:18:8d:44:58:14:1c:1c:2a:0e:b4:17:06:72:
d1:30:be:3b:6e:99:c6:99:3c:f7:d3:12:c6:19:7a:
0a:72:aa:84:1d:66:59:7a:b2:d8:f6:c2:2f:96:8a:
33:2f:6d:42:43:d6:24:5d:2e:3a:3b:80:e4:41:45:
cc:ff:25:d1:85:f4:65:2c:67:83:85:6f:18:a1:34:
f4:d8:55:c1:cf:3d:57:f2:97:8c:56:22:45:8c:a7:
b0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:47:4A:D6:D0:E6:B9:D7:19:64:36:C6:81:FF:73:75:5C:15:36:89
X509v3 Authority Key Identifier:
keyid:86:18:24:E9:B3:34:B4:D5:0E:83:C4:9D:F9:BA:19:CE:25:BE:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:fb:b8:42:0b:3e:3f:fc:02:a3:5d:0f:68:67:93:49:38:b7:
cf:fd:1d:9c:06:a7:f2:c2:20:17:3e:31:1b:08:5a:ec:16:4a:
c8:95:db:9b:30:39:76:4c:5b:fa:17:70:88:3a:c8:91:32:3a:
75:8f:56:6b:5d:23:bd:23:e9:a1:7b:bb:5f:74:50:d7:bd:61:
71:04:0e:34:03:53:ec:33:0e:65:a0:14:4b:de:dc:3d:1d:93:
e9:80:40:f2:68:9d:6e:b4:3e:3d:09:eb:2e:19:df:bc:68:3d:
63:c6:56:69:6f:dc:c1:cf:b1:70:92:8c:fa:a2:66:c3:20:e9:
2b:ef:8d:e1:41:c2:b0:ff:b8:9e:7f:94:92:17:d5:05:7d:07:
f8:56:b4:a7:d2:e5:bb:7b:8f:59:a8:95:2f:70:06:a4:2d:61:
3a:b1:fb:50:d8:d2:4a:f7:2c:0a:e5:6f:7d:4d:7e:22:b8:6d:
23:4d:e8:96:41:1d:e6:75:26:13:de:fd:48:d0:0c:a0:4b:c4:
e0:8b:75:26:e5:a6:5b:59:19:79:46:ff:75:3d:d0:ea:f4:2e:
b0:b9:27:99:e2:57:e4:2a:a9:31:40:e0:03:fa:19:f1:4a:a1:
e0:0e:9b:f3:88:30:b7:e5:2c:fe:81:2f:fa:7d:3c:e3:ff:be:
95:13:80:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:37:08 2026 by rpki-client