Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
File: hhgk6bM0tNUOg8Sd-boZziW-gZM.mft (raw, json)
Hash identifier: kuV0auPp2xJ2AnTTVJZ7oze9k6z7xlfRnBVJK+oOUV0=
Subject key identifier: 82:55:3D:22:FB:62:E0:C6:E0:FC:09:B0:F6:17:19:E2:29:DD:87:F7
Authority key identifier: 86:18:24:E9:B3:34:B4:D5:0E:83:C4:9D:F9:BA:19:CE:25:BE:81:93
Certificate issuer: /CN=861824e9b334b4d50e83c49df9ba19ce25be8193
Certificate serial: 01A11DF651FE76C9EE9FD7990E2E50F5D052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
Manifest number: 026B
Signing time: Fri 09 Oct 2026 00:00:44 +0000
Manifest this update: Fri 09 Oct 2026 00:00:44 +0000
Manifest next update: Sat 10 Oct 2026 00:00:44 +0000
Files and hashes: 1: GtDxiNHeYhaopEz7nkSxj4Uwws0.roa (hash: xLrL13cfFz66vUPjaMWCOfLQuaEtZXy6c6DNYKUuXaU=)
2: dTkGUafttT6-8GpfaFN-_DQscaU.roa (hash: go6kdC6kI78p8haD5O5Bqq/07FTC8kyj7opP+hvQavw=)
3: hhgk6bM0tNUOg8Sd-boZziW-gZM.crl (hash: bXfI5J4roC1l12A/R+IsmzB+YUy4EZt7QIotwKvU8iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 22:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:f6:51:fe:76:c9:ee:9f:d7:99:0e:2e:50:f5:d0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861824e9b334b4d50e83c49df9ba19ce25be8193
Validity
Not Before: Oct 9 00:00:44 2026 GMT
Not After : Oct 10 00:00:44 2026 GMT
Subject: CN=82553d22fb62e0c6e0fc09b0f61719e229dd87f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5d:10:07:9b:41:48:ae:12:eb:f7:59:68:9f:
a3:9b:fc:ac:69:1a:e1:ca:7f:8a:31:a4:8e:15:ce:
e4:2f:b0:11:fe:c5:13:b9:0f:fc:76:43:23:1f:e4:
03:6f:cf:3d:c6:2f:13:1c:cb:40:4e:63:69:81:3f:
38:59:7b:5e:d5:77:a7:f4:bb:b3:ab:50:8c:19:e2:
4b:27:d3:d9:e2:96:2a:87:38:3f:59:c4:de:a7:c8:
25:f3:54:65:a7:a4:e5:69:cb:7c:e6:1c:50:54:72:
de:55:cd:99:fa:af:f6:00:04:33:63:c9:d5:b4:72:
56:ca:81:0d:5a:aa:88:6a:cd:5f:3d:c0:f5:5d:16:
d8:c6:b1:5f:18:54:56:fc:e7:b1:e2:de:7d:96:4c:
86:35:2c:20:d0:93:9e:6a:49:48:c4:1d:35:95:5b:
3c:42:af:a9:41:79:78:ac:59:37:a9:ea:a6:e4:98:
0c:da:01:80:52:62:a9:ff:68:78:71:50:c4:54:50:
4c:f2:a1:39:b7:76:07:13:8b:49:f7:06:b8:da:43:
f1:23:32:d5:ac:f1:5e:91:b8:6d:df:85:de:32:55:
56:ef:bf:12:8a:3b:fc:3a:79:96:ff:ce:ba:f0:6c:
09:6c:c6:25:47:02:a4:14:30:bb:82:c9:f7:c6:9e:
35:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:55:3D:22:FB:62:E0:C6:E0:FC:09:B0:F6:17:19:E2:29:DD:87:F7
X509v3 Authority Key Identifier:
keyid:86:18:24:E9:B3:34:B4:D5:0E:83:C4:9D:F9:BA:19:CE:25:BE:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:5b:26:85:6f:fc:23:32:f5:ed:aa:9c:0a:93:c1:5d:60:65:
8e:11:1e:df:d8:a7:44:11:a8:0d:4a:61:83:31:02:76:05:d0:
53:52:e6:51:3d:2d:06:9c:20:e3:9d:57:d1:d8:cc:b8:23:a1:
fd:8e:b3:cd:6a:bf:0b:c1:38:2d:f9:2b:16:4c:d1:25:c9:68:
25:36:0d:cd:b0:7b:f6:9a:70:13:6e:84:eb:76:76:99:13:2b:
a7:dd:ba:72:79:34:c5:b0:4b:a6:cb:6a:dd:ae:0d:56:12:17:
64:1c:00:0a:47:25:9a:16:e8:db:6f:a5:37:cc:89:5f:2f:4b:
55:49:67:10:71:62:ca:5c:56:6d:3b:ea:ee:5d:e7:5a:fc:40:
4a:f6:4a:9c:26:c0:db:9b:65:77:14:58:a9:3b:16:26:bf:98:
99:ab:0b:68:a1:99:e6:9f:78:bb:5f:78:72:71:3f:a9:30:89:
51:81:4c:c2:5f:0a:18:82:8a:57:d0:d0:4a:0a:44:39:66:0b:
52:d2:fa:f7:7b:20:61:61:4f:b1:98:3f:22:0c:11:e8:87:21:
49:d3:31:72:49:06:14:90:c6:8e:ea:37:27:29:be:07:8c:5d:
b1:ba:39:e6:2e:06:3f:52:c2:85:fa:fc:df:d6:39:e5:34:79:
a3:1e:8a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 05:00:39 2026 by rpki-client