Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
File: hhgk6bM0tNUOg8Sd-boZziW-gZM.mft (raw, json)
Hash identifier: 7q9Sylb9Je07/5yH0Wk2Ab9JeWPcm/97lDXHIeuIUvY=
Subject key identifier: 29:AE:26:62:DD:67:2C:C1:49:27:4A:34:C6:F1:9D:B4:52:71:10:BE
Authority key identifier: 86:18:24:E9:B3:34:B4:D5:0E:83:C4:9D:F9:BA:19:CE:25:BE:81:93
Certificate issuer: /CN=861824e9b334b4d50e83c49df9ba19ce25be8193
Certificate serial: 019CB05A83DFFE3C20EFA16D229D31A7B04C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
Manifest number: 20
Signing time: Mon 02 Mar 2026 21:00:47 +0000
Manifest this update: Mon 02 Mar 2026 21:00:47 +0000
Manifest next update: Tue 03 Mar 2026 21:00:47 +0000
Files and hashes: 1: GtDxiNHeYhaopEz7nkSxj4Uwws0.roa (hash: xLrL13cfFz66vUPjaMWCOfLQuaEtZXy6c6DNYKUuXaU=)
2: dTkGUafttT6-8GpfaFN-_DQscaU.roa (hash: go6kdC6kI78p8haD5O5Bqq/07FTC8kyj7opP+hvQavw=)
3: hhgk6bM0tNUOg8Sd-boZziW-gZM.crl (hash: iIrS7FQjkAY80Ts7eYbttLEKEK/1IScwe5vVRxUDlms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:5a:83:df:fe:3c:20:ef:a1:6d:22:9d:31:a7:b0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861824e9b334b4d50e83c49df9ba19ce25be8193
Validity
Not Before: Mar 2 21:00:47 2026 GMT
Not After : Mar 3 21:00:47 2026 GMT
Subject: CN=29ae2662dd672cc149274a34c6f19db4527110be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e8:bf:17:0e:cb:fa:a4:aa:7f:dc:6a:24:5f:
c1:11:97:74:33:1b:9e:20:93:19:f6:8c:e1:32:c5:
80:ed:33:96:c2:59:c2:09:32:f0:9f:36:6e:22:e8:
e9:99:88:e4:33:c4:d9:e3:b6:e8:4f:d6:c5:d1:21:
ff:56:b3:bd:fa:13:b9:fe:59:d4:6d:d1:11:e8:97:
a7:61:c8:b3:13:bd:cf:6f:d8:05:ee:95:fc:1d:48:
de:0f:06:61:fc:7e:64:66:c1:6d:e0:b6:8c:b3:38:
6d:62:7b:e6:ea:81:5d:27:d9:1f:b6:c4:44:fa:2c:
f3:6b:3e:0e:4c:06:51:6f:1f:01:09:24:c1:4d:81:
a0:10:f8:53:76:b1:9a:92:65:1a:18:33:4e:df:fc:
34:2d:08:70:a4:12:ee:30:f7:78:6f:91:28:1f:b3:
0e:4a:04:e5:27:67:14:95:fa:c7:22:21:be:5a:b1:
f8:a4:2b:b8:51:94:b2:cb:f1:aa:34:f4:65:b3:1c:
61:cc:94:a4:0c:83:8e:f8:7d:d4:4b:27:6f:0b:ec:
56:5c:c1:17:a0:26:95:7d:e6:24:d2:e0:6f:c9:5c:
98:e7:44:ac:a7:e8:b2:1f:cb:8d:aa:1f:45:19:e2:
c6:18:64:c8:b9:2f:42:f1:55:10:13:9c:50:f5:ea:
78:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AE:26:62:DD:67:2C:C1:49:27:4A:34:C6:F1:9D:B4:52:71:10:BE
X509v3 Authority Key Identifier:
keyid:86:18:24:E9:B3:34:B4:D5:0E:83:C4:9D:F9:BA:19:CE:25:BE:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:41:6c:90:a9:81:8e:9a:86:94:db:0f:c7:05:a7:d2:28:36:
68:90:52:6a:f3:51:b8:71:36:64:01:15:a1:60:97:a8:41:33:
ac:20:11:95:66:c4:5b:92:4c:8c:6f:ff:f0:1c:9e:1a:f5:b1:
39:69:ea:28:29:08:95:8d:4a:33:5e:1d:dd:dc:9f:4c:c0:db:
b7:ce:5e:18:b3:bd:9c:c1:b0:68:75:29:a9:f5:f3:ec:59:05:
c4:81:e6:9c:f3:fd:bb:1f:dd:ee:75:e7:38:e2:eb:6c:3f:5a:
6b:47:d6:20:09:2d:63:8b:d6:7e:20:c0:ba:cb:30:b9:34:f5:
e6:b4:1d:c9:5f:cf:66:72:ab:8e:2d:52:6d:cc:af:39:e3:ed:
c2:97:0b:b2:6c:a8:6c:be:8b:d2:ed:06:b7:56:27:31:2b:ed:
a9:cb:c6:20:26:aa:1e:79:0a:b2:ac:37:ef:39:a8:3e:de:03:
83:a1:cb:ab:23:0e:bf:fb:e2:b8:7e:bd:3f:c5:f6:7d:01:e8:
65:f6:49:aa:42:5b:63:31:19:a8:ec:68:94:dc:0e:1c:4f:5c:
92:02:25:20:ad:d2:af:07:17:d0:c2:06:9e:6f:ce:7a:a6:6f:
4a:82:fd:9a:79:df:36:52:21:a8:e4:2d:9f:09:89:95:1a:f7:
a4:a6:a6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:51:51 2026 by rpki-client