Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/hggCY9xXAxYNlv_vEuxeilJR7KY.mft
File: hggCY9xXAxYNlv_vEuxeilJR7KY.mft (raw, json)
Hash identifier: MeN5aDR20adecvOfuG8IV41kRJibFshU4qppF30o6aU=
Subject key identifier: AD:E4:6E:7D:D7:81:0C:65:36:D8:54:A8:FA:9F:61:C9:43:23:3B:1E
Authority key identifier: 86:08:02:63:DC:57:03:16:0D:96:FF:EF:12:EC:5E:8A:52:51:EC:A6
Certificate issuer: /CN=86080263dc5703160d96ffef12ec5e8a5251eca6
Certificate serial: 01A10BEFA253A5CD5FB08A53A5B51ECAB8BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hggCY9xXAxYNlv_vEuxeilJR7KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/hggCY9xXAxYNlv_vEuxeilJR7KY.mft
Manifest number: 0104
Signing time: Mon 05 Oct 2026 12:00:16 +0000
Manifest this update: Mon 05 Oct 2026 12:00:16 +0000
Manifest next update: Tue 06 Oct 2026 12:00:16 +0000
Files and hashes: 1: _jyQypfJZvzwEBtd-UUJ7WFp16Q.roa (hash: izhnazNeKvtnL76Htwicfo/+b153O8jjCPIw/x6B0CI=)
2: hggCY9xXAxYNlv_vEuxeilJR7KY.crl (hash: aOh+BJkAPnm778D1P3//UqFmunI4wvDTA+K/rO+v2Ek=)
3: lOqOjjEaxzWeb5pHUx6iX-eYmX8.roa (hash: WtwzQti38pa09U4PS1k9X/tQpZJ23T8DdI17kBh4BC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/hggCY9xXAxYNlv_vEuxeilJR7KY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/hggCY9xXAxYNlv_vEuxeilJR7KY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hggCY9xXAxYNlv_vEuxeilJR7KY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:ef:a2:53:a5:cd:5f:b0:8a:53:a5:b5:1e:ca:b8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86080263dc5703160d96ffef12ec5e8a5251eca6
Validity
Not Before: Oct 5 12:00:16 2026 GMT
Not After : Oct 6 12:00:16 2026 GMT
Subject: CN=ade46e7dd7810c6536d854a8fa9f61c943233b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:02:27:7c:97:82:a9:cd:02:07:54:88:4e:54:
82:39:da:77:d9:cd:86:b6:1c:38:10:ba:86:c8:be:
7e:35:06:2b:93:b0:d0:ec:83:83:bb:13:a9:a4:f4:
99:a2:aa:8d:58:2e:10:c6:3f:cb:37:c0:26:c4:d6:
8e:13:a0:13:7f:53:74:00:23:42:0d:3e:51:3a:4f:
9d:4f:4a:9a:27:92:c0:d7:37:54:57:8f:df:96:0c:
ee:98:26:b8:5f:b1:97:e4:f5:00:a0:dd:15:eb:e1:
11:a3:f3:28:b5:80:95:35:2d:c8:77:67:de:fb:cc:
23:57:80:5a:ce:0f:cc:fc:08:a8:1e:ee:d1:6e:56:
1e:7e:fe:2c:d5:66:6f:c5:b1:5f:04:d4:57:f5:16:
7a:6d:0e:13:e8:0e:bf:a7:37:8f:da:12:63:4a:0e:
0c:ce:81:d9:1c:2e:12:6d:b7:6f:01:82:99:3e:bc:
1c:9f:fc:c9:c0:70:86:dc:4c:b2:96:f2:02:87:31:
b4:2c:38:da:35:4a:6a:4c:14:2b:ac:57:31:48:63:
d2:28:ba:9b:c5:b3:dc:73:d9:ee:4e:73:ca:bd:15:
88:e5:75:0f:cd:9c:c8:36:13:8e:bc:52:21:94:16:
c9:1a:59:17:ee:be:fc:1a:18:50:a5:bc:70:b9:aa:
a4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E4:6E:7D:D7:81:0C:65:36:D8:54:A8:FA:9F:61:C9:43:23:3B:1E
X509v3 Authority Key Identifier:
keyid:86:08:02:63:DC:57:03:16:0D:96:FF:EF:12:EC:5E:8A:52:51:EC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hggCY9xXAxYNlv_vEuxeilJR7KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/hggCY9xXAxYNlv_vEuxeilJR7KY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/hggCY9xXAxYNlv_vEuxeilJR7KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:6e:0e:e2:3c:c6:b7:48:db:cb:ac:03:e1:24:23:2b:bb:e4:
be:12:b1:cb:22:03:64:6f:b6:f0:14:02:85:b0:42:ba:8d:6b:
93:49:f0:ac:09:90:7d:76:7e:75:ee:c6:70:ce:f3:e2:17:7c:
b5:09:a6:ff:fa:de:dd:3d:a0:5a:96:ca:c7:bb:e9:34:7d:73:
ae:13:db:3c:34:08:86:64:2d:6d:23:0d:e9:fa:be:57:54:ce:
79:1a:60:9e:ac:af:ea:45:67:7d:f4:9b:e3:a8:02:e8:53:f3:
c4:27:00:16:d7:e0:de:ab:02:4b:af:94:49:08:45:b7:43:bc:
6d:51:f8:77:01:f6:4a:07:58:95:b5:9d:58:85:a9:91:61:e1:
2a:48:a5:5b:dd:2c:37:6f:05:ae:4c:9d:18:84:af:14:88:3a:
2d:55:bc:ed:9c:76:3c:8a:3c:64:68:da:fa:40:45:71:f8:8a:
77:f5:be:b7:64:96:95:8a:41:ba:92:4b:bf:d6:1a:36:13:c7:
df:09:da:ac:c8:d2:63:ed:d4:cd:10:69:7e:0f:38:ed:2d:1b:
c3:c8:39:76:c2:ab:c0:28:cc:dd:34:0c:64:bc:16:6b:a0:62:
0e:d4:e8:cb:31:c4:65:81:6c:9e:bd:90:0a:3e:ca:b0:1f:61:
57:2e:22:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 14:47:15 2026 by rpki-client