Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
File: hhxnvbbYwjD820J6n3G4ATWHL8I.mft (raw, json)
Hash identifier: 39n018yANuXhMjHJ+XyGd9UzFvs93m/0pfgROkZfdpM=
Subject key identifier: 47:07:C1:05:75:2B:2A:40:09:73:7F:96:87:77:CC:48:D1:7B:D8:FD
Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Certificate serial: 019D2A04B463899455510219B83B0BCA9D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 12:00:44 +0000
Manifest this update: Thu 26 Mar 2026 12:00:44 +0000
Manifest next update: Fri 27 Mar 2026 12:00:44 +0000
Files and hashes: 1: Cx3L6stT48ESFPU7dsSwev_71rM.roa (hash: qfJbE21IlMxNOU9ikBVG55ZmDtmkEW1ywFQa88RaFu0=)
2: hhxnvbbYwjD820J6n3G4ATWHL8I.crl (hash: Ddsu/fsl+S8M+SsNWlQYkXvg/7xWHWKNNlEa5g+LiXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:b4:63:89:94:55:51:02:19:b8:3b:0b:ca:9d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Validity
Not Before: Mar 26 12:00:44 2026 GMT
Not After : Mar 27 12:00:44 2026 GMT
Subject: CN=4707c105752b2a4009737f968777cc48d17bd8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:da:85:c7:07:b1:32:86:ac:05:75:dd:34:
c8:49:6c:64:3e:a8:38:0e:cc:86:9b:74:b3:18:a3:
fb:35:47:36:ed:02:e3:73:9f:de:68:91:6c:6b:6a:
af:da:d6:fd:10:d9:7d:92:03:ed:ce:58:3e:05:65:
17:52:bf:cc:93:47:05:32:98:38:a3:2d:7f:73:09:
b1:e2:4d:de:47:c3:e6:df:af:77:4b:87:33:46:81:
6d:c8:f4:c6:20:fa:89:e4:e7:cc:11:58:99:f7:3e:
1e:2a:36:d6:aa:cb:6f:98:99:8b:59:54:c6:14:e7:
d4:bc:a5:91:22:48:e1:9d:f9:ed:be:6c:a8:37:2b:
68:65:b2:b8:43:70:d2:74:03:8e:1c:3f:b3:7c:49:
b6:96:e0:71:43:40:d4:6f:a3:b3:70:32:65:61:ac:
9f:ae:18:9e:c7:9c:07:b4:4d:62:93:bf:2a:ec:55:
30:9b:e0:ab:6f:24:ed:1d:d6:6a:40:b1:73:67:6e:
1b:dd:b2:43:87:3c:41:08:da:66:40:ba:30:c3:ed:
79:15:7a:e4:79:e7:60:47:71:5d:37:ae:db:d5:d2:
14:30:67:b2:bc:15:a3:f8:1d:4c:5d:de:0d:9b:ce:
50:57:3e:82:1e:f1:02:ec:04:5d:12:2e:a7:b2:f6:
6b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:07:C1:05:75:2B:2A:40:09:73:7F:96:87:77:CC:48:D1:7B:D8:FD
X509v3 Authority Key Identifier:
keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:32:ac:9f:65:c1:b7:ae:18:15:0f:f4:47:54:27:78:76:99:
d3:6f:22:ae:26:df:fa:0a:23:36:02:ef:e6:11:50:df:b0:ab:
91:0c:1b:37:e2:6e:56:3d:21:7b:54:27:44:e2:74:c7:7e:bd:
75:b1:c8:2b:d7:4f:f1:0c:ca:84:a2:23:78:de:a2:e0:d1:05:
67:d2:d2:10:2b:cf:0a:cc:38:37:da:77:dc:ff:f9:10:78:8e:
c3:c8:5c:83:2e:2b:2f:d8:8f:0b:c6:3f:0c:89:6b:33:e8:db:
60:15:36:f1:e9:b4:b6:2d:88:59:c5:f1:78:ed:3e:15:cb:e2:
96:13:26:1d:9e:0c:0d:88:f6:49:9d:28:f7:af:1d:c4:2f:5c:
82:4a:37:1f:91:52:95:0a:89:1c:aa:6b:7b:bc:6d:92:37:9d:
80:e5:f4:21:ea:b5:da:70:83:39:90:91:7c:89:13:f0:45:a3:
dc:2d:07:3d:27:97:81:59:f4:f5:6a:e3:ef:bd:b7:23:d3:81:
3b:f7:da:85:49:e8:d8:ef:93:c7:09:e4:27:0a:62:d6:4b:e0:
dd:af:04:d3:d7:7e:8f:76:9a:23:a5:b1:9b:5b:78:8b:f3:f3:
9e:c2:ac:1a:7b:81:94:16:62:96:93:1d:ba:45:46:62:70:4f:
83:60:e5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:22:53 2026 by rpki-client