Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
File: hhxnvbbYwjD820J6n3G4ATWHL8I.mft (raw, json)
Hash identifier: ydrtLdJ2VbytiHxT0wOOaBR5zFPm/OH2X97Y2V+NrAQ=
Subject key identifier: 72:2B:AC:3F:F9:69:1D:78:E8:3F:24:52:67:0F:2A:69:63:8F:FA:5F
Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Certificate serial: 01A0D4945F96A3B0E060F7456E841F53FF47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
Manifest number: 1A71
Signing time: Thu 24 Sep 2026 18:01:28 +0000
Manifest this update: Thu 24 Sep 2026 18:01:28 +0000
Manifest next update: Fri 25 Sep 2026 18:01:28 +0000
Files and hashes: 1: Cx3L6stT48ESFPU7dsSwev_71rM.roa (hash: qfJbE21IlMxNOU9ikBVG55ZmDtmkEW1ywFQa88RaFu0=)
2: hhxnvbbYwjD820J6n3G4ATWHL8I.crl (hash: ncUJzLXpWYcLOJeLfbjKoktcD/lFZR67+PI5UxrYv1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:5f:96:a3:b0:e0:60:f7:45:6e:84:1f:53:ff:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Validity
Not Before: Sep 24 18:01:28 2026 GMT
Not After : Sep 25 18:01:28 2026 GMT
Subject: CN=722bac3ff9691d78e83f2452670f2a69638ffa5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:a5:8d:db:6c:5d:ba:e6:3e:ba:ec:18:ca:
0f:dc:66:1e:9f:97:ae:64:58:d1:af:34:9c:3a:dd:
3f:4c:b3:02:1e:be:c2:7e:9c:57:d5:a4:2a:d9:95:
2d:38:f1:90:f6:00:40:65:fa:0a:5b:d4:ca:3d:93:
92:f5:75:69:65:d8:9e:9b:ad:92:c0:32:15:ba:c3:
6b:58:8c:dc:c2:66:6d:4a:49:1f:49:d4:c1:fb:66:
66:42:26:c6:5e:af:1c:31:3c:e1:3c:26:91:d1:ea:
06:4d:7e:53:8a:58:05:d3:23:c2:18:4a:ef:61:91:
67:a7:00:84:59:6c:dc:1d:24:06:29:0a:6b:53:63:
36:00:94:91:c6:bb:da:1d:29:7b:71:2e:69:70:27:
5f:20:5f:97:f2:c8:2c:6e:3c:bf:13:b7:79:6d:75:
a4:31:31:34:21:f7:55:9a:6f:f6:d0:72:c2:38:b2:
c3:86:f1:ce:8a:e5:38:98:b4:4e:00:ab:2e:f1:67:
5e:0e:6a:8e:af:ea:58:5b:c0:3f:21:21:51:9a:62:
21:8b:20:73:67:d6:de:f1:18:a5:78:5c:ef:5e:c0:
41:eb:d4:83:0a:fe:44:25:57:24:71:ec:04:12:90:
c9:7f:9e:b4:ed:cc:82:18:c4:c0:d2:9f:6e:43:e7:
a0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2B:AC:3F:F9:69:1D:78:E8:3F:24:52:67:0F:2A:69:63:8F:FA:5F
X509v3 Authority Key Identifier:
keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fb:c0:8c:20:bd:99:e0:e6:2f:de:1c:3d:72:31:16:41:21:
65:07:7e:61:12:d1:92:49:c9:3e:33:50:2f:b8:3c:bd:b9:b2:
3d:5d:2f:11:93:a0:22:49:4e:f2:ad:1e:ad:1b:14:6b:8f:de:
da:49:bd:ed:58:fb:4a:e3:bd:57:81:6b:c5:58:a2:37:14:c5:
53:28:d6:e9:9f:7b:e6:23:cc:87:cf:35:52:cc:d0:12:59:16:
68:34:10:6c:ba:fe:f9:01:1c:fe:4f:7b:0d:25:77:11:fe:3a:
02:06:b2:13:db:98:aa:60:4c:9e:a8:20:06:55:46:9d:dc:c6:
f5:6f:01:81:74:b1:a5:75:8f:94:b6:a8:ab:d5:5c:99:54:3c:
7c:00:20:4f:d4:50:2e:bc:a5:69:e4:6c:6a:22:ba:4b:ec:68:
90:c7:de:5f:4b:eb:b0:59:26:6a:8e:8b:b6:29:20:ea:75:39:
56:1c:a1:8a:2a:7a:46:b1:5c:38:ae:14:bb:f3:37:8e:ef:61:
1b:07:a4:7b:b8:61:2d:a8:ac:cc:06:6e:1b:48:25:3c:ab:19:
71:1a:7c:8d:b9:7c:aa:b8:b1:47:24:82:43:ef:c5:62:53:9d:
65:44:97:7b:7a:c3:df:2b:67:94:0f:72:ac:85:14:be:11:7a:
d9:06:73:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:24:35 2026 by rpki-client