Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
File: HUxgeKWUHFyxV9XylXyzFNftG-0.mft (raw, json)
Hash identifier: pZwvOmCpJdt8Zx2dEwJak9kajvs33J5zp0U+d2DTA64=
Subject key identifier: 8F:D9:4A:AF:D4:B1:D5:36:4C:11:7A:2A:3B:8E:65:42:EC:B4:CA:05
Authority key identifier: 1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED
Certificate issuer: /CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed
Certificate serial: 019D28BBCC2232F3D832E290122154E01A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
Manifest number: 0C88
Signing time: Thu 26 Mar 2026 06:01:29 +0000
Manifest this update: Thu 26 Mar 2026 06:01:29 +0000
Manifest next update: Fri 27 Mar 2026 06:01:29 +0000
Files and hashes: 1: HUxgeKWUHFyxV9XylXyzFNftG-0.crl (hash: bnXiwcQ3GcRXKTMbbt7IEPIeSGBCPwt0u/DjKYZlKu8=)
2: cBCyxlvufUfGOWDilS38ttT1uvY.roa (hash: r7Dt5WSAAV3olhtKkx8/cVrUqstLuq8swjnGaqOS5no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:cc:22:32:f3:d8:32:e2:90:12:21:54:e0:1a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed
Validity
Not Before: Mar 26 06:01:29 2026 GMT
Not After : Mar 27 06:01:29 2026 GMT
Subject: CN=8fd94aafd4b1d5364c117a2a3b8e6542ecb4ca05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:41:7d:01:f9:a4:94:20:01:ab:cb:75:8e:
3e:7a:27:1e:42:44:4a:da:38:b8:3e:8b:eb:8e:ad:
fb:49:c0:43:b7:8a:be:c2:5b:af:b5:e3:5f:5e:5d:
96:ff:b6:fb:be:96:3c:e4:75:37:f8:9e:a6:75:da:
c6:06:d8:58:4b:af:1d:2a:6e:3e:91:17:57:32:4b:
91:6e:e1:4f:24:a2:d9:0e:14:d0:ba:38:39:4f:b1:
08:f5:d1:d4:61:8d:13:5c:84:0c:1c:80:a2:d4:16:
9b:6e:da:0a:ed:c2:44:a1:b4:32:ff:35:8a:8c:55:
0d:f3:bf:94:b2:de:6e:f7:fd:db:71:cc:d0:59:df:
ea:dd:ee:ba:cb:cd:35:37:f7:e8:fd:e8:c3:e0:27:
45:ae:8d:e6:72:40:35:7d:c7:32:b1:e3:fe:0f:7a:
fb:ac:e1:49:02:28:2f:4d:76:2c:e9:bb:c1:9b:0e:
b4:81:05:32:32:73:37:c9:c0:d0:49:db:43:64:7c:
39:4a:7f:45:77:94:0c:6e:a7:bd:2a:96:23:9a:98:
f4:bf:7f:7b:c0:e9:5b:9f:15:7f:36:a5:1f:e6:c4:
00:16:7d:2c:31:eb:a3:0d:f1:c8:b0:69:14:3e:40:
f8:13:64:b2:b8:12:b8:0c:15:11:b4:56:e1:2b:02:
2c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D9:4A:AF:D4:B1:D5:36:4C:11:7A:2A:3B:8E:65:42:EC:B4:CA:05
X509v3 Authority Key Identifier:
keyid:1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:29:02:6f:8f:db:42:7b:e4:62:f0:fa:22:99:40:f4:cb:99:
d3:dd:39:31:8d:16:2a:75:79:38:20:73:36:3e:22:33:e4:54:
4d:ec:dc:1a:e5:71:96:90:5c:db:b7:17:24:18:45:71:7f:17:
80:72:5d:bb:7d:d9:dc:75:82:69:01:42:5a:a5:19:a4:9c:2a:
1b:23:28:58:ef:98:44:ca:67:82:42:27:d0:8b:b9:8f:b5:43:
03:f9:a3:86:82:f0:1a:5c:98:d6:43:cf:66:62:6c:76:47:d4:
b1:68:dc:16:30:a6:41:2a:75:eb:d2:05:73:18:78:74:44:19:
99:92:c7:b7:91:e4:46:2d:07:7c:3b:27:80:a2:1a:67:69:4d:
e2:1a:7a:30:c9:98:8a:8a:58:ef:d6:e6:39:36:bf:27:22:90:
3e:0b:6d:b3:d1:05:fd:ec:24:ae:45:2e:6b:42:10:77:f5:96:
89:c0:89:d6:3c:10:67:84:59:06:6c:88:f8:1e:65:68:a5:cf:
28:7d:e3:e5:79:2f:4c:3d:4e:cb:da:15:46:a2:18:3f:f0:44:
20:de:34:9e:d8:68:2f:f3:83:35:79:4f:f1:d0:da:a0:71:6c:
ff:c0:65:fa:32:ac:83:4c:3d:94:5a:72:4b:d3:b9:f7:42:f6:
42:4c:a3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:32:21 2026 by rpki-client