Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
File: hxv5w80rNkB9-9l2-4SiEZeg6qE.mft (raw, json)
Hash identifier: ArF1c80h7s2ohLVEDehRqoE6SoeJJziF4pjDQ1tKpFA=
Subject key identifier: 58:EC:2F:EB:BC:0E:07:65:02:37:90:1F:96:FE:2A:03:13:DB:74:C3
Authority key identifier: 87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1
Certificate issuer: /CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
Certificate serial: 019D2771C3263B3EAD1D56CF2395CB579DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 00:01:00 +0000
Manifest this update: Thu 26 Mar 2026 00:01:00 +0000
Manifest next update: Fri 27 Mar 2026 00:01:00 +0000
Files and hashes: 1: hxv5w80rNkB9-9l2-4SiEZeg6qE.crl (hash: ZDzCQ4YXwzMXYaPZkrvzJSoSXqv+JBevtZneA6wowUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:c3:26:3b:3e:ad:1d:56:cf:23:95:cb:57:9d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
Validity
Not Before: Mar 26 00:01:00 2026 GMT
Not After : Mar 27 00:01:00 2026 GMT
Subject: CN=58ec2febbc0e07650237901f96fe2a0313db74c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:b7:1b:16:c4:08:f5:b3:1b:c9:fd:35:90:
0f:5f:43:cf:81:44:ae:10:19:8a:42:c3:b9:38:e2:
da:94:ab:f7:dc:6f:ef:eb:ef:45:30:6a:a8:df:eb:
a7:9e:9f:00:6d:28:2a:a9:b3:7a:55:26:be:9e:78:
d2:a9:db:8c:7c:da:9c:0f:b4:ea:a7:7b:eb:aa:e8:
a1:e5:d2:7a:6d:ae:90:a8:0c:d8:7b:36:b5:d4:cb:
83:1a:e9:ae:19:82:f7:61:67:e5:a0:3b:89:39:c4:
d8:35:7f:8d:19:e2:e7:9d:a9:f1:89:86:00:10:b8:
cc:32:fd:e7:a3:7f:fd:43:04:0c:9f:d1:0b:9a:a8:
37:4b:04:51:76:50:48:1c:7d:e0:b8:08:27:e9:63:
d7:73:b8:6d:ac:7c:43:7d:c3:8f:7d:47:f2:c7:57:
16:af:84:65:87:ba:cf:cd:4d:5c:be:eb:4f:1c:41:
c2:de:e4:7e:b8:65:09:3a:dc:af:21:90:5c:ac:e1:
22:f3:1f:fb:05:80:6c:14:75:69:d9:ad:e4:41:86:
33:fe:15:6f:bd:2a:67:d6:9a:70:65:e1:25:da:e6:
e1:3a:6b:51:95:4c:1e:d2:85:31:a0:9c:86:a6:5f:
fc:51:f2:d8:b5:ab:ff:c6:f2:c8:1d:ac:a5:8e:7b:
6d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EC:2F:EB:BC:0E:07:65:02:37:90:1F:96:FE:2A:03:13:DB:74:C3
X509v3 Authority Key Identifier:
keyid:87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b5:b3:d4:e0:30:37:f9:6d:53:c3:b7:22:2b:f2:f3:00:97:
74:a6:aa:32:43:3a:92:07:6a:be:e0:cd:85:52:8d:7b:64:c9:
46:ce:fb:51:cc:57:98:0d:64:dc:78:7d:46:9d:3b:97:55:a6:
2d:29:d7:24:31:ed:2b:98:ab:76:e8:29:02:70:55:29:f6:8b:
fc:55:cd:db:38:2a:45:9a:47:b5:0c:f6:0b:db:cf:51:0c:9c:
43:cd:95:6a:87:22:e1:62:ee:df:b6:57:bc:05:4f:c5:01:be:
d7:54:41:00:3b:e6:de:19:1f:dd:bb:28:1d:ca:db:3d:07:48:
48:3c:e7:53:e6:d5:82:a0:08:55:03:68:32:9f:8e:41:b3:8c:
fa:64:85:43:1b:16:07:9b:40:7e:60:29:42:99:2d:49:dc:28:
ee:17:a9:ef:51:96:59:88:de:48:3e:a4:b1:d7:d6:34:3b:f0:
f0:92:ae:14:d9:bd:44:29:fc:61:9a:77:29:c4:d1:c8:7c:27:
b9:fd:92:83:c0:71:89:24:89:22:85:c9:3b:76:d3:2d:18:a0:
61:e1:cf:22:09:c7:fe:8f:0f:a5:3a:0f:d6:f7:89:39:bc:3c:
40:5e:93:4d:9d:28:a1:bb:da:d2:ab:3a:47:08:20:db:85:28:
d5:90:a3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:52 2026 by rpki-client