Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
File: hxB-P9m5S0s25qjzcOhlCn9X5sM.mft (raw, json)
Hash identifier: z2w/oUw9A8xXtGy1MCsO4o9x90tf0KuO/cBIcZS8tQ8=
Subject key identifier: 8B:A0:C4:75:28:3D:6B:BA:32:8D:37:19:F7:5A:87:F5:01:1F:13:AC
Authority key identifier: 87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
Certificate issuer: /CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Certificate serial: 019D29CDDD3A31FE29356DCDE9A053F3F61F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 11:00:50 +0000
Manifest this update: Thu 26 Mar 2026 11:00:50 +0000
Manifest next update: Fri 27 Mar 2026 11:00:50 +0000
Files and hashes: 1: 0HF7W4kcPQAPpdf6IKBVke2daLo.roa (hash: ExfRmSPaStPYRpsa/vvn6ljkkYwEx3sjxTDf4lBvVfo=)
2: hIl9YwGP9KNNYc-kWa9ByhnFFMw.roa (hash: k+CEky46uUg1wUDtSRfbPi4iQjpsDQmTlW/NwFlLWDI=)
3: hxB-P9m5S0s25qjzcOhlCn9X5sM.crl (hash: HENdCPKHgrjAwum2H8fUaHC+KtNDl7I4130YV2Ab5i0=)
4: lltq5u-SeWoxH2Rfx7VDHzLu7aA.roa (hash: 7tYsidyr0RJ/K+oNpq6hH3jgwmAvhIj3TNXLWptDGp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:dd:3a:31:fe:29:35:6d:cd:e9:a0:53:f3:f6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Validity
Not Before: Mar 26 11:00:50 2026 GMT
Not After : Mar 27 11:00:50 2026 GMT
Subject: CN=8ba0c475283d6bba328d3719f75a87f5011f13ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e9:44:6e:8e:59:e3:7b:44:a0:43:bb:f1:1b:
9e:9c:6c:e7:c9:80:32:47:6e:c8:25:e0:a2:8c:32:
aa:1b:e9:4a:c0:9e:80:54:42:a0:5c:6c:38:c6:2f:
58:d7:4d:77:df:c9:ef:98:14:c0:0b:7e:41:a0:13:
d9:fb:3f:ad:2f:4f:74:85:63:dc:33:4a:9e:2d:a4:
3e:f5:70:c1:81:34:ad:7c:d2:08:a4:54:0f:39:0b:
05:ca:b4:16:29:e7:96:d4:8d:71:9e:bf:22:d9:c3:
a6:fb:eb:f1:92:ff:87:ef:46:4e:e0:df:0b:b6:fa:
c9:5c:a3:70:2d:4d:9c:2d:8f:ef:d7:ac:9d:25:d1:
1a:24:6c:35:65:3c:9c:6f:66:1a:12:cd:9a:2a:f1:
21:85:44:c7:da:e1:6d:1c:47:e8:4b:65:6f:c7:00:
80:b5:69:5c:0e:8e:a8:16:f8:9b:c2:15:f9:c3:7e:
ee:b4:d3:9b:37:64:53:15:42:9d:18:61:c4:98:39:
2e:90:24:9f:d0:08:1a:a1:a1:87:cd:51:2e:31:93:
06:70:60:14:16:93:34:22:eb:65:56:36:7d:9e:1b:
6b:36:b0:28:8d:1b:35:bb:65:c0:44:c6:4c:bf:06:
f9:b3:4c:51:17:03:2b:35:34:5c:24:60:e9:2e:47:
6a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A0:C4:75:28:3D:6B:BA:32:8D:37:19:F7:5A:87:F5:01:1F:13:AC
X509v3 Authority Key Identifier:
keyid:87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ec:98:fa:f2:9c:df:4e:4e:f5:9c:5b:0d:d4:68:a6:39:c3:
ef:94:2a:07:95:66:db:45:e6:a1:02:38:4e:f9:a9:03:89:c0:
49:75:fb:88:5f:c0:75:a0:f9:fd:b3:82:63:f4:22:ba:67:35:
44:bd:cf:e5:8a:3d:3d:8b:1f:fc:e3:76:f6:a2:51:6c:96:61:
cf:11:b9:81:2f:e7:24:23:bb:0b:49:ed:6e:c9:1d:d0:17:ff:
3c:24:31:7c:13:78:df:92:aa:d6:d4:dd:1d:c2:92:28:77:f4:
23:92:69:f0:27:66:b3:d9:14:7e:4c:00:75:b3:66:12:3a:5b:
69:4c:d4:90:5c:50:f5:49:22:9b:82:31:ba:06:4d:9c:20:7f:
26:56:20:cf:2d:20:2e:58:17:1c:9d:80:68:86:c2:5d:fe:11:
eb:0a:3f:1c:b6:88:ef:24:19:64:da:92:2c:e4:c6:37:b1:78:
6f:ef:7b:ae:6f:c3:52:dc:c0:30:c1:e7:d8:d0:69:0b:fd:aa:
35:16:93:8e:01:87:a2:f0:37:ae:9e:ee:32:f6:af:86:58:2e:
9d:cc:77:9d:55:b7:47:18:3b:45:55:2c:a0:6c:a9:7b:4b:39:
26:07:3f:7d:59:26:38:2a:be:0c:76:c0:2a:94:ab:32:e2:02:
ef:1d:d5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:26:10 2026 by rpki-client