Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
File: HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft (raw, json)
Hash identifier: QfkjN5Wtpmmn/SLpaJ6gEdvSBU2tKwSycc76AmYtnhU=
Subject key identifier: 98:98:9F:62:79:30:95:B8:BD:4F:75:87:44:45:0A:53:3E:E7:92:6E
Authority key identifier: 1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A
Certificate issuer: /CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a
Certificate serial: 019D270493D1F609663C7C2142E240928964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
Manifest number: 0682
Signing time: Wed 25 Mar 2026 22:01:44 +0000
Manifest this update: Wed 25 Mar 2026 22:01:44 +0000
Manifest next update: Thu 26 Mar 2026 22:01:44 +0000
Files and hashes: 1: HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl (hash: XhPyv5oXKS3p+xY+sHO/bU515x53YmTnwMFsJpAxKv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:93:d1:f6:09:66:3c:7c:21:42:e2:40:92:89:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a
Validity
Not Before: Mar 25 22:01:44 2026 GMT
Not After : Mar 26 22:01:44 2026 GMT
Subject: CN=98989f62793095b8bd4f758744450a533ee7926e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:73:ca:07:cd:23:74:29:7c:85:47:ef:38:
47:cd:e5:6c:c8:55:0f:c0:be:ac:b6:c0:41:13:68:
d9:ee:ef:c0:d1:96:9a:9f:a6:5b:52:84:c8:cd:dc:
6f:99:eb:6c:de:dd:40:7f:59:3c:90:7b:3e:89:5f:
e6:c3:5e:99:42:ea:c0:46:e9:ef:f6:02:12:53:a0:
1e:20:60:1d:c7:f7:6f:54:f1:bb:04:21:14:fa:18:
16:44:c5:b8:0a:78:33:a7:71:16:60:92:61:eb:61:
07:53:9c:b0:95:0f:92:c5:21:63:12:c2:16:34:04:
07:f8:14:a2:b9:4c:fd:a7:9c:26:93:3b:20:5e:32:
19:1a:77:ca:d1:68:19:a1:25:c3:e7:8a:dd:a8:91:
3c:c7:d2:08:b2:00:c3:68:01:5c:d9:0c:2f:ce:8e:
e5:37:39:b3:d6:54:57:c0:88:d4:86:59:06:88:a4:
eb:de:05:af:77:be:1e:dc:af:3c:64:4d:37:18:05:
5b:ae:09:18:57:ca:c7:a9:2d:f3:14:fe:0e:03:0c:
86:09:a0:28:0b:24:56:75:82:53:9d:08:de:25:d8:
23:e5:07:16:7f:84:30:d3:5c:7d:e7:b9:fd:b8:94:
4a:73:a2:34:c2:09:1b:b0:31:54:5e:8a:d8:ea:0c:
e5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:98:9F:62:79:30:95:B8:BD:4F:75:87:44:45:0A:53:3E:E7:92:6E
X509v3 Authority Key Identifier:
keyid:1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:09:70:33:ea:23:13:23:95:64:9a:0c:2d:f4:f3:57:d2:02:
2c:54:51:28:58:9c:f4:8b:95:d0:c6:91:f8:27:86:3b:9b:b2:
47:58:c6:50:cd:6e:02:27:73:ef:16:6d:b5:35:27:e4:83:2a:
4d:4e:46:64:81:d8:37:db:c2:18:b0:56:27:95:13:ac:c3:b8:
38:ee:64:75:d0:05:48:e5:c3:63:cc:54:b4:8f:a5:06:5b:2f:
67:20:d2:30:68:4e:aa:eb:82:ac:eb:7f:22:72:3e:65:78:ea:
6f:0a:47:0b:7a:a6:77:2a:b4:3e:2d:ac:b1:f6:d1:c8:da:81:
53:99:0d:3e:f9:c6:48:94:6a:f3:24:c2:61:3f:d3:6e:f4:8f:
fd:95:41:ae:fb:c7:5d:d2:ab:1a:b3:33:f6:39:64:19:c8:4e:
04:68:06:4d:63:a8:af:c0:3f:27:65:fc:b3:57:ec:f7:bf:64:
e5:71:ad:19:3c:02:e2:19:20:2d:4b:7b:ae:a5:26:f5:49:66:
e3:46:6c:d6:2f:43:98:ee:0d:fd:02:9c:c7:37:30:a3:14:fc:
24:9a:09:ca:3d:b1:88:17:28:0c:de:d0:2b:32:6b:b6:dc:0e:
98:5b:80:16:ed:ce:fe:67:ff:39:3f:7d:cb:a6:08:74:ce:13:
00:d2:55:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:09 2026 by rpki-client