Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
File: HxINfknJ878xPZZTGt-n6q6AV2E.mft (raw, json)
Hash identifier: IgOqGKla0XknqUnfYtbpuq+XRllIaS4z/G5oOdfaU+s=
Subject key identifier: 03:56:0D:7F:BB:D7:DE:AF:A4:0F:12:27:9A:1C:96:0A:AC:63:6A:3B
Authority key identifier: 1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
Certificate issuer: /CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Certificate serial: 019D28BB2D51471F48D872642D9787952423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
Manifest number: 10E9
Signing time: Thu 26 Mar 2026 06:00:48 +0000
Manifest this update: Thu 26 Mar 2026 06:00:48 +0000
Manifest next update: Fri 27 Mar 2026 06:00:48 +0000
Files and hashes: 1: HxINfknJ878xPZZTGt-n6q6AV2E.crl (hash: bLprrvB5Rq24m3rvJNfYBZCdAveAQkQsKC+UyUDTTZA=)
2: NHDyAvAowEpZkYNotB2_FKVnj-U.roa (hash: jzWXVyP83SPdCwETB0N35NVU/yFw45PVeKqRU1Bxi/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:2d:51:47:1f:48:d8:72:64:2d:97:87:95:24:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Validity
Not Before: Mar 26 06:00:48 2026 GMT
Not After : Mar 27 06:00:48 2026 GMT
Subject: CN=03560d7fbbd7deafa40f12279a1c960aac636a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:76:cb:18:58:9e:e3:37:3a:0e:52:c7:f6:
3b:98:eb:02:16:dd:fb:17:98:87:e3:b3:3c:74:34:
9e:a6:e0:98:b4:dc:f8:3f:ec:cf:cf:91:69:ef:57:
dd:b8:09:51:59:b3:d2:82:05:cc:d8:48:fe:2a:bb:
75:44:a7:f2:3f:8f:bb:44:39:f1:b6:a8:e2:eb:3c:
e5:32:55:6b:bc:03:4b:80:d2:eb:a1:04:b0:01:95:
4d:7a:2f:e2:b2:ed:aa:97:09:0d:f1:6b:b2:a5:08:
1f:6a:31:00:47:63:7d:70:8f:4d:5f:e7:1a:9b:bf:
5b:ff:ae:10:8e:6a:b9:3f:26:4a:51:a7:19:c6:bf:
e1:23:84:72:3c:68:3f:88:2f:c2:25:a3:d2:df:73:
d8:d1:49:0c:3d:bb:40:b5:ff:d7:52:bf:0a:47:60:
b9:4b:3b:e0:48:b3:07:90:09:29:f9:26:b5:0c:de:
7a:98:d1:77:8e:3f:a5:b2:3f:6f:de:3d:3c:c3:33:
13:c9:a0:24:72:86:aa:3e:13:67:e6:6e:7f:29:fb:
c4:1d:15:ee:01:0c:6b:2a:2a:94:c5:80:c8:da:79:
4d:be:29:e9:1b:1b:75:46:6c:ba:1b:f6:d4:93:6c:
d9:5c:39:4c:66:fc:d4:ee:06:bb:e2:5b:e1:36:5b:
2c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:56:0D:7F:BB:D7:DE:AF:A4:0F:12:27:9A:1C:96:0A:AC:63:6A:3B
X509v3 Authority Key Identifier:
keyid:1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:28:e4:19:f7:d3:ce:6c:02:b9:17:0e:8e:c9:c0:50:86:c2:
91:7e:8c:bd:6c:aa:f5:0e:5b:b6:4e:68:27:03:ca:60:c7:b9:
ca:0b:e1:bd:c0:f8:47:3e:8b:0f:31:71:04:28:56:71:41:3c:
92:81:c5:ff:64:e7:a3:2d:82:9f:57:e8:50:f3:d4:22:8d:15:
18:20:fc:36:10:86:10:8b:cf:68:63:3e:0c:16:20:6c:39:ed:
79:ac:67:44:d6:20:2b:78:a2:52:e1:f5:30:74:83:02:60:5f:
4d:c4:f5:e8:3a:80:4e:cd:47:5c:2f:54:b8:6f:dc:9e:4c:19:
4f:79:aa:88:e0:da:b1:03:f0:af:93:21:53:55:6e:f8:f2:2f:
a7:f9:fb:80:d4:c5:d7:67:f6:40:88:68:78:11:a1:d9:e9:1e:
6d:58:0c:5c:54:ea:78:4b:6f:f9:61:44:d9:5b:ca:4b:93:61:
20:3a:93:f8:c3:cd:0c:96:02:83:98:07:98:dc:2b:de:a0:60:
8d:c2:f0:23:23:48:46:d7:9b:07:25:27:6b:ae:41:60:d5:81:
56:87:14:2c:0a:72:e4:2a:73:2d:b3:5e:f3:78:22:c8:26:ad:
61:83:09:8d:b5:46:fd:7b:14:87:23:88:1e:3a:6b:a7:b0:e3:
50:15:7e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:24 2026 by rpki-client