Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
File: HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft (raw, json)
Hash identifier: wQdzbKXYwavZvgZqP4VGy4kI2RTYWwW2QzLFPz5xR54=
Subject key identifier: 40:80:3A:29:4C:D1:B6:8D:3B:D5:2D:A8:28:F6:40:BC:BB:2F:9A:20
Authority key identifier: 1F:18:DC:50:36:D7:FB:C0:DC:AB:F3:3B:CC:AA:D1:0B:17:C5:28:97
Certificate issuer: /CN=1f18dc5036d7fbc0dcabf33bccaad10b17c52897
Certificate serial: 01A0D26E5C086C0A16A7D7B99BF7ABAB1CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
Manifest number: 019D
Signing time: Thu 24 Sep 2026 08:00:42 +0000
Manifest this update: Thu 24 Sep 2026 08:00:42 +0000
Manifest next update: Fri 25 Sep 2026 08:00:42 +0000
Files and hashes: 1: HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl (hash: nMSoDYggI6ObVKzdC0/aRjm+pUOf2m+99SeukFqUMX8=)
2: _Sc3r6nRYQtQu2cZIjq2IjctaNg.roa (hash: e+HC4XFRl9Gj2y368uE+nXV2ycHussEEZzNT8l44+WA=)
3: p9L5cF_zrUQq9yQ8iih6wH2zdz8.roa (hash: xFDge0h0P1x29btG4Nd0kEneOqOsxT+krJ6Qhd0wSPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:5c:08:6c:0a:16:a7:d7:b9:9b:f7:ab:ab:1c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f18dc5036d7fbc0dcabf33bccaad10b17c52897
Validity
Not Before: Sep 24 08:00:42 2026 GMT
Not After : Sep 25 08:00:42 2026 GMT
Subject: CN=40803a294cd1b68d3bd52da828f640bcbb2f9a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:f8:c2:95:52:59:71:b8:75:d0:c7:39:b1:
2e:09:00:05:61:fc:36:cb:4c:ee:01:ab:64:6a:b8:
68:2b:81:39:31:a5:87:1f:f4:10:e5:b5:ba:c9:bc:
61:33:33:29:a8:31:44:19:5c:72:81:41:fb:92:ca:
fe:6f:c0:fe:c1:85:61:13:72:3c:56:95:68:11:ee:
17:5a:e0:17:82:5c:ba:e0:fd:d5:79:4f:fd:10:c2:
48:02:20:76:65:57:13:26:06:5a:a6:76:9f:eb:82:
f2:a6:67:2a:a1:88:be:24:4b:6c:55:f9:8e:77:86:
4a:a4:e2:4a:81:17:22:b7:a8:f0:8d:09:69:0f:29:
0f:f7:54:3b:04:8f:80:44:f6:8e:fb:31:d0:89:1f:
60:26:da:0b:1e:1e:68:fd:b4:6c:19:34:51:37:17:
8e:98:6f:c7:5f:8e:ad:2c:24:5b:60:a8:04:19:34:
64:0e:12:f5:b7:87:a8:62:12:84:10:ca:e2:71:c7:
de:b0:fd:6e:1c:94:39:9c:47:00:04:54:77:ae:b1:
81:a7:3e:fb:18:40:c9:4a:93:df:c0:b7:30:9b:bf:
55:6b:ca:6d:01:53:27:39:51:47:72:65:a0:fb:42:
48:35:22:29:ab:b4:fe:38:36:e2:0d:13:aa:f3:5f:
4e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:80:3A:29:4C:D1:B6:8D:3B:D5:2D:A8:28:F6:40:BC:BB:2F:9A:20
X509v3 Authority Key Identifier:
keyid:1F:18:DC:50:36:D7:FB:C0:DC:AB:F3:3B:CC:AA:D1:0B:17:C5:28:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:2a:b1:94:0b:d8:b0:a1:06:b2:a5:d6:1e:f7:19:88:cc:9a:
ae:cb:57:f5:aa:ac:c6:74:20:d8:43:66:c3:b1:a5:63:f9:86:
5b:84:91:70:8c:f9:73:eb:c8:22:7b:0b:12:18:a4:e9:67:90:
34:87:63:3f:64:0e:34:ee:5e:d0:a2:37:0f:bb:b7:19:a6:c5:
f3:be:3b:09:b6:d9:14:b3:e0:87:ab:2f:9a:9f:60:38:e9:0b:
bc:5e:00:f2:bb:25:7f:b7:14:49:c4:c4:2b:07:45:23:df:5c:
17:17:fe:51:86:95:3a:b6:50:47:51:2c:11:4d:e4:8b:76:4c:
cd:38:2c:83:e3:e4:04:15:bb:27:56:4e:ad:8c:b0:8d:e6:37:
13:e7:ee:7e:97:7d:0b:cb:c4:a5:12:41:20:47:c0:d7:ca:03:
12:e7:dc:2a:33:0a:4a:46:3c:45:25:5e:bd:53:27:cc:9e:1d:
e3:16:2c:67:5e:ab:6f:3d:9d:2b:a3:af:28:23:0e:79:3e:60:
15:74:d9:d8:e6:83:23:52:89:27:8e:b4:71:0b:92:ef:7d:b8:
25:88:fb:cc:e6:11:ff:ab:79:3e:13:db:e9:e0:b0:04:aa:5a:
7a:ec:06:6d:2b:98:07:4a:61:a6:9e:ac:ac:ad:58:61:e9:ef:
50:14:d5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:32:28 2026 by rpki-client