Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
File: HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft (raw, json)
Hash identifier: CRy1HbXiWS5/uZHaApQBI5th0ZeaFFeRGqkDg+79Ghw=
Subject key identifier: 85:CE:D7:BD:FE:39:92:FF:5F:63:8F:E2:A8:B1:C8:B0:02:5E:4E:86
Authority key identifier: 1F:18:DC:50:36:D7:FB:C0:DC:AB:F3:3B:CC:AA:D1:0B:17:C5:28:97
Certificate issuer: /CN=1f18dc5036d7fbc0dcabf33bccaad10b17c52897
Certificate serial: 019F93C9871E4E41D27A38E87EA4336C81AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
Manifest number: F8
Signing time: Fri 24 Jul 2026 11:01:25 +0000
Manifest this update: Fri 24 Jul 2026 11:01:25 +0000
Manifest next update: Sat 25 Jul 2026 11:01:25 +0000
Files and hashes: 1: HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl (hash: 7IWGF76IB2xpyMLpK8mxQ3gWwqixK7GEZdoylgn73ZI=)
2: _Sc3r6nRYQtQu2cZIjq2IjctaNg.roa (hash: e+HC4XFRl9Gj2y368uE+nXV2ycHussEEZzNT8l44+WA=)
3: p9L5cF_zrUQq9yQ8iih6wH2zdz8.roa (hash: xFDge0h0P1x29btG4Nd0kEneOqOsxT+krJ6Qhd0wSPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:87:1e:4e:41:d2:7a:38:e8:7e:a4:33:6c:81:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f18dc5036d7fbc0dcabf33bccaad10b17c52897
Validity
Not Before: Jul 24 11:01:25 2026 GMT
Not After : Jul 25 11:01:25 2026 GMT
Subject: CN=85ced7bdfe3992ff5f638fe2a8b1c8b0025e4e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:83:4e:13:e6:2f:29:d1:80:7b:c6:de:5c:
ed:60:e6:45:47:eb:82:fd:98:86:9f:6e:cd:b3:0f:
a5:85:8b:11:b6:f0:82:8c:e6:70:89:0a:a4:f6:ad:
9f:7a:ae:ee:1b:e0:84:5d:5d:02:f1:61:58:92:03:
81:d7:e5:91:00:ea:07:1d:58:3a:1f:eb:aa:42:b6:
63:af:67:2a:63:cf:64:cf:0d:a6:b7:6c:79:55:9c:
6c:38:23:ba:60:92:aa:4b:35:49:ac:3c:ab:40:de:
a9:b6:65:8f:64:31:ba:e3:61:f9:9a:b8:1f:37:24:
50:2e:29:99:b8:0d:06:1a:68:56:78:91:42:9f:39:
fd:5e:42:97:2a:86:97:33:7f:4c:d5:48:0f:42:81:
7d:fe:b3:c9:bf:52:86:8c:ca:c2:1a:fa:79:e2:19:
3e:36:fb:ec:a7:07:4a:a5:9b:2b:6a:5c:85:47:24:
dc:87:53:4f:e1:b5:d6:fe:04:1b:e4:8f:78:6b:3f:
a3:2d:b8:f4:d2:a7:53:46:81:7c:0d:6f:fa:2b:25:
f6:89:b1:b6:b5:32:9c:e6:c7:43:d4:c0:89:85:b5:
f7:26:f7:e9:fe:98:2b:9e:02:12:2a:d9:15:dd:2b:
97:5f:75:87:96:fe:f8:b0:79:c1:8c:8e:4b:21:b0:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CE:D7:BD:FE:39:92:FF:5F:63:8F:E2:A8:B1:C8:B0:02:5E:4E:86
X509v3 Authority Key Identifier:
keyid:1F:18:DC:50:36:D7:FB:C0:DC:AB:F3:3B:CC:AA:D1:0B:17:C5:28:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:43:86:7d:ec:b7:26:c3:a3:27:ef:03:7a:2f:5a:e7:40:69:
c3:9b:ce:26:94:43:fd:1e:54:51:15:d3:85:6f:83:1b:7f:13:
40:43:21:46:68:02:06:31:0c:bd:a1:0d:eb:c0:58:8f:5b:a3:
ed:fd:6c:bc:a9:3a:8f:a3:34:69:52:49:f4:9b:a6:14:7a:ce:
b6:9a:12:df:26:6b:ea:1a:ed:5a:ed:72:6e:49:51:3e:6f:0f:
95:1d:09:96:6a:dd:85:5c:e8:1d:ab:41:31:d3:a5:d9:fd:21:
88:48:58:33:fb:c0:20:24:58:0a:50:31:d8:99:a2:d9:10:27:
9a:1e:d4:1b:d4:69:c8:c1:69:74:d0:e5:5a:dd:2e:4d:d5:d9:
d9:20:ae:71:27:3f:7d:bb:aa:d6:f9:fd:8b:36:55:89:81:1b:
e6:1d:3c:c9:03:10:78:65:d5:bb:4a:16:46:1c:4f:9b:81:95:
3b:44:e4:46:78:02:7e:08:17:d2:96:c4:cd:00:09:11:2d:fd:
22:28:6c:b9:16:94:d3:d6:74:b2:b0:f7:9d:3d:ea:66:27:88:
33:80:1e:89:c9:1e:aa:41:82:27:f4:15:d8:07:4e:ca:35:5f:
35:10:45:17:04:ea:0b:c7:dd:28:38:5f:ac:d2:bd:4c:db:f9:
1e:de:88:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:24 2026 by rpki-client