Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
File: HXJHHgJd46gqjfWKrm4S4x1s0FA.mft (raw, json)
Hash identifier: ukuVM+hOJu3oCnUX8vkKj4wlzx4dOERz8ht1zO/kcKc=
Subject key identifier: 52:41:7A:D4:9F:CE:22:A3:5B:50:27:C1:38:C4:73:D4:49:E6:E2:CE
Authority key identifier: 1D:72:47:1E:02:5D:E3:A8:2A:8D:F5:8A:AE:6E:12:E3:1D:6C:D0:50
Certificate issuer: /CN=1d72471e025de3a82a8df58aae6e12e31d6cd050
Certificate serial: 019D27DFCF8166D927847D284417AEE53817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
Manifest number: 02B9
Signing time: Thu 26 Mar 2026 02:01:12 +0000
Manifest this update: Thu 26 Mar 2026 02:01:12 +0000
Manifest next update: Fri 27 Mar 2026 02:01:12 +0000
Files and hashes: 1: HXJHHgJd46gqjfWKrm4S4x1s0FA.crl (hash: OBVKOxygMbBpTp8jhEfNAcNQpG8j7YOSI+VgVEeaFrE=)
2: wgOrbEyyTMVtSYdFg1xc1vTbqbA.roa (hash: 3Lc51OHAGzzjJJFJIOMiaDX6wEIJm4jehUS0UTUJBEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:cf:81:66:d9:27:84:7d:28:44:17:ae:e5:38:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d72471e025de3a82a8df58aae6e12e31d6cd050
Validity
Not Before: Mar 26 02:01:12 2026 GMT
Not After : Mar 27 02:01:12 2026 GMT
Subject: CN=52417ad49fce22a35b5027c138c473d449e6e2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:84:b5:d8:66:4a:45:ca:e6:b1:e3:9a:ed:
c2:db:38:dd:ea:b1:aa:6d:27:19:c6:92:7e:54:37:
2a:e7:20:a5:94:c9:1b:26:27:a3:e5:1e:a4:69:7d:
74:2a:4a:ab:2a:13:42:ad:6b:15:9f:d8:87:44:44:
43:e0:b4:33:5b:ae:b3:cd:64:c3:f7:23:48:34:ab:
43:36:f4:ff:97:ae:a6:b4:19:38:f7:b1:4f:5a:9d:
bb:86:64:ab:db:8e:d3:20:92:50:9d:17:9b:70:2f:
ab:89:f3:cd:b3:28:24:22:a3:bc:ea:a8:d0:a8:27:
c0:15:bd:2b:d1:2e:42:1c:06:64:17:22:a6:87:d8:
86:ec:18:1e:51:0d:18:dd:23:4a:a2:56:64:ac:99:
c5:55:81:d4:6d:ce:c0:53:db:87:a9:ed:f2:1d:ec:
b4:ed:fc:7a:90:6f:8a:27:2a:46:b7:80:9f:1a:57:
32:31:69:16:27:99:43:c8:ac:d7:32:89:53:78:31:
6d:ec:6e:70:8a:65:5a:b1:05:7a:c7:d0:80:09:ae:
fd:1f:c4:55:86:66:79:8a:50:c8:c2:56:0e:1a:04:
dc:59:08:3f:93:ed:35:21:95:1a:89:16:bc:e9:72:
cf:ec:4b:5c:75:04:7b:14:8c:d1:78:04:fa:c3:76:
ae:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:41:7A:D4:9F:CE:22:A3:5B:50:27:C1:38:C4:73:D4:49:E6:E2:CE
X509v3 Authority Key Identifier:
keyid:1D:72:47:1E:02:5D:E3:A8:2A:8D:F5:8A:AE:6E:12:E3:1D:6C:D0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:34:76:26:68:f8:c4:49:c2:7a:18:b2:f7:27:c7:5f:09:4d:
be:ab:c5:69:88:d7:bb:b3:ed:bb:cb:47:b2:ae:e7:3e:f3:3d:
76:98:c9:da:58:9b:09:2b:12:8e:c5:61:31:22:16:61:10:45:
f2:1d:01:77:8b:0a:bf:c7:b4:30:40:6e:ea:60:6d:db:43:0f:
4a:6a:5e:6e:9a:bd:e2:13:4b:90:45:88:b3:81:72:97:d3:f7:
b7:1c:17:ad:be:12:ba:06:fd:a9:da:93:d8:4a:48:c2:ee:1e:
81:57:02:e8:6c:71:66:57:70:af:f7:df:21:84:54:52:d4:bc:
f5:9b:4c:77:47:ee:80:1b:3c:1c:b5:86:2d:b6:ba:d7:1d:a9:
0d:82:7b:d3:4e:44:68:5c:ab:48:a8:56:bf:51:ad:57:d9:c9:
17:9e:b7:0b:88:62:21:30:80:2d:84:4d:84:a0:c3:08:b7:45:
bb:dd:dd:15:31:c7:a9:12:ef:00:b9:30:35:a3:9c:8b:f7:a9:
ad:c6:e6:c8:c1:fb:87:9b:97:55:23:93:c5:3c:33:ee:5e:39:
77:74:7d:6b:97:24:e4:40:f4:1d:74:56:02:b3:c7:dc:f1:22:
6b:c7:98:7a:92:6b:35:63:67:f6:ae:38:22:a6:99:92:f8:53:
d9:69:3f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:38 2026 by rpki-client