Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
File: HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft (raw, json)
Hash identifier: r3fHRNQSj9sM3mQpNvhoMIbjzYPiiKmYTvHSuoqlHt4=
Subject key identifier: 4F:24:7D:4C:8C:D1:B0:13:7F:EA:79:33:35:01:85:B5:2A:A2:CF:CD
Authority key identifier: 1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8
Certificate issuer: /CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8
Certificate serial: 019D25839032D6FB0B0DE4C45B819F3C6630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
Manifest number: 073C
Signing time: Wed 25 Mar 2026 15:01:12 +0000
Manifest this update: Wed 25 Mar 2026 15:01:12 +0000
Manifest next update: Thu 26 Mar 2026 15:01:12 +0000
Files and hashes: 1: CwVKknNyyDgr3v_akSkNJXeCl5g.roa (hash: qbY0Sgh72+FRb460J2WnaLt9Z6SaHUYLTsclKcq8xqU=)
2: HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl (hash: UmcOET7+iDDVjYCGPYSm3sm9PgDjIex/WrOYf8VdAwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:90:32:d6:fb:0b:0d:e4:c4:5b:81:9f:3c:66:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8
Validity
Not Before: Mar 25 15:01:12 2026 GMT
Not After : Mar 26 15:01:12 2026 GMT
Subject: CN=4f247d4c8cd1b0137fea7933350185b52aa2cfcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:2c:ac:37:31:78:2a:45:4a:17:d3:9f:ed:
3b:da:f3:dc:b1:9a:8e:0f:30:7f:e1:c4:59:7b:ba:
ff:60:4b:7f:b9:16:a5:57:70:6d:c5:24:d1:a4:1f:
7f:34:4d:98:4e:4f:18:f3:75:4e:98:7a:68:a5:89:
80:22:b7:f1:41:92:8b:5e:1b:e9:1a:5c:87:ec:ef:
14:d3:40:c4:ec:d4:47:6a:a9:e5:3d:54:de:24:f5:
a5:80:a4:e5:c8:d5:e8:ae:c0:13:75:0a:45:f7:52:
74:b0:ae:80:b7:86:db:b9:ef:5b:c5:d4:d3:eb:11:
45:9e:cb:59:77:a2:60:e9:68:3a:96:d2:ef:dd:95:
29:da:28:bf:e4:66:86:f3:e0:ab:d0:f2:8b:b1:61:
1b:dc:12:7d:c8:da:e0:98:2a:b1:cf:37:bb:30:be:
55:73:e0:51:43:a9:57:81:37:47:41:d3:8b:1e:ce:
a5:aa:9e:b1:b7:61:5f:28:a1:97:3b:02:d9:b5:34:
9c:95:e9:d6:35:e3:f2:6a:75:f2:90:7c:c9:ae:bd:
9d:09:f8:28:21:c3:68:57:52:66:65:b5:e0:a5:8a:
39:2b:e6:9f:c5:34:71:35:31:b8:76:8f:99:8b:d3:
99:db:53:19:b5:67:c9:4f:cb:f4:2a:5b:cd:68:e1:
e3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:24:7D:4C:8C:D1:B0:13:7F:EA:79:33:35:01:85:B5:2A:A2:CF:CD
X509v3 Authority Key Identifier:
keyid:1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:22:17:98:e3:fe:3c:1e:6d:a3:fe:3b:ef:f6:a4:b2:31:e4:
91:b8:33:94:37:7d:7f:ff:10:db:65:34:aa:f0:ab:a1:dc:c0:
9b:f4:43:25:77:f4:d3:d7:ed:b3:d3:28:ee:b3:80:56:13:31:
dc:39:53:bd:9a:b1:8b:a5:ad:5a:60:ed:9a:78:95:f4:5b:25:
fa:f2:8a:41:84:15:16:7f:7a:7d:63:88:e7:c6:f9:cc:bd:92:
63:75:c4:96:3b:94:bf:82:ef:c3:8c:9f:c8:00:68:25:b8:46:
2e:8d:8d:21:c9:c3:b3:e7:79:7e:b6:e9:f6:41:44:85:8e:bf:
82:42:60:23:55:50:23:68:f2:19:c8:d9:b2:55:9c:60:ad:28:
d6:35:5c:ca:3c:c8:4f:de:b8:69:83:2a:6c:99:c9:20:13:c8:
be:af:73:8a:da:a2:30:6f:ea:7d:f7:18:f5:f0:da:a6:3e:dd:
e9:79:f0:5a:a5:02:71:11:01:9d:f1:e8:99:63:f0:e4:94:d6:
39:7d:29:84:94:90:5a:07:e5:61:7a:ad:11:93:b8:88:9f:f1:
68:97:ca:e0:12:c1:27:4b:c7:fe:64:e4:25:52:39:19:9b:67:
3d:5c:df:43:22:ab:52:2d:f8:6d:53:e3:01:d8:d8:68:5e:79:
bf:68:98:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:44:54 2026 by rpki-client