Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
File: HHixg23sq0_1vfpeN3o9-H8Y_A8.mft (raw, json)
Hash identifier: f38Wfr/6BSx16DMf+EaOVUo/Wl8SC2wtHgdwapdcSQo=
Subject key identifier: 66:10:BB:50:1E:D0:75:E4:3D:C4:CB:F7:4D:58:5C:48:E4:4C:DB:D2
Authority key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Certificate issuer: /CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Certificate serial: 019E1EA35B002337C32B2ACC664808C78B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
Manifest number: 111D
Signing time: Wed 13 May 2026 00:01:22 +0000
Manifest this update: Wed 13 May 2026 00:01:22 +0000
Manifest next update: Thu 14 May 2026 00:01:22 +0000
Files and hashes: 1: HHixg23sq0_1vfpeN3o9-H8Y_A8.crl (hash: x7Paw8x390hLyW2CTaHLIXgLmpWYWTZ7IdpyaPIHmjo=)
2: IviSs_87UUl9qVXZnSSlcS-C_RI.asa (hash: wdYAl3BdUIB3Umq2J3hRMzmaflBh8zzGwFUl64xraYc=)
3: gB28ikvXaAy5hSbZoUNZbTzRb2w.roa (hash: VDZz7b/Ru8Catta9bi8i3h+9lOqwQj0GwnjJ6fKuQOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:5b:00:23:37:c3:2b:2a:cc:66:48:08:c7:8b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Validity
Not Before: May 13 00:01:22 2026 GMT
Not After : May 14 00:01:22 2026 GMT
Subject: CN=6610bb501ed075e43dc4cbf74d585c48e44cdbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:c3:b6:ea:80:ff:c8:eb:43:7c:24:c1:2d:
03:48:0a:77:7c:3d:f6:71:ca:ae:85:60:e7:5f:b1:
09:d6:b8:24:9c:b6:55:5e:17:2b:9c:73:a5:5c:ae:
5f:08:83:99:76:2e:08:df:36:a7:c2:aa:78:2d:f1:
b1:d1:83:e5:33:cf:05:27:ce:17:72:fb:3a:58:72:
a1:6b:56:df:1f:0d:51:96:c2:f4:0b:1a:ee:a1:51:
75:57:0b:f8:f2:e8:ff:3b:f9:58:5f:84:91:ce:62:
b5:a9:bb:9b:c7:b9:dc:0d:f8:55:b1:42:3a:5b:7d:
99:1c:32:fb:77:3d:c7:e6:1e:05:c4:9d:1e:18:c3:
ac:74:23:12:79:d0:ad:8b:c6:a4:47:d2:dd:8a:7e:
00:a4:55:91:59:67:7d:59:20:96:8f:90:24:cd:8c:
da:de:64:05:7a:0f:f8:96:86:85:b1:a1:5f:35:54:
89:72:7a:dc:a6:46:84:f5:af:18:1c:7e:26:ce:4a:
a9:a2:ec:e9:63:a6:8e:a3:ad:fc:a5:6c:04:d4:8d:
16:04:c6:c3:24:21:19:f7:22:26:af:fc:70:21:db:
f6:a9:1d:0b:0d:34:09:eb:05:84:ae:a0:f2:0a:f0:
9a:2e:a9:17:9a:d4:74:5a:ea:c8:07:4b:50:e7:c2:
53:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:10:BB:50:1E:D0:75:E4:3D:C4:CB:F7:4D:58:5C:48:E4:4C:DB:D2
X509v3 Authority Key Identifier:
keyid:1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:91:2b:c6:0c:a6:7d:33:8e:6c:bc:f8:8d:8e:9f:47:da:eb:
e1:08:26:82:1d:eb:2b:10:6d:1c:b2:f3:21:82:2d:f5:29:86:
db:11:71:fd:b9:31:4e:8e:fd:d0:b5:a6:64:85:d1:c1:b7:0c:
43:d9:eb:1d:88:ec:85:db:92:66:a8:86:ed:d0:a4:2e:98:09:
ad:5f:bb:be:5d:3b:5a:ac:21:dd:82:02:db:47:bd:b3:61:c1:
73:0e:a1:f8:b0:46:24:39:f7:7f:9d:64:99:31:38:11:3b:28:
5c:f4:8e:71:7c:00:f5:40:40:84:2d:a5:32:25:ff:b9:9b:0b:
31:4c:54:ac:22:09:d3:e3:3d:e2:db:ba:32:ef:69:7a:08:60:
96:2f:9d:60:d8:38:50:ff:13:54:e2:ed:47:37:0a:74:e0:c8:
b0:62:10:01:d6:0d:39:7e:13:c3:ec:42:ad:ee:ff:49:5a:94:
28:ba:0f:cf:9b:49:f5:df:ec:91:51:c4:75:89:23:22:fd:d0:
11:2d:83:3d:97:42:ef:a8:01:a9:8d:92:c3:f7:47:b4:a4:38:
8f:87:9d:3f:7d:12:8a:de:18:85:60:a1:5d:3e:3e:6a:dc:c5:
1b:1a:b4:02:31:b0:a3:07:4d:c1:b7:de:e3:3d:09:66:dd:c6:
26:65:85:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo1sAIzfDKyrMZkgIx4t4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNzhiMTgzNmRlY2FiNGZmNWJkZmE1ZTM3N2EzZGY4N2Yx
OGZjMGYwHhcNMjYwNTEzMDAwMTIyWhcNMjYwNTE0MDAwMTIyWjAzMTEwLwYDVQQD
Eyg2NjEwYmI1MDFlZDA3NWU0M2RjNGNiZjc0ZDU4NWM0OGU0NGNkYmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWzDtuqA/8jrQ3wkwS0DSAp3fD32
ccquhWDnX7EJ1rgknLZVXhcrnHOlXK5fCIOZdi4I3zanwqp4LfGx0YPlM88FJ84X
cvs6WHKha1bfHw1RlsL0CxruoVF1Vwv48uj/O/lYX4SRzmK1qbubx7ncDfhVsUI6
W32ZHDL7dz3H5h4FxJ0eGMOsdCMSedCti8akR9Ldin4ApFWRWWd9WSCWj5AkzYza
3mQFeg/4loaFsaFfNVSJcnrcpkaE9a8YHH4mzkqpouzpY6aOo638pWwE1I0WBMbD
JCEZ9yImr/xwIdv2qR0LDTQJ6wWErqDyCvCaLqkXmtR0WurIB0tQ58JTRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYQu1Ae0HXkPcTL901YXEjkTNvSMB8GA1UdIwQY
MBaAFBx4sYNt7KtP9b36Xjd6Pfh/GPwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhpeGcyM3NxMF8xdmZwZU4zbzktSDhZX0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jNjE1MmQtMWM5MC00MGNjLWEyMDYt
ZWMzY2IzNmQxMDI2LzEvSEhpeGcyM3NxMF8xdmZwZU4zbzktSDhZX0E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9jNjE1MmQtMWM5MC00MGNjLWEyMDYtZWMzY2IzNmQxMDI2
LzEvSEhpeGcyM3NxMF8xdmZwZU4zbzktSDhZX0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpErxgym
fTOObLz4jY6fR9rr4Qgmgh3rKxBtHLLzIYIt9SmG2xFx/bkxTo790LWmZIXRwbcM
Q9nrHYjshduSZqiG7dCkLpgJrV+7vl07Wqwh3YIC20e9s2HBcw6h+LBGJDn3f51k
mTE4ETsoXPSOcXwA9UBAhC2lMiX/uZsLMUxUrCIJ0+M94tu6Mu9peghgli+dYNg4
UP8TVOLtRzcKdODIsGIQAdYNOX4Tw+xCre7/SVqUKLoPz5tJ9d/skVHEdYkjIv3Q
ES2DPZdC76gBqY2Sw/dHtKQ4j4edP30Sit4YhWChXT4+atzFGxq0AjGwowdNwbfe
4z0JZt3GJmWFqw==
-----END CERTIFICATE-----
Generated at Wed May 13 06:51:35 2026 by rpki-client