Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
File: HHixg23sq0_1vfpeN3o9-H8Y_A8.mft (raw, json)
Hash identifier: ncPciaPYjyu669OPUZnK7/RRyiJN3smp/CwSOEx/4zg=
Subject key identifier: C4:55:F5:14:E4:A4:78:2B:81:FA:AF:66:07:29:AA:D1:E0:8C:AF:5C
Authority key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Certificate issuer: /CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Certificate serial: 01A113AA5B18DE524975C29BA59E3205AA6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
Manifest number: 12A5
Signing time: Wed 07 Oct 2026 00:01:33 +0000
Manifest this update: Wed 07 Oct 2026 00:01:33 +0000
Manifest next update: Thu 08 Oct 2026 00:01:33 +0000
Files and hashes: 1: HHixg23sq0_1vfpeN3o9-H8Y_A8.crl (hash: TemGHRzseqK/4Vz6K2FfnwYggJhg28Wnj5T9BWrkBxI=)
2: IviSs_87UUl9qVXZnSSlcS-C_RI.asa (hash: wdYAl3BdUIB3Umq2J3hRMzmaflBh8zzGwFUl64xraYc=)
3: gB28ikvXaAy5hSbZoUNZbTzRb2w.roa (hash: VDZz7b/Ru8Catta9bi8i3h+9lOqwQj0GwnjJ6fKuQOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 00:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:aa:5b:18:de:52:49:75:c2:9b:a5:9e:32:05:aa:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Validity
Not Before: Oct 7 00:01:33 2026 GMT
Not After : Oct 8 00:01:33 2026 GMT
Subject: CN=c455f514e4a4782b81faaf660729aad1e08caf5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:79:31:0f:bb:85:25:17:a4:f5:45:26:22:
7e:fd:f7:27:95:88:48:61:20:c4:06:4c:71:ad:ce:
8d:f7:9d:63:85:de:73:b9:10:e4:19:4c:4c:a5:a5:
0d:62:20:2b:ac:d5:e2:9e:67:e8:ba:b0:23:23:4e:
cc:7c:d5:b2:d2:aa:4a:53:05:8e:1b:88:b9:98:c1:
fc:b3:ad:05:ce:5c:dc:9d:99:3a:e6:8c:00:30:2c:
1b:50:dc:d0:04:74:6c:ef:f6:12:5a:1c:3a:98:23:
c5:84:60:c3:a5:d3:2d:d5:c7:fd:ce:64:83:ca:1f:
55:bd:bd:94:80:e2:c7:80:a8:76:42:d2:2d:a7:5b:
8a:5d:83:85:a6:dc:fe:66:56:0e:07:90:bc:a0:f3:
a7:e0:90:eb:d0:af:1c:9f:d1:61:26:d7:72:97:f0:
f6:7e:d6:c5:a6:b9:25:82:bf:0d:e3:e5:4b:41:ef:
82:71:4a:43:34:4a:31:e9:df:5d:e2:4c:81:b9:4f:
69:9d:b9:91:f6:44:f3:c0:13:a9:12:69:a7:fe:fa:
10:3e:b9:42:ee:e5:85:4b:36:2a:ff:e2:d8:d6:21:
74:dd:0b:66:1c:df:0c:44:e3:61:60:6f:87:20:27:
34:29:42:9e:5a:97:1d:be:6e:28:97:02:f8:7c:7f:
cb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:55:F5:14:E4:A4:78:2B:81:FA:AF:66:07:29:AA:D1:E0:8C:AF:5C
X509v3 Authority Key Identifier:
keyid:1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:04:40:a8:09:7f:33:44:06:1b:13:8e:2a:28:57:f2:9f:7e:
b4:74:07:8c:1b:c6:9d:bc:13:63:07:5c:52:85:1e:67:94:d2:
47:7e:ab:ac:0a:be:e7:e8:22:a1:d4:52:61:a3:00:61:90:05:
94:df:76:c2:47:b3:11:24:e2:6f:c1:af:ec:76:e2:5a:60:9a:
31:ff:d4:e9:79:db:4e:7e:92:f5:de:c0:a1:5e:68:26:d8:77:
0a:fb:81:c5:82:b4:a2:c5:4d:22:cf:0a:f8:28:36:91:52:62:
33:d2:35:e1:0f:71:34:94:e0:ea:3d:62:35:0e:44:25:b7:62:
ea:68:a0:b7:63:9e:1b:bc:fa:80:e6:34:cd:0d:32:a0:30:34:
ca:72:a8:c7:26:82:91:1d:8a:ad:5d:87:24:c4:7c:6c:db:7c:
b6:f6:68:96:20:cb:f6:bf:f9:b6:78:73:36:0f:67:61:17:24:
bc:27:c2:30:7d:11:4c:4b:6e:d5:50:bf:cf:8b:a3:cb:28:3b:
8f:6a:89:1c:5e:6f:88:4e:72:a8:37:80:82:90:c4:f9:65:93:
73:e9:72:02:7f:15:97:3f:2a:ca:0d:11:e2:0d:99:93:23:f4:
57:b3:78:92:ed:33:ee:ac:f4:f7:7e:c2:0a:8b:b6:b0:02:94:
90:21:44:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaETqlsY3lJJdcKbpZ4yBaptMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNzhiMTgzNmRlY2FiNGZmNWJkZmE1ZTM3N2EzZGY4N2Yx
OGZjMGYwHhcNMjYxMDA3MDAwMTMzWhcNMjYxMDA4MDAwMTMzWjAzMTEwLwYDVQQD
EyhjNDU1ZjUxNGU0YTQ3ODJiODFmYWFmNjYwNzI5YWFkMWUwOGNhZjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+t5MQ+7hSUXpPVFJiJ+/fcnlYhI
YSDEBkxxrc6N951jhd5zuRDkGUxMpaUNYiArrNXinmfourAjI07MfNWy0qpKUwWO
G4i5mMH8s60FzlzcnZk65owAMCwbUNzQBHRs7/YSWhw6mCPFhGDDpdMt1cf9zmSD
yh9Vvb2UgOLHgKh2QtItp1uKXYOFptz+ZlYOB5C8oPOn4JDr0K8cn9FhJtdyl/D2
ftbFprklgr8N4+VLQe+CcUpDNEox6d9d4kyBuU9pnbmR9kTzwBOpEmmn/voQPrlC
7uWFSzYq/+LY1iF03QtmHN8MRONhYG+HICc0KUKeWpcdvm4olwL4fH/LtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRV9RTkpHgrgfqvZgcpqtHgjK9cMB8GA1UdIwQY
MBaAFBx4sYNt7KtP9b36Xjd6Pfh/GPwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhpeGcyM3NxMF8xdmZwZU4zbzktSDhZX0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jNjE1MmQtMWM5MC00MGNjLWEyMDYt
ZWMzY2IzNmQxMDI2LzEvSEhpeGcyM3NxMF8xdmZwZU4zbzktSDhZX0E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9jNjE1MmQtMWM5MC00MGNjLWEyMDYtZWMzY2IzNmQxMDI2
LzEvSEhpeGcyM3NxMF8xdmZwZU4zbzktSDhZX0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEwRAqAl/
M0QGGxOOKihX8p9+tHQHjBvGnbwTYwdcUoUeZ5TSR36rrAq+5+giodRSYaMAYZAF
lN92wkezESTib8Gv7HbiWmCaMf/U6XnbTn6S9d7AoV5oJth3CvuBxYK0osVNIs8K
+Cg2kVJiM9I14Q9xNJTg6j1iNQ5EJbdi6migt2OeG7z6gOY0zQ0yoDA0ynKoxyaC
kR2KrV2HJMR8bNt8tvZoliDL9r/5tnhzNg9nYRckvCfCMH0RTEtu1VC/z4ujyyg7
j2qJHF5viE5yqDeAgpDE+WWTc+lyAn8Vlz8qyg0R4g2ZkyP0V7N4ku0z7qz0937C
Cou2sAKUkCFEBA==
-----END CERTIFICATE-----
Generated at Wed Oct 7 09:44:16 2026 by rpki-client