Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
File: HHixg23sq0_1vfpeN3o9-H8Y_A8.mft (raw, json)
Hash identifier: o66RPYWADpKPmq6THg3JS2/8YRkcmJtACpmtlK+AuKw=
Subject key identifier: 3A:2B:C1:19:7D:AF:77:4F:59:6F:21:E7:66:E9:D3:7E:5B:D8:FF:85
Authority key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Certificate issuer: /CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Certificate serial: 019D2BBCBDEDF11C7B859AB1C0429A5E015A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
Manifest number: 109F
Signing time: Thu 26 Mar 2026 20:01:22 +0000
Manifest this update: Thu 26 Mar 2026 20:01:22 +0000
Manifest next update: Fri 27 Mar 2026 20:01:22 +0000
Files and hashes: 1: HHixg23sq0_1vfpeN3o9-H8Y_A8.crl (hash: BaYbI75YjNrYBKFGUOSV3OPenKYKY97PBtGMYE4rEpU=)
2: gB28ikvXaAy5hSbZoUNZbTzRb2w.roa (hash: VDZz7b/Ru8Catta9bi8i3h+9lOqwQj0GwnjJ6fKuQOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bc:bd:ed:f1:1c:7b:85:9a:b1:c0:42:9a:5e:01:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Validity
Not Before: Mar 26 20:01:22 2026 GMT
Not After : Mar 27 20:01:22 2026 GMT
Subject: CN=3a2bc1197daf774f596f21e766e9d37e5bd8ff85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:79:c5:73:b5:80:a7:74:a0:81:2f:10:6d:4c:
c9:cb:e9:f5:dc:ea:ab:7f:0a:5e:5a:d4:e7:55:42:
48:85:73:89:0c:23:8c:a2:29:87:af:22:6a:55:29:
d6:c1:e9:48:27:8d:95:4c:c4:78:db:43:3c:5f:f1:
d4:26:ae:04:a7:1f:b2:a1:61:3d:20:f7:07:b6:4a:
56:4c:91:da:bc:e7:1c:2b:97:bc:c8:92:3b:ed:e1:
64:41:f8:36:c9:d1:c8:cf:d1:c9:e1:c2:f8:59:93:
7f:06:18:37:59:9b:d8:82:ca:4a:cc:8e:b1:cd:f4:
15:04:82:d4:d0:3e:0a:35:2a:fa:5a:3f:84:4b:1e:
4e:3b:ef:4d:79:22:d6:19:7e:1e:92:c1:31:9d:d4:
6e:3a:8c:e9:4c:f3:c8:54:12:e1:51:52:8f:07:84:
27:ae:bb:21:db:bb:ef:1b:82:a1:9e:be:ea:91:54:
44:0e:bf:3f:ad:3b:e7:7e:37:48:55:5b:1e:b1:e9:
f8:29:19:fa:b5:e4:a3:4e:b2:cd:94:37:ac:17:1a:
2d:f6:c8:48:0c:a7:e9:22:e1:ff:60:1f:92:37:49:
76:a8:4b:fc:b4:21:09:aa:c0:77:4c:35:bd:fa:c3:
1a:41:a7:dd:49:60:f6:6e:46:12:42:34:0c:fb:6c:
01:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2B:C1:19:7D:AF:77:4F:59:6F:21:E7:66:E9:D3:7E:5B:D8:FF:85
X509v3 Authority Key Identifier:
keyid:1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f0:49:a9:91:5a:f3:d8:9b:51:36:7a:48:32:7a:21:c9:a7:
85:1b:ad:ec:dc:be:8a:2d:64:7c:47:23:b8:3a:0d:1c:37:16:
33:0b:cc:43:e9:e6:a2:01:33:60:1d:ce:4c:59:1e:52:f6:39:
2d:7b:ab:35:6a:f5:d7:93:0d:0c:78:da:ab:2a:c6:c4:7b:65:
04:4e:a4:17:1b:aa:7f:25:79:7f:e9:49:9b:22:c6:e5:9f:1f:
98:0a:27:57:eb:98:a4:30:6e:c8:c5:1a:2e:82:f9:c4:00:ec:
89:51:4f:9f:9e:d7:12:ff:52:e1:1d:6b:b5:38:0a:9a:2e:7d:
2a:c8:3e:e5:75:96:e5:40:62:2c:50:29:dc:3b:33:f2:e9:f7:
bb:49:21:40:df:da:b5:b7:a5:11:d4:c0:71:d2:a5:e0:71:cb:
0c:3f:17:a4:44:72:6c:07:18:a6:84:e6:51:10:92:57:54:44:
33:ec:ae:9d:27:ff:fc:89:0c:4f:b6:92:96:3b:9f:71:93:33:
92:3b:4c:90:54:b5:ec:38:f8:c7:8b:a4:ba:50:52:fe:8a:7a:
fc:c4:9d:6a:ab:b9:65:07:d8:ef:69:49:07:45:d3:8f:5f:ce:
66:5d:2f:4e:1e:4b:16:d1:88:6e:04:72:78:03:3c:2f:79:14:
53:a2:01:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:00:48 2026 by rpki-client