Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
File: HHixg23sq0_1vfpeN3o9-H8Y_A8.mft (raw, json)
Hash identifier: /GvFhd7+geund1G3xbMjw4SMXfVhYkYjQMy0nCNsu3M=
Subject key identifier: 46:EB:31:58:D2:AC:D3:64:E7:11:8B:A2:28:18:9B:4F:2A:A6:B1:49
Authority key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Certificate issuer: /CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Certificate serial: 019F8F7E015A91F01182465791D214CC31E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
Manifest number: 11DC
Signing time: Thu 23 Jul 2026 15:00:27 +0000
Manifest this update: Thu 23 Jul 2026 15:00:27 +0000
Manifest next update: Fri 24 Jul 2026 15:00:27 +0000
Files and hashes: 1: HHixg23sq0_1vfpeN3o9-H8Y_A8.crl (hash: YSIcw7ovYzpYANUcF4xRroVw0FkuEz1C71eXb7j8BXg=)
2: IviSs_87UUl9qVXZnSSlcS-C_RI.asa (hash: wdYAl3BdUIB3Umq2J3hRMzmaflBh8zzGwFUl64xraYc=)
3: gB28ikvXaAy5hSbZoUNZbTzRb2w.roa (hash: VDZz7b/Ru8Catta9bi8i3h+9lOqwQj0GwnjJ6fKuQOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:01:5a:91:f0:11:82:46:57:91:d2:14:cc:31:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Validity
Not Before: Jul 23 15:00:27 2026 GMT
Not After : Jul 24 15:00:27 2026 GMT
Subject: CN=46eb3158d2acd364e7118ba228189b4f2aa6b149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:94:1e:1e:a7:fb:ab:f6:e3:4a:f9:4c:5c:59:
1b:6f:d4:30:fb:51:40:38:76:2a:08:af:48:b2:58:
01:68:78:39:d8:c0:ab:ec:ab:db:8e:44:be:c2:93:
c4:f1:79:ee:ab:45:16:57:1b:47:99:3b:bd:90:c9:
6f:47:bf:22:56:91:3c:7a:92:1c:b1:b6:7f:c0:90:
10:30:c4:3b:19:d5:81:ea:83:1f:38:6f:de:38:59:
ff:0e:a1:17:31:40:16:16:7f:56:37:9c:72:9a:47:
b4:e5:7e:86:77:5e:f2:2f:41:df:cd:88:ab:a9:1b:
fe:5b:bd:9b:00:c2:f1:40:07:14:51:c6:c9:5c:1b:
83:09:b6:04:31:be:0e:f6:fb:4d:96:ed:56:5c:36:
9a:e0:58:05:23:98:ca:48:f2:d1:2e:10:35:99:1f:
bf:2e:43:81:fa:44:7e:37:07:4e:d3:92:0f:8c:e6:
2a:58:c2:14:25:8d:77:47:ea:fd:ee:2e:c3:f1:bf:
30:b2:16:b7:d3:ad:6a:9d:39:c5:10:2e:b2:5f:86:
e6:c8:ee:23:9c:22:63:5e:44:62:f9:37:3b:f3:63:
f0:b5:55:62:67:af:b9:3a:fa:d8:72:9b:2e:a7:8f:
86:7f:73:bc:ce:99:c8:dd:7a:19:7f:9b:96:ff:20:
08:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EB:31:58:D2:AC:D3:64:E7:11:8B:A2:28:18:9B:4F:2A:A6:B1:49
X509v3 Authority Key Identifier:
keyid:1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:af:67:69:2e:c0:c6:b1:c6:ac:86:2d:2c:da:d6:8e:41:22:
36:f8:3d:bd:91:2f:85:05:40:58:2b:6d:f5:c6:d8:48:62:f9:
64:03:c4:6d:f7:25:01:78:c8:8c:cc:3c:c7:91:20:c3:1c:ca:
73:b1:ea:6d:cb:43:02:c2:d1:c3:8e:96:da:82:43:c7:7f:ec:
99:1d:ea:57:30:e1:f9:2e:ac:22:50:08:7e:29:73:ae:ac:97:
90:bc:43:b9:56:91:1f:3b:f9:84:44:11:53:ff:9a:19:33:3a:
e0:31:a8:7f:4a:29:75:14:5e:30:f4:51:70:34:fd:b5:b2:47:
05:28:05:fa:fa:63:8f:4b:0a:79:f5:f9:28:b6:3b:c6:58:17:
16:c6:51:1b:8f:14:62:2e:82:1b:c1:81:0b:4b:49:88:64:52:
31:57:a9:10:41:ed:a4:08:03:f8:02:bc:87:90:c2:2b:87:6e:
20:8e:61:83:d4:39:e3:99:11:a9:39:03:7c:1a:01:70:22:5f:
9a:c9:f0:55:d8:71:87:e8:10:7f:a4:66:9a:ea:ed:6a:57:24:
dc:43:7a:c2:ed:b4:40:ce:a0:12:10:96:fa:07:60:a5:30:30:
76:cf:1f:d5:49:c8:d9:73:c5:3e:31:ab:88:1d:4c:4b:44:8a:
14:45:85:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:10:42 2026 by rpki-client