Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
File: hXLVrMJRZ2mcf886G4BOoyWsTl0.mft (raw, json)
Hash identifier: Ss12rRSxFlOB4cbqNAbrpv3ereevIBSLIkvyHtqEfn4=
Subject key identifier: 16:A1:21:91:1D:4C:81:D0:94:51:65:1D:F4:CD:0F:BB:E1:E9:87:57
Authority key identifier: 85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
Certificate issuer: /CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Certificate serial: 019D265FC05C32A4FFC9ACD484D81C43E658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
Manifest number: 17B5
Signing time: Wed 25 Mar 2026 19:01:42 +0000
Manifest this update: Wed 25 Mar 2026 19:01:42 +0000
Manifest next update: Thu 26 Mar 2026 19:01:42 +0000
Files and hashes: 1: hBm5sqEsYgYzGLvahciDaWXB5tc.roa (hash: B8HbKYDNFdLFprrv9ZSAbv02c/Z7c5d/cp8eKIMZxIo=)
2: hXLVrMJRZ2mcf886G4BOoyWsTl0.crl (hash: cKDr2MRV0VqrOuQa42Gg4XM6Q1fYADkPRl3/QDQqXmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:c0:5c:32:a4:ff:c9:ac:d4:84:d8:1c:43:e6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Validity
Not Before: Mar 25 19:01:42 2026 GMT
Not After : Mar 26 19:01:42 2026 GMT
Subject: CN=16a121911d4c81d09451651df4cd0fbbe1e98757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a7:b9:e8:f6:b6:1d:80:9b:29:b5:b5:15:cd:
e8:d3:1d:60:14:97:4a:c0:18:6b:87:86:20:1b:13:
91:1f:9e:ee:08:53:74:48:61:5b:5d:f4:c0:69:a9:
cd:b8:9d:b2:60:8b:49:c5:88:b0:15:f1:60:a9:2c:
d4:16:ae:c8:a3:28:01:fd:4f:ef:74:44:22:5e:b5:
0c:1b:a7:0d:c6:3f:ce:74:66:60:23:a3:c2:d9:21:
9e:f6:f8:64:68:43:08:a6:32:5a:08:26:e5:6b:c7:
0f:b9:30:b6:cf:af:38:82:ba:aa:d2:5f:e8:79:2d:
23:3e:6e:b1:ae:32:d8:aa:9a:fe:2c:7c:e3:43:37:
76:91:b7:55:47:c4:af:e7:f7:07:7d:bb:9c:a7:72:
23:5c:cd:f0:63:e2:f7:20:71:71:db:e1:53:26:0d:
6c:12:22:4a:90:11:18:e4:c9:1a:df:4d:61:14:4d:
39:36:56:a3:30:f3:f2:ad:e1:9b:c8:df:74:1e:09:
6a:06:43:6e:0f:06:0b:e9:7d:c1:6f:d2:46:56:88:
72:51:91:0e:7a:5e:ce:ab:cd:7d:fd:e8:1b:18:61:
ff:01:67:f5:77:3a:36:3a:c1:db:64:a9:c6:33:fe:
fb:11:40:58:ce:55:01:c8:1f:8c:29:8d:a2:73:52:
e6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A1:21:91:1D:4C:81:D0:94:51:65:1D:F4:CD:0F:BB:E1:E9:87:57
X509v3 Authority Key Identifier:
keyid:85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7d:0a:e7:57:4a:6f:fd:74:42:57:3e:96:c0:cc:18:de:81:
c1:a3:dc:41:d1:b2:3a:1a:60:4b:3f:32:29:71:95:dc:a4:57:
64:1e:17:ea:08:1b:84:99:e8:9b:3c:cf:25:7a:95:6f:12:a4:
e3:4b:c5:93:d5:40:af:9e:9a:1c:55:c1:74:7d:8d:ed:33:54:
36:eb:1d:94:e9:45:9b:da:8d:78:c1:16:fb:c7:d6:8e:e3:14:
bf:c9:bd:8f:92:bf:43:bc:0a:f2:c7:e2:1e:54:2a:9b:58:12:
cf:a7:3c:3c:99:3f:25:be:bf:bc:c3:af:30:ee:cb:04:52:28:
6b:5a:78:a3:71:80:b4:f5:f1:04:7b:fe:f6:e5:64:7a:c5:38:
65:7e:23:34:95:66:33:a2:88:3b:e1:9f:a4:20:51:82:f6:6d:
5f:9d:e8:58:fe:8e:2b:2b:f4:b8:11:23:85:00:5a:09:11:31:
83:61:28:72:73:73:a8:2e:72:af:2b:3a:af:44:cd:73:bb:01:
c8:03:c3:35:9e:0d:71:0f:58:f8:c7:8f:1c:35:c5:50:61:8a:
f2:aa:ae:de:b8:14:49:47:88:da:e5:a4:b5:62:1b:e5:0e:fd:
30:ab:3a:37:06:8f:e4:58:98:76:f6:97:5f:da:00:54:eb:06:
1c:21:18:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:55 2026 by rpki-client