Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
File: hhxnvbbYwjD820J6n3G4ATWHL8I.mft (raw, json)
Hash identifier: wpYntJbBnq8zwTchhEO/XiZ4dilNv3CMkTHoWB1YWZY=
Subject key identifier: AC:96:DD:3B:23:8A:F7:CE:BB:20:7D:5D:AD:C0:69:65:88:CF:3A:09
Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Certificate serial: 019CE47EDCC78936DF9944720A0991D3F3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 00:00:45 +0000
Manifest this update: Fri 13 Mar 2026 00:00:45 +0000
Manifest next update: Sat 14 Mar 2026 00:00:45 +0000
Files and hashes: 1: Cx3L6stT48ESFPU7dsSwev_71rM.roa (hash: qfJbE21IlMxNOU9ikBVG55ZmDtmkEW1ywFQa88RaFu0=)
2: hhxnvbbYwjD820J6n3G4ATWHL8I.crl (hash: mtteadanHsN81QC0OVEo4DoZvBoIwz2zl4Ilwd72/74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7e:dc:c7:89:36:df:99:44:72:0a:09:91:d3:f3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Validity
Not Before: Mar 13 00:00:45 2026 GMT
Not After : Mar 14 00:00:45 2026 GMT
Subject: CN=ac96dd3b238af7cebb207d5dadc0696588cf3a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a9:93:0d:f1:91:ef:97:f6:27:c0:0f:5a:9e:
a0:d1:32:e4:4c:ab:c7:44:02:83:51:a6:af:a1:0b:
e9:6b:2f:b8:ad:aa:8e:6e:55:bb:55:fc:cc:93:68:
44:a6:cf:a0:0e:b6:03:46:a8:15:6e:83:75:ae:d3:
4f:4f:c6:d4:c4:f6:ae:bd:4b:71:77:3a:8a:f3:56:
8d:74:6b:39:05:4e:92:db:b2:83:ca:c5:94:e0:e7:
64:b9:61:8f:22:bd:d4:f0:dc:0a:a0:5c:36:cd:3a:
c7:80:5d:1c:52:d6:4a:38:23:0e:2b:dd:3d:23:25:
6d:c8:e3:2c:42:fb:d9:c5:b9:62:36:37:c4:ef:70:
fb:2b:0f:91:40:8b:fc:fb:e8:8b:23:33:f9:a4:13:
d2:de:32:6c:e4:a2:72:e9:50:5a:74:d8:12:91:63:
85:da:b9:00:44:03:12:a2:17:22:f1:e5:70:1f:cc:
52:8c:63:c2:36:8e:88:b2:41:6b:a0:58:1f:38:93:
b5:ab:2d:69:11:03:8e:dc:d2:3d:67:e2:17:78:aa:
ee:7b:6b:02:6c:60:bf:71:01:fd:6b:61:eb:89:e8:
f7:64:dc:75:a0:49:cc:e9:66:fb:c0:7c:ef:f9:d2:
c9:3f:cc:f9:4b:94:7b:67:ce:cf:60:8e:d3:11:54:
79:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:96:DD:3B:23:8A:F7:CE:BB:20:7D:5D:AD:C0:69:65:88:CF:3A:09
X509v3 Authority Key Identifier:
keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a2:b2:f0:65:a0:2a:0e:be:45:08:d9:8d:9a:94:46:6e:0c:
f8:e9:f2:78:b0:e4:95:e6:fa:ca:a6:6a:23:36:63:32:b6:58:
2e:7e:db:d3:96:b6:1b:1d:c8:88:e8:2c:d2:34:ed:00:09:c9:
61:e6:77:75:2b:57:b7:af:6c:43:de:c6:06:48:8d:68:0e:be:
95:ce:7b:7c:b7:70:b1:c6:12:13:9a:4c:bf:49:cf:6f:1b:17:
63:4f:0f:ec:8f:77:48:07:a3:cb:94:4c:63:12:62:8f:1a:c9:
a0:20:86:fb:a4:ef:56:e5:67:35:54:ea:19:7c:6c:d7:02:85:
f7:7f:17:a0:26:7d:da:f5:b5:06:25:1a:e2:ec:c2:ef:3e:0a:
f8:48:39:34:11:66:29:4c:e0:a9:7f:df:88:11:6b:a6:d0:b6:
1d:7e:5e:d1:eb:d5:33:c2:09:b8:a8:7c:1e:f5:7a:a3:e9:da:
38:65:69:99:d2:e7:cc:d6:ea:00:85:b4:81:ce:bf:05:20:af:
6e:0c:00:25:85:77:a0:43:e4:6e:32:be:23:9c:ea:bc:b8:b9:
2c:e3:30:2f:83:13:29:25:87:e7:3e:79:31:8f:d8:26:04:54:
4c:7e:7a:34:b6:e3:ff:26:05:d3:3b:ac:a7:7e:ed:68:cd:12:
5c:d2:3a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:25:51 2026 by rpki-client