Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
File: hhxnvbbYwjD820J6n3G4ATWHL8I.mft (raw, json)
Hash identifier: 2ZmZz8spyuGM1YNYJXLbM1qyJ3xw5w51alGbw8Z1tnc=
Subject key identifier: 19:18:03:F9:92:2C:4A:51:EB:2F:9C:29:9B:FB:A3:7D:56:11:8C:C5
Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Certificate serial: 019F9F965F56A82E3FF182391E41AC71C89E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
Manifest number: 19D1
Signing time: Sun 26 Jul 2026 18:00:59 +0000
Manifest this update: Sun 26 Jul 2026 18:00:59 +0000
Manifest next update: Mon 27 Jul 2026 18:00:59 +0000
Files and hashes: 1: Cx3L6stT48ESFPU7dsSwev_71rM.roa (hash: qfJbE21IlMxNOU9ikBVG55ZmDtmkEW1ywFQa88RaFu0=)
2: hhxnvbbYwjD820J6n3G4ATWHL8I.crl (hash: aIRiCsMqJp+vUeHk0P/CeTzDMIM+9IO/LSImpAy5nTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:96:5f:56:a8:2e:3f:f1:82:39:1e:41:ac:71:c8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Validity
Not Before: Jul 26 18:00:59 2026 GMT
Not After : Jul 27 18:00:59 2026 GMT
Subject: CN=191803f9922c4a51eb2f9c299bfba37d56118cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:4b:e2:aa:e6:4d:a3:e8:a9:5b:41:6d:84:
2f:44:1d:c3:f7:e9:7c:df:79:9a:95:36:c3:31:db:
8e:12:ab:7a:00:61:c4:e2:65:77:dd:a0:bf:69:53:
dc:fe:df:2b:ad:e8:70:6b:45:fa:95:0c:1b:ff:ac:
6a:84:40:01:0c:9b:2e:e0:5f:d5:5d:82:ff:51:9e:
2d:d7:77:88:65:f9:5b:fa:85:d7:32:1c:79:90:fc:
82:18:f1:3b:fe:be:67:53:aa:13:b1:f2:d0:f5:a8:
f0:1e:18:a0:51:ba:87:6a:c0:fb:88:97:37:f9:02:
ef:ae:ac:39:02:d0:e2:23:92:a0:ee:80:0b:97:b9:
40:a2:76:8b:8c:d1:f3:52:5f:87:01:a5:77:c5:e5:
0b:6f:d7:c9:bf:e2:6e:d2:55:3b:48:19:84:39:b5:
75:30:68:ba:d4:b5:04:50:0a:8f:13:24:7a:9d:9f:
68:02:7c:c2:7c:41:b2:71:bf:b8:8e:90:a3:b2:c7:
8b:2f:47:22:1b:38:e5:9c:49:4e:d3:c3:07:72:2d:
14:b9:54:61:7a:0b:2e:13:64:f4:d1:47:42:39:0b:
2a:16:d1:b1:7e:c7:0f:42:b3:dc:9a:99:b5:3d:c5:
14:64:f9:3e:44:2a:a6:aa:2c:fb:da:45:95:76:c7:
7d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:18:03:F9:92:2C:4A:51:EB:2F:9C:29:9B:FB:A3:7D:56:11:8C:C5
X509v3 Authority Key Identifier:
keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:16:8e:18:14:55:c3:42:f2:6a:be:60:f2:99:cc:86:d3:40:
3a:2b:58:05:d6:b4:00:87:34:70:d9:28:3c:a8:49:19:44:58:
6f:4c:5f:ea:22:56:b7:d5:8b:3c:c1:2a:68:25:ca:09:bf:d9:
7c:d6:7d:1d:42:d6:ba:29:2b:c0:b3:57:23:9c:2d:d1:c1:e0:
e7:71:d0:24:ee:65:65:3f:13:89:37:5e:43:a1:21:9c:e9:3e:
7c:2c:19:ff:e1:a2:fb:9e:94:26:81:a1:9d:53:c2:9f:8c:1c:
69:be:82:80:cd:3e:3e:37:d4:44:b7:c4:07:32:c5:d7:a1:ce:
34:ad:a0:e1:eb:96:ba:71:c8:15:be:c4:63:03:b3:41:39:4a:
19:16:c6:ff:f6:1c:39:f5:93:87:f5:56:d5:c6:cc:9f:ed:51:
5d:59:89:39:9b:49:4b:40:65:87:3b:a6:7f:45:4b:9e:41:94:
99:42:17:db:9b:5d:fb:6f:49:39:30:f4:01:f1:a3:eb:ef:6a:
33:61:dc:ab:d7:54:da:19:32:d0:10:a7:42:46:0b:87:a2:88:
11:7f:d2:b0:b3:a2:0c:97:26:a8:35:90:b1:f8:78:85:bd:4f:
3f:a8:87:8b:da:f3:32:ca:f0:77:3e:cd:67:aa:0b:78:d5:e2:
8c:34:78:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:28:16 2026 by rpki-client