Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
File: hhxnvbbYwjD820J6n3G4ATWHL8I.mft (raw, json)
Hash identifier: xhh/oyCLDdbuyPMNDWx8cdiWbF372OkAAvCEbTsEc0I=
Subject key identifier: D3:CD:F6:02:3F:7C:B4:32:33:4B:39:22:3E:7E:5D:6C:0F:DD:F4:40
Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Certificate serial: 019DCE2BD06DF4A3FFE46DCE916F7ADB79AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
Manifest number: 18E0
Signing time: Mon 27 Apr 2026 09:01:11 +0000
Manifest this update: Mon 27 Apr 2026 09:01:11 +0000
Manifest next update: Tue 28 Apr 2026 09:01:11 +0000
Files and hashes: 1: Cx3L6stT48ESFPU7dsSwev_71rM.roa (hash: qfJbE21IlMxNOU9ikBVG55ZmDtmkEW1ywFQa88RaFu0=)
2: hhxnvbbYwjD820J6n3G4ATWHL8I.crl (hash: 7vZ8WrHxEqKbKMRax7gI5sBviC+Rw86xm+z54M9kEDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:d0:6d:f4:a3:ff:e4:6d:ce:91:6f:7a:db:79:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Validity
Not Before: Apr 27 09:01:11 2026 GMT
Not After : Apr 28 09:01:11 2026 GMT
Subject: CN=d3cdf6023f7cb432334b39223e7e5d6c0fddf440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a9:b3:56:96:b1:93:05:be:4a:2d:58:d1:ca:
de:e1:52:f1:47:0d:ef:94:dc:e7:e1:b7:37:c6:2a:
23:b7:d3:cd:c9:ef:9c:43:49:16:82:65:93:99:29:
19:a6:1d:a4:ff:2d:f8:5b:09:aa:da:fe:a0:2c:6c:
55:a0:57:1b:4e:31:11:cf:32:3f:8c:a1:62:88:90:
91:6f:ad:d0:08:ef:90:98:73:03:35:21:80:fd:4f:
d5:39:51:af:cc:1c:91:23:af:79:eb:6d:d2:55:94:
7d:cd:24:dd:4c:33:38:07:bc:b2:29:b9:a9:35:68:
4a:f1:cc:01:e7:f8:34:45:6f:29:67:60:48:33:29:
18:c9:de:10:2b:38:54:8c:a1:52:f5:cc:32:87:54:
88:49:3b:92:c0:d8:18:91:15:0a:90:c2:a2:ad:3d:
fd:9e:e0:e8:43:0a:79:d7:42:67:5d:b0:b3:d0:f9:
af:14:15:1b:f5:c6:3b:34:0b:0b:0b:35:4d:27:36:
1b:89:ef:18:55:0b:6c:c1:a0:f0:bc:58:9d:9e:01:
ab:19:24:cb:48:99:39:b6:51:da:62:b5:f5:15:37:
d8:97:ec:72:b3:d6:44:df:dc:58:42:62:5f:50:66:
67:c9:90:42:e9:14:a3:53:d7:31:67:ec:f1:3e:63:
0b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CD:F6:02:3F:7C:B4:32:33:4B:39:22:3E:7E:5D:6C:0F:DD:F4:40
X509v3 Authority Key Identifier:
keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:62:1d:ad:30:81:c9:6c:08:ca:9f:d3:46:4f:3e:0b:c3:b7:
98:64:bf:ad:d7:20:bc:db:af:9a:fb:82:15:7e:0b:29:c5:9f:
52:58:78:6d:9d:28:f3:e4:0b:94:bf:81:7e:08:10:a4:cb:9e:
9b:69:cb:a7:21:6b:03:d6:60:4c:2d:69:42:3d:ef:f9:75:7f:
f2:a9:1c:bd:c7:78:09:12:90:d0:9a:94:33:fe:e3:34:ad:32:
0d:5b:a2:a7:41:aa:99:04:51:aa:d9:d1:39:fa:7c:e7:05:69:
b4:e4:ac:1b:60:83:3b:c6:09:3e:64:ed:0e:04:d5:2f:3e:65:
de:8b:05:3f:5e:8b:63:be:ff:b3:e2:a6:c1:5f:73:fe:b6:70:
15:af:71:ad:92:c4:f9:e8:24:9c:11:cd:44:47:06:f2:5f:89:
cd:b5:12:d6:01:a8:38:04:90:10:57:91:b6:ed:fd:c3:0c:4e:
0a:0f:38:79:30:61:32:3a:3d:35:06:e8:87:62:78:de:f5:9a:
e1:1d:de:91:7b:22:fc:a6:0e:42:72:0a:9e:eb:4e:28:4e:0a:
2e:a2:2a:51:94:16:1c:16:f4:bb:35:e6:86:ef:fa:03:2a:41:
2f:43:53:6e:cd:5c:c1:04:42:48:36:6c:58:8e:7e:4a:6f:0b:
1c:0a:b5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:14:35 2026 by rpki-client