Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
File: hhxnvbbYwjD820J6n3G4ATWHL8I.mft (raw, json)
Hash identifier: nkcMq1Jiuf5zb6ySj8+0XugYBnTqDfryIrhuid907hI=
Subject key identifier: 43:22:6D:65:96:98:90:43:11:88:96:8A:89:03:0C:0B:79:6C:CD:73
Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Certificate serial: 01A1807474FA684B29B9DD840E9B812BD3D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
Manifest number: 1ACA
Signing time: Wed 28 Oct 2026 03:01:18 +0000
Manifest this update: Wed 28 Oct 2026 03:01:18 +0000
Manifest next update: Thu 29 Oct 2026 03:01:18 +0000
Files and hashes: 1: Cx3L6stT48ESFPU7dsSwev_71rM.roa (hash: qfJbE21IlMxNOU9ikBVG55ZmDtmkEW1ywFQa88RaFu0=)
2: hhxnvbbYwjD820J6n3G4ATWHL8I.crl (hash: i92BL4EKTjsT0et7sRQ0ug/X8v39NS1Q+m6D1iw2Y7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:74:74:fa:68:4b:29:b9:dd:84:0e:9b:81:2b:d3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Validity
Not Before: Oct 28 03:01:18 2026 GMT
Not After : Oct 29 03:01:18 2026 GMT
Subject: CN=43226d65969890431188968a89030c0b796ccd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1f:48:f5:64:41:fe:05:e7:60:ae:ff:01:e9:
1a:29:39:6d:08:33:1a:c1:c9:97:7c:8c:9d:8f:49:
5e:81:99:5d:a9:05:f7:be:2e:58:d9:4d:f5:9f:56:
9c:2c:83:21:ea:30:d5:71:cd:84:9c:96:01:f6:03:
a1:f5:9d:4e:52:06:91:4f:a7:ec:ba:4e:28:0f:5c:
a0:cc:63:e2:4a:35:18:f2:41:c7:d7:02:98:5d:22:
fe:f7:41:1f:cb:7d:d4:46:78:6b:fa:94:7f:02:b0:
7a:0a:42:cd:12:fe:f5:65:40:03:ef:40:4f:74:77:
a5:96:d6:bf:3f:8d:ed:da:61:ef:75:c0:a0:d2:af:
05:7a:52:9c:24:fd:b8:12:25:57:77:f8:3a:5c:92:
fe:94:f0:7b:5b:17:51:91:02:cf:fb:4e:00:34:c7:
9f:2d:ad:7c:f5:c8:61:36:c5:e6:0b:78:7a:e9:87:
95:38:a4:b3:99:1c:52:be:d9:93:f9:61:b0:1f:42:
20:44:79:21:da:2e:1f:56:d3:1c:3d:24:b6:34:fb:
cf:1c:da:a4:f6:c9:36:50:16:8d:c0:8d:52:0f:01:
7c:16:40:51:3d:0e:fa:8e:95:e9:31:ae:f4:8a:b9:
41:c2:c5:15:79:d5:ac:3d:07:3a:a5:4e:4c:be:1f:
55:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:22:6D:65:96:98:90:43:11:88:96:8A:89:03:0C:0B:79:6C:CD:73
X509v3 Authority Key Identifier:
keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:90:ff:ad:30:43:24:a7:d3:69:cc:a8:85:d0:03:88:85:04:
95:83:e9:1b:77:43:fd:e0:26:7d:71:c2:d7:81:77:76:00:1d:
b2:ac:44:a3:eb:a3:d9:35:33:f7:0d:5d:42:fd:f7:74:81:7e:
df:85:12:3f:f9:39:6d:65:50:7e:76:a5:78:8b:d2:f4:32:01:
06:26:fd:69:73:35:f3:ff:94:2e:4f:66:4d:3b:80:80:7a:db:
4a:54:aa:b7:21:e6:e9:34:46:27:fc:68:4a:55:b2:75:74:bd:
8a:11:86:a7:19:a9:26:78:cc:f8:80:ad:1e:d7:e9:f4:36:be:
ce:05:17:21:9d:8d:55:22:b4:60:c1:c1:2c:8c:9a:08:3c:b9:
36:75:4c:84:73:ad:04:b7:7b:7f:cc:f2:52:bf:fe:1d:a0:11:
14:1d:9e:ce:4d:95:d4:85:01:2e:62:f0:77:08:a0:83:69:07:
4e:4c:ff:33:79:2e:c8:96:1d:e7:57:e1:c1:e1:c3:4f:d8:f2:
84:9e:e6:e0:a9:ae:05:e8:92:32:c2:13:bd:96:22:61:dd:27:
7a:d3:d9:4b:e6:af:50:b0:b0:be:2d:3b:43:6d:90:42:b7:4a:
68:43:d2:7a:7b:83:f5:1f:29:45:b7:88:f7:43:e8:33:b0:20:
2b:93:ef:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:24:54 2026 by rpki-client