Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
File: HUxgeKWUHFyxV9XylXyzFNftG-0.mft (raw, json)
Hash identifier: rZh9S9xDIsmxTrubCRVJwFrfIoJspTp8q/wpD3073hs=
Subject key identifier: E0:3F:A5:5B:3A:6D:37:11:FE:89:E9:FC:E0:3B:5D:69:84:39:45:BC
Authority key identifier: 1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED
Certificate issuer: /CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed
Certificate serial: 019D382EAAB7F38AA6D5AD0FCB68A3C3A2ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
Manifest number: 0C90
Signing time: Sun 29 Mar 2026 06:01:15 +0000
Manifest this update: Sun 29 Mar 2026 06:01:15 +0000
Manifest next update: Mon 30 Mar 2026 06:01:15 +0000
Files and hashes: 1: HUxgeKWUHFyxV9XylXyzFNftG-0.crl (hash: fJ2n0B0Kwaj91UXoLWJCwuyHquJj7PUFcUZMUwBO+d8=)
2: cBCyxlvufUfGOWDilS38ttT1uvY.roa (hash: r7Dt5WSAAV3olhtKkx8/cVrUqstLuq8swjnGaqOS5no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:aa:b7:f3:8a:a6:d5:ad:0f:cb:68:a3:c3:a2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed
Validity
Not Before: Mar 29 06:01:15 2026 GMT
Not After : Mar 30 06:01:15 2026 GMT
Subject: CN=e03fa55b3a6d3711fe89e9fce03b5d69843945bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c5:98:6f:b9:03:0f:ac:dd:f5:6c:cb:1e:c2:
12:4f:d2:82:2c:86:79:98:23:44:a7:13:7e:b6:b9:
9f:08:2f:8c:bd:e2:89:2f:7a:24:30:26:a5:22:a5:
bc:0f:8a:ef:67:f6:29:59:c8:5c:94:3e:c7:c1:09:
19:2c:67:91:85:a9:d5:dc:0d:d4:d9:7f:46:c9:db:
18:3c:d5:f2:79:b6:08:ef:31:82:ca:d9:b0:3f:f6:
da:3f:67:b4:4c:4e:61:0b:2c:7a:f7:c4:df:15:bd:
73:ab:39:a0:f9:a4:36:bb:06:83:91:8a:ce:ef:59:
67:4d:85:37:66:ae:ab:39:b0:49:64:83:35:67:5d:
1c:e2:24:f7:09:72:9a:06:01:7d:a8:3c:ba:44:c7:
6a:2c:37:87:4e:d5:4a:01:42:8d:c3:c8:db:c5:2e:
dd:0b:8f:88:a0:bd:57:1b:73:37:30:05:cf:e7:8e:
d6:9c:9a:5a:91:f4:84:0d:cb:e9:42:dc:31:e2:4a:
ea:49:60:3f:b1:29:ce:a9:a8:af:19:fd:3d:34:ae:
0e:55:14:a0:56:62:9a:ec:fc:a1:33:d4:51:d2:f0:
07:79:e4:3e:65:68:cd:ea:75:58:f6:57:1a:4c:fc:
2c:63:71:0e:6c:72:97:00:7b:13:64:21:d7:13:f4:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3F:A5:5B:3A:6D:37:11:FE:89:E9:FC:E0:3B:5D:69:84:39:45:BC
X509v3 Authority Key Identifier:
keyid:1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:78:17:dd:3b:27:a8:db:2f:c8:cd:60:16:4d:59:46:a4:5b:
4c:14:5c:8c:fc:aa:3c:e3:d0:d7:43:90:78:bc:95:1e:69:9c:
f6:fe:e5:03:10:9f:9f:d2:61:12:1e:a6:7e:14:ba:19:2b:07:
d4:20:c5:00:0e:88:0e:45:c4:45:a0:78:f6:0c:8d:55:02:be:
5d:7c:58:ca:71:be:c5:67:e8:a7:d2:27:34:5e:d1:80:58:4a:
6c:8e:01:46:9e:9b:2b:fe:63:de:2f:69:35:be:ef:22:eb:01:
6d:b5:54:88:01:fd:fb:c5:40:60:2d:25:df:7b:54:9c:a4:c5:
c5:93:4c:30:52:16:8d:a3:57:3d:82:f1:71:4f:88:71:c9:e1:
50:34:f7:d9:0c:61:7c:d7:f2:bc:79:d9:97:ed:e6:e2:08:ed:
99:3e:aa:38:92:ee:4c:dc:e8:ab:95:3d:a3:6f:e9:a0:e9:aa:
f6:06:11:63:77:52:b3:63:70:a2:66:2b:e1:f6:4a:72:bc:a8:
d4:9f:4b:0f:9a:fe:93:8e:39:8b:65:75:2d:c1:c9:3f:a6:f5:
c3:33:a3:95:8e:04:82:b8:ef:74:02:a7:08:19:19:81:e4:58:
bf:70:e3:23:02:21:5b:78:2f:c1:b2:a0:bc:0e:8f:e1:ea:3f:
f8:61:82:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:03 2026 by rpki-client