Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
File: hxv5w80rNkB9-9l2-4SiEZeg6qE.mft (raw, json)
Hash identifier: 5Z2HG5/P5lU9Vr701LgtSYC4o0SJTS7mx1Ew8Cb5gF0=
Subject key identifier: 17:BC:7C:D7:6B:80:EA:E8:C1:6B:32:E7:B7:62:9C:A5:DC:30:80:2B
Authority key identifier: 87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1
Certificate issuer: /CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
Certificate serial: 019D38D33F203E0AD8D489621F8C41185129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 09:01:01 +0000
Manifest this update: Sun 29 Mar 2026 09:01:01 +0000
Manifest next update: Mon 30 Mar 2026 09:01:01 +0000
Files and hashes: 1: hxv5w80rNkB9-9l2-4SiEZeg6qE.crl (hash: 2dL1SfEfI+Slqxy+HwUwz5GNuy7m+3dlKLt4N2bVQgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3f:20:3e:0a:d8:d4:89:62:1f:8c:41:18:51:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
Validity
Not Before: Mar 29 09:01:01 2026 GMT
Not After : Mar 30 09:01:01 2026 GMT
Subject: CN=17bc7cd76b80eae8c16b32e7b7629ca5dc30802b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:20:6d:12:37:79:61:3a:e3:29:6f:6c:cc:a0:
e8:92:6d:40:56:cf:6d:d2:39:04:22:3c:fa:b5:86:
34:a9:d7:2e:43:13:38:80:f3:59:d1:42:93:f4:0a:
0b:7e:3b:58:1e:99:70:1e:ff:ad:cc:73:12:46:43:
34:1e:c3:5a:cd:66:21:8e:44:d1:a7:b9:16:a7:0c:
c0:15:25:0e:95:2f:fb:a6:30:23:63:c2:ac:6f:f5:
d6:3c:22:7b:c8:83:ce:c0:42:60:6f:cb:41:0d:71:
2d:4f:1b:ad:8c:b4:c2:f3:da:6c:bc:49:63:c0:b9:
20:a2:db:bd:25:94:1d:d9:4c:51:f7:8b:8f:8a:c8:
8d:ab:12:02:cf:43:a2:1a:f8:10:eb:b6:f9:e1:e8:
49:f6:ab:5c:18:ac:32:c8:1d:c1:36:10:7d:11:6d:
8e:ad:e6:d7:15:b4:e8:5a:d8:58:a9:d2:c6:e1:2d:
ff:de:99:43:16:9b:5c:0a:92:5b:84:4b:20:17:5a:
1c:46:47:ad:0a:7e:12:89:dd:cf:d6:33:1f:eb:71:
aa:cf:89:bf:3d:d3:16:c9:eb:27:2d:41:05:f4:2b:
2d:c9:e6:45:f2:9b:d8:e9:a1:89:60:50:d4:a7:f9:
e1:de:8b:fb:52:a9:51:e9:09:f1:1c:df:f1:0c:56:
8f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BC:7C:D7:6B:80:EA:E8:C1:6B:32:E7:B7:62:9C:A5:DC:30:80:2B
X509v3 Authority Key Identifier:
keyid:87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d5:b6:fc:45:64:48:07:30:21:0e:0a:3a:98:e6:f8:1e:b7:
4d:f5:3c:f2:c1:29:c8:f5:13:6f:e3:88:d1:6c:1c:2b:d6:7e:
d1:0e:36:57:51:38:8f:cf:0b:76:20:a7:86:e1:75:e9:e2:4e:
79:2c:6e:4a:12:15:23:a2:04:87:5d:58:4e:f0:69:f3:59:99:
a5:2c:74:f6:9a:19:2e:90:2d:06:c8:7c:44:3b:f2:6b:67:8f:
17:46:d8:2a:37:8f:7a:2d:05:27:17:2e:b1:6d:58:1d:e4:dd:
50:6b:9a:46:93:04:11:15:bb:ad:a2:78:49:88:75:dd:de:8d:
69:61:60:ac:b2:db:04:87:99:b6:e1:30:f4:07:ac:c7:de:9b:
d0:2b:f9:26:1d:46:cd:37:63:2d:78:6e:a5:cc:65:d6:7e:28:
84:8e:ff:f7:e6:b3:d3:f0:1a:e6:e3:f1:c6:23:f6:95:4e:fa:
ea:a1:71:b0:16:2d:f2:49:08:d9:08:54:4a:46:7a:4f:5d:2c:
d5:54:31:da:b3:17:a0:b7:59:39:88:88:3c:7c:dd:bf:c6:a3:
c0:8c:d7:5e:ed:f6:17:04:a4:36:6a:76:fb:f6:5a:7f:e3:48:
22:17:e3:89:fd:40:e5:17:03:1f:0f:de:6d:5c:17:2d:d3:ef:
fe:28:48:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:41 2026 by rpki-client