Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
File: hxB-P9m5S0s25qjzcOhlCn9X5sM.mft (raw, json)
Hash identifier: XEuwSpiaGypJWNdK1TKKHAY6+xyGE+0Jveg2+vkOfNE=
Subject key identifier: 83:45:73:8D:E1:C1:A0:E0:87:73:BF:73:D8:17:FF:3A:92:A7:68:A0
Authority key identifier: 87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
Certificate issuer: /CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Certificate serial: 019D39407EBB96ECD86C320AE171A08BA3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 11:00:21 +0000
Manifest this update: Sun 29 Mar 2026 11:00:21 +0000
Manifest next update: Mon 30 Mar 2026 11:00:21 +0000
Files and hashes: 1: 0HF7W4kcPQAPpdf6IKBVke2daLo.roa (hash: ExfRmSPaStPYRpsa/vvn6ljkkYwEx3sjxTDf4lBvVfo=)
2: hIl9YwGP9KNNYc-kWa9ByhnFFMw.roa (hash: k+CEky46uUg1wUDtSRfbPi4iQjpsDQmTlW/NwFlLWDI=)
3: hxB-P9m5S0s25qjzcOhlCn9X5sM.crl (hash: sQm5yezEeQ0gGc7F+sL+t0CeAUNbqaFbIAt0q1Xfabs=)
4: lltq5u-SeWoxH2Rfx7VDHzLu7aA.roa (hash: 7tYsidyr0RJ/K+oNpq6hH3jgwmAvhIj3TNXLWptDGp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:7e:bb:96:ec:d8:6c:32:0a:e1:71:a0:8b:a3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Validity
Not Before: Mar 29 11:00:21 2026 GMT
Not After : Mar 30 11:00:21 2026 GMT
Subject: CN=8345738de1c1a0e08773bf73d817ff3a92a768a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:8c:8c:45:1b:95:b0:39:93:14:90:00:bf:
44:b2:05:db:b9:af:7d:16:c5:5a:6f:1f:6c:e9:80:
66:26:bd:2d:8b:76:e0:db:30:51:86:11:a5:db:df:
36:b6:95:48:70:c0:bd:c4:0d:e1:51:29:94:4e:29:
52:4b:b0:14:2b:14:c4:26:e8:27:be:05:ac:f5:5b:
6c:fe:df:a5:e8:e1:d2:ed:c8:82:6c:a6:0f:4a:40:
f8:19:80:1e:5d:03:bd:8a:ae:1a:41:cf:63:ab:4a:
e9:3a:71:d1:5e:ba:53:9f:fa:cd:17:9c:91:01:c1:
89:76:69:0e:d6:e1:b1:11:62:73:9b:e0:6b:9e:b6:
ae:db:9d:7b:84:e5:ec:a6:25:84:97:60:dc:05:a2:
7c:ec:47:0f:e2:e0:df:8d:b9:f3:3b:8d:cb:54:db:
a5:1d:58:3c:d8:4d:da:15:e9:d8:9e:ac:17:a6:70:
b6:21:51:21:7c:83:75:00:86:65:46:65:90:07:97:
2e:77:c9:51:45:90:55:68:0d:52:c2:f4:54:4c:82:
12:8b:5e:f9:b8:dc:d7:d8:de:c2:1e:bd:ce:15:96:
c1:35:f9:5e:c6:7f:f7:24:cd:ba:e0:a4:c6:07:23:
14:28:4f:26:a8:bf:e1:16:95:ca:6c:e0:8f:ac:3e:
b9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:45:73:8D:E1:C1:A0:E0:87:73:BF:73:D8:17:FF:3A:92:A7:68:A0
X509v3 Authority Key Identifier:
keyid:87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e3:e1:4c:df:4d:d8:ba:11:99:ec:11:e5:b2:ec:4a:d4:28:
b7:4d:c2:6a:6e:0c:c7:46:4f:84:8e:77:e2:73:11:fd:64:88:
b3:24:2a:01:99:91:53:43:03:19:37:97:1d:ee:12:8c:e8:4e:
45:4b:94:f5:27:72:94:2c:59:94:dd:86:a6:71:a2:78:64:34:
77:89:ea:9f:f4:8e:f5:56:b3:d7:06:cd:f1:42:cf:b1:55:3e:
22:47:c1:83:5b:e9:e9:dd:22:af:17:55:9f:0c:97:1d:19:a8:
7d:fd:f7:56:fe:b3:eb:93:64:4f:b4:aa:d8:1e:18:e2:80:f5:
ba:b9:28:2e:6b:e7:4f:82:c2:c4:ef:a6:0b:8b:1b:c0:93:68:
85:9c:b4:0d:a1:fd:8c:01:16:a3:22:8e:b4:da:bd:a2:90:fc:
d5:95:2d:5c:4f:ad:54:dc:db:e3:8f:3d:76:4b:f6:ac:0c:fc:
94:10:fa:6e:8a:2f:59:3f:14:0c:ea:02:fa:22:b8:db:05:43:
d0:fb:6f:1a:ed:f7:47:f9:86:a1:fe:4a:57:bf:ae:f4:3b:6a:
6c:df:43:70:4d:1e:0a:91:9c:b1:f2:ec:51:12:ca:93:ac:3d:
09:a4:99:51:38:68:61:3d:f2:10:7a:5e:24:b5:b3:39:58:c9:
59:dd:19:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:37 2026 by rpki-client