Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
File: HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft (raw, json)
Hash identifier: TL4oTYDtfuQDmuZFTyRUGzvAQGc9t4GFHwg/vKk2gtU=
Subject key identifier: D8:DA:98:0B:13:21:84:94:44:A1:41:62:C5:D3:5A:9A:5C:D7:B5:E0
Authority key identifier: 1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A
Certificate issuer: /CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a
Certificate serial: 01A1814FF0133868062496ACE888B2404ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
Manifest number: 08C3
Signing time: Wed 28 Oct 2026 07:01:02 +0000
Manifest this update: Wed 28 Oct 2026 07:01:02 +0000
Manifest next update: Thu 29 Oct 2026 07:01:02 +0000
Files and hashes: 1: HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl (hash: fZOSX8Zwdw3riYpaQjLvL3855OIzW2SuAImQeOVIr0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:4f:f0:13:38:68:06:24:96:ac:e8:88:b2:40:4e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a
Validity
Not Before: Oct 28 07:01:02 2026 GMT
Not After : Oct 29 07:01:02 2026 GMT
Subject: CN=d8da980b1321849444a14162c5d35a9a5cd7b5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:00:7d:30:18:44:87:77:c1:18:5e:10:ef:
a8:41:a4:55:ee:c2:b9:5b:39:44:14:8f:53:62:13:
10:17:75:c7:59:08:0a:bd:98:ff:95:9e:6e:f8:81:
bc:5c:51:fb:19:30:b8:d4:1b:ae:d0:88:89:66:df:
f2:57:cc:d3:81:ba:e6:6b:92:b3:22:45:f2:ae:e3:
b4:73:db:87:6f:ac:d4:da:78:18:84:8a:66:ff:3f:
f4:44:95:52:fc:88:ba:6d:af:5e:e2:d7:86:72:e3:
e1:83:d4:80:7f:c5:7a:ec:02:5e:7c:0c:40:50:55:
f1:e8:03:78:d2:a1:72:02:c0:88:ef:88:27:72:28:
4b:a7:15:aa:d5:d4:c1:25:27:d7:a3:e0:41:23:c2:
c0:e6:3f:65:10:cd:da:9b:fe:20:b9:e4:43:1a:58:
04:8b:5a:eb:1f:cd:fc:b6:78:20:f0:e4:31:79:bd:
79:ca:82:a8:8e:7d:73:7f:42:a5:6c:ec:4d:40:1e:
08:65:86:f2:6d:7a:ac:7e:74:53:35:76:e6:4b:53:
9a:42:5a:32:2d:28:4b:65:c8:ab:06:5b:ef:4f:71:
9b:36:3b:aa:ac:ba:fd:40:84:ee:24:6e:f9:af:19:
ad:44:5d:0a:de:99:c2:7a:f5:cb:c7:5d:05:85:ab:
e2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DA:98:0B:13:21:84:94:44:A1:41:62:C5:D3:5A:9A:5C:D7:B5:E0
X509v3 Authority Key Identifier:
keyid:1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3e:d2:d7:42:e7:af:f1:83:bb:06:db:bd:9f:92:12:ed:ea:
96:67:09:e4:63:55:60:01:23:c4:9b:37:91:a3:85:d6:e0:66:
ed:32:f7:d1:3d:1b:68:66:f0:df:ca:91:4d:66:ad:9a:c9:a4:
48:c5:eb:33:c2:dd:df:bc:d0:a8:3b:50:e9:c8:67:85:2d:03:
28:b9:f5:76:ce:c9:8f:ab:16:b9:b5:3c:41:9f:c7:3a:cd:08:
9c:02:bb:d5:8b:16:de:19:7a:cd:94:7b:7e:51:f6:63:19:c9:
71:a7:63:c3:a9:25:08:2d:8b:ad:e2:99:dd:db:b2:40:72:6f:
61:c0:3f:0e:18:e3:88:7d:95:97:65:16:70:b6:15:2f:62:e5:
4a:4b:bf:62:92:b4:68:b4:2d:16:66:3d:cc:b9:27:46:7f:32:
97:5d:a2:fb:45:8c:ec:86:24:c2:ce:9f:b0:67:e6:20:ed:7c:
81:ab:62:74:8b:c9:48:19:0b:e5:0f:97:df:76:18:a5:09:2f:
4b:09:1d:51:3c:f4:92:e6:8b:8d:a0:6c:f8:fe:c2:d6:52:5f:
9b:c3:37:27:b8:e0:f0:24:fb:df:65:51:eb:03:20:87:29:0d:
d8:a0:0f:b1:e7:ac:cf:77:9d:b7:f0:c4:4a:90:1d:3a:b9:ce:
2d:16:d7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:31:13 2026 by rpki-client