Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft
File: hUxfKY2BrMVXP9WfsF3YbyCry6g.mft (raw, json)
Hash identifier: HWnvQ8pGUDrFSVVL6TXS6EOQbNddgx6M6z2ArLPx0DY=
Subject key identifier: C1:93:C9:21:73:E8:4F:89:FB:D5:5A:20:51:41:BD:68:7C:ED:24:CB
Authority key identifier: 85:4C:5F:29:8D:81:AC:C5:57:3F:D5:9F:B0:5D:D8:6F:20:AB:CB:A8
Certificate issuer: /CN=854c5f298d81acc5573fd59fb05dd86f20abcba8
Certificate serial: 019D390A1E1855F01397E046A8C77BEEE7A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUxfKY2BrMVXP9WfsF3YbyCry6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft
Manifest number: 130F
Signing time: Sun 29 Mar 2026 10:00:57 +0000
Manifest this update: Sun 29 Mar 2026 10:00:57 +0000
Manifest next update: Mon 30 Mar 2026 10:00:57 +0000
Files and hashes: 1: KDlCkTZJ_trioChGEq3qqR2sW-g.roa (hash: jNNvN3keVzRoRmynZdoMPevs+yPDhsuaoYcA8SI2cJs=)
2: hUxfKY2BrMVXP9WfsF3YbyCry6g.crl (hash: o59Ob4CdgSLfKvq0Wx/AN7LGEPH2vTzOEtw1q6f/PIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUxfKY2BrMVXP9WfsF3YbyCry6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:1e:18:55:f0:13:97:e0:46:a8:c7:7b:ee:e7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c5f298d81acc5573fd59fb05dd86f20abcba8
Validity
Not Before: Mar 29 10:00:57 2026 GMT
Not After : Mar 30 10:00:57 2026 GMT
Subject: CN=c193c92173e84f89fbd55a205141bd687ced24cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bc:53:7f:4c:61:f2:3d:64:65:01:9c:23:3d:
12:66:8b:c5:de:0c:ec:ce:2c:90:7b:44:69:af:62:
f2:9d:36:f3:32:70:c3:ff:11:51:7f:62:32:6f:65:
67:e2:c2:b6:4f:91:76:64:04:f8:40:38:3c:43:dd:
72:27:29:55:46:79:8c:b8:b1:3f:3e:31:5e:7d:29:
f1:14:48:c6:4d:2f:1d:9e:b3:ac:1b:1e:3b:f5:5a:
d7:53:e9:f4:10:ef:99:12:08:23:44:ce:26:c2:ad:
3c:d2:63:ee:5a:8d:e5:43:fe:a8:80:06:78:c4:cf:
1a:ec:1c:8f:6d:36:d4:8f:50:1a:48:06:97:85:3b:
27:96:81:14:ef:68:fd:95:90:35:f4:93:83:7e:32:
c9:1f:29:5c:53:5c:6f:be:43:d7:8b:6a:14:ce:fd:
3a:85:09:87:a7:eb:08:0c:56:24:80:ae:c1:7a:5c:
b6:5a:fc:3d:a7:4d:00:0f:53:8a:a5:7d:38:79:ed:
cf:24:fc:3d:21:9b:aa:f0:ba:1d:d2:00:b5:62:f2:
5a:96:ff:ab:66:42:8a:fe:55:c7:13:65:c6:77:69:
2f:bd:97:42:a5:67:42:fc:f4:66:0c:8a:6a:b3:25:
a9:29:06:ef:8d:37:62:94:93:3e:07:e4:f4:8a:b2:
24:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:93:C9:21:73:E8:4F:89:FB:D5:5A:20:51:41:BD:68:7C:ED:24:CB
X509v3 Authority Key Identifier:
keyid:85:4C:5F:29:8D:81:AC:C5:57:3F:D5:9F:B0:5D:D8:6F:20:AB:CB:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUxfKY2BrMVXP9WfsF3YbyCry6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:47:85:57:55:37:d7:7b:ae:c4:b3:06:d4:e2:b8:dc:f8:10:
ff:45:9c:6f:5f:90:f5:ba:20:8e:83:2f:c1:f9:ea:0a:0b:ee:
8d:13:8f:c7:d6:50:a8:79:70:c4:ab:3c:f4:46:e6:16:5d:98:
f6:7e:33:84:ff:02:3e:f8:5d:fd:97:2e:ab:02:9c:41:a1:79:
a7:09:bd:01:54:26:4a:ea:5c:89:42:5c:66:8f:b8:ef:b5:87:
42:6d:f5:0b:c1:1f:fd:7f:f9:bc:cb:51:28:73:8d:92:87:51:
20:73:8d:5b:d3:ae:46:ca:81:18:90:53:09:ef:ef:da:b7:ab:
3e:47:80:40:54:5e:68:ee:67:6f:dc:9f:4c:86:f9:cb:51:f7:
04:d1:4e:d3:bb:68:34:84:a8:f3:d9:0d:52:3b:89:ac:91:07:
79:a5:ce:ea:30:45:5a:d3:6c:1a:61:6b:39:8d:be:a4:80:03:
df:8e:03:7f:c8:b2:9b:28:8e:b5:f2:ab:35:29:74:ee:6f:a9:
39:56:d8:d8:68:ee:e1:3d:90:a4:df:30:37:33:1a:77:27:de:
e2:d1:df:c6:80:76:5d:d7:e6:98:ee:8c:3f:67:eb:61:1b:93:
9d:d3:75:b1:e4:2e:e0:97:66:32:54:3b:3e:22:90:d4:c3:02:
23:3f:01:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:43 2026 by rpki-client