Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
File: HxINfknJ878xPZZTGt-n6q6AV2E.mft (raw, json)
Hash identifier: anN4nmk9mAS5w+S9NPG56odrkqlZZ2PNMAD5Vy0n0ds=
Subject key identifier: 7D:1E:B8:40:A4:3D:5E:1B:B0:95:3C:71:25:8D:33:91:7F:CE:DD:FF
Authority key identifier: 1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
Certificate issuer: /CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Certificate serial: 019D382E6EF1CF314D3FB5C8141B518B05FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
Manifest number: 10F1
Signing time: Sun 29 Mar 2026 06:01:00 +0000
Manifest this update: Sun 29 Mar 2026 06:01:00 +0000
Manifest next update: Mon 30 Mar 2026 06:01:00 +0000
Files and hashes: 1: HxINfknJ878xPZZTGt-n6q6AV2E.crl (hash: YE7B0UkJN53fUlexZbKresJyVzU/jJp0ELwAT30N1QE=)
2: NHDyAvAowEpZkYNotB2_FKVnj-U.roa (hash: jzWXVyP83SPdCwETB0N35NVU/yFw45PVeKqRU1Bxi/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:6e:f1:cf:31:4d:3f:b5:c8:14:1b:51:8b:05:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Validity
Not Before: Mar 29 06:01:00 2026 GMT
Not After : Mar 30 06:01:00 2026 GMT
Subject: CN=7d1eb840a43d5e1bb0953c71258d33917fceddff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a6:93:cc:c2:2c:5f:a7:be:ed:bc:70:25:46:
ee:48:db:cf:a3:3c:b4:77:2c:e8:cb:7c:92:06:16:
60:b2:3a:51:a3:6c:15:b7:b6:25:fe:f0:64:aa:24:
28:63:71:c3:63:03:e8:b1:eb:06:81:1e:aa:ee:2b:
aa:37:75:c9:95:5a:55:b4:04:4b:04:52:f1:55:e6:
a5:92:0e:fc:d3:08:78:ab:65:18:98:55:b4:aa:0f:
9b:55:66:7c:8b:cd:82:f1:06:3e:ae:f7:a4:8c:d9:
eb:89:c7:e6:c2:09:5f:aa:c7:8c:99:ad:ec:e1:f6:
21:b1:df:83:f6:80:06:93:82:92:ae:c8:31:e0:4b:
5e:c4:4d:65:a4:61:99:7d:e1:84:a9:84:e6:2e:2e:
0d:fa:25:fa:58:74:9e:46:ee:b7:5d:62:64:f2:c2:
0c:7c:d8:de:3d:fc:42:83:d3:4f:33:8c:e7:94:da:
79:09:65:98:f0:a5:32:73:32:8e:a4:7c:4c:c4:c2:
72:69:89:40:d3:ae:e2:cc:63:de:c5:5b:f0:17:32:
f7:99:a0:f5:1c:cc:3b:c5:e8:62:18:df:a2:66:ff:
b4:64:5f:6b:f6:9b:53:24:bd:d3:88:e2:a4:fe:8c:
e1:b0:4b:cc:f8:47:46:71:52:b6:bc:42:69:d2:53:
bb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1E:B8:40:A4:3D:5E:1B:B0:95:3C:71:25:8D:33:91:7F:CE:DD:FF
X509v3 Authority Key Identifier:
keyid:1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c8:2f:03:fb:6b:c1:96:a7:0f:13:20:39:fa:be:94:4d:12:
b5:1a:3f:b6:a8:3d:da:df:3b:92:8b:33:c8:54:2d:88:4c:41:
8e:33:2b:a6:3b:48:7e:6e:34:6d:24:f2:b6:a8:b3:3b:04:81:
e4:7e:73:6b:86:2d:50:33:8b:de:1d:47:57:34:86:92:fa:e1:
c2:a3:75:34:9c:89:22:d9:4f:b7:43:e6:24:48:c4:83:4f:e1:
f6:cd:00:28:d1:c3:ce:00:f7:40:a6:aa:1f:91:72:a7:25:03:
ca:63:40:69:cf:72:ed:3e:ce:49:66:11:6d:58:b6:d3:4b:f8:
29:8d:a2:14:fe:27:37:8a:2c:fa:b1:e4:3e:71:62:69:1b:e6:
02:56:16:f9:37:56:b5:bd:5c:68:87:43:39:91:3b:17:02:9e:
56:4b:cc:f4:23:5d:72:64:5f:76:a7:48:e9:f0:ea:81:75:6f:
50:bf:8c:68:e4:be:95:0f:38:b1:ac:f9:96:8b:f8:f0:15:e0:
c5:cc:f4:e9:f6:22:e0:38:2d:7d:a0:ea:42:8a:15:cc:3d:f3:
c9:dc:a2:2b:ec:34:76:ae:15:76:fe:ac:53:ac:ad:8e:96:60:
f2:f7:6a:ef:62:f7:45:cb:d9:63:44:bc:bf:60:2f:8b:2c:42:
a2:99:86:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:02 2026 by rpki-client