Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
File: HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft (raw, json)
Hash identifier: 3SQXgfdO58KqneS5QxrLioRuPOI2NXYGxtby+3NVFr8=
Subject key identifier: F4:3A:C7:C3:13:BC:F9:81:92:0F:F6:80:D8:63:8A:C1:95:94:EF:6D
Authority key identifier: 1F:18:DC:50:36:D7:FB:C0:DC:AB:F3:3B:CC:AA:D1:0B:17:C5:28:97
Certificate issuer: /CN=1f18dc5036d7fbc0dcabf33bccaad10b17c52897
Certificate serial: 019FA14E4D03D583DA6CF384A5B042A93E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
Manifest number: FF
Signing time: Mon 27 Jul 2026 02:01:30 +0000
Manifest this update: Mon 27 Jul 2026 02:01:30 +0000
Manifest next update: Tue 28 Jul 2026 02:01:30 +0000
Files and hashes: 1: HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl (hash: WUwmgw9xjIZSQ08bgx4Hdtrdugar0M5Wt10FXG8eFS8=)
2: _Sc3r6nRYQtQu2cZIjq2IjctaNg.roa (hash: e+HC4XFRl9Gj2y368uE+nXV2ycHussEEZzNT8l44+WA=)
3: p9L5cF_zrUQq9yQ8iih6wH2zdz8.roa (hash: xFDge0h0P1x29btG4Nd0kEneOqOsxT+krJ6Qhd0wSPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4e:4d:03:d5:83:da:6c:f3:84:a5:b0:42:a9:3e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f18dc5036d7fbc0dcabf33bccaad10b17c52897
Validity
Not Before: Jul 27 02:01:30 2026 GMT
Not After : Jul 28 02:01:30 2026 GMT
Subject: CN=f43ac7c313bcf981920ff680d8638ac19594ef6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bd:d1:81:e6:7c:fa:fb:ce:7a:08:74:10:26:
7b:ab:38:cd:07:4a:d9:e3:e2:bf:1d:1d:09:be:2b:
cc:54:78:1c:be:f9:15:2a:4f:3f:fc:a8:cb:65:cb:
6b:fc:16:11:5c:d8:f1:ab:65:12:88:f5:8d:50:61:
25:2f:6e:c2:23:26:a7:3e:b2:bc:b6:70:81:82:3d:
04:b0:e5:dc:24:69:98:30:3a:4a:56:d3:4d:76:f4:
22:9d:3a:1c:ae:3e:a8:2d:47:09:a8:60:f0:63:99:
a5:bc:7e:2a:03:1b:2b:db:34:d7:2b:26:92:26:a8:
77:d3:54:7b:73:4c:b7:c3:03:8c:33:c7:58:e6:32:
0c:11:59:8a:11:1e:a7:29:bb:ff:c9:7e:8d:e2:fe:
d6:bc:a9:d3:c3:c4:7e:74:f4:25:00:41:40:dc:54:
6b:df:c6:5d:84:7c:1a:6c:b1:30:75:e0:a6:ca:7a:
bd:2f:90:6b:82:30:43:0e:16:2d:fa:fd:71:45:dd:
68:61:b8:bb:fb:89:cf:47:ca:8f:e2:57:be:a7:13:
19:1f:bb:91:71:59:be:62:fc:91:5a:80:dc:d4:1b:
aa:5c:5a:05:2a:47:f5:4d:a6:24:02:dc:b2:07:10:
82:e3:3f:56:6a:1d:7b:8e:b2:38:41:d4:b3:02:96:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3A:C7:C3:13:BC:F9:81:92:0F:F6:80:D8:63:8A:C1:95:94:EF:6D
X509v3 Authority Key Identifier:
keyid:1F:18:DC:50:36:D7:FB:C0:DC:AB:F3:3B:CC:AA:D1:0B:17:C5:28:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e0:70:a6:1a:46:bd:89:88:94:57:f0:17:57:91:a9:07:31:
13:5a:48:e5:fe:52:4d:9e:7d:59:a2:33:94:6b:22:44:e0:1c:
99:0b:0a:f0:3c:92:24:80:5e:3d:46:f8:f7:88:26:2e:6d:16:
36:a1:bb:d7:2a:a3:a8:d6:37:21:7f:c6:d1:96:64:c7:d0:04:
e1:62:6e:72:76:0d:09:c7:35:ea:9d:4c:e8:22:68:d5:b1:25:
45:5f:20:2d:c0:76:f1:35:66:35:28:f6:39:c7:b9:05:f6:c5:
66:64:db:b3:a4:8b:a7:a8:0d:7a:3e:84:c5:9c:96:81:83:94:
22:b8:3e:1b:eb:b6:fd:d6:18:00:8d:b4:a1:b3:ab:27:a7:ce:
86:1f:22:a3:66:1c:0f:df:03:35:90:33:80:93:3c:73:f7:8f:
5e:77:c5:12:c1:07:85:15:66:71:59:34:af:0f:e7:08:e1:1a:
24:42:9c:a8:5d:27:4b:70:98:1f:bb:a8:5e:ba:a6:ab:da:1b:
cb:75:49:0d:13:d5:af:da:dc:a5:e7:b0:19:b4:82:51:4c:40:
a9:84:30:26:d8:3b:ce:b8:50:65:d9:61:31:73:9c:88:d4:ff:
52:2d:a8:df:da:1f:70:8f:6f:4b:92:40:58:aa:ff:c0:54:07:
a1:ee:76:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:17:13 2026 by rpki-client