Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
File: HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft (raw, json)
Hash identifier: jYeYbDArCHUHKqPwzxCrlXB3umF1zW10uX7K68trgc4=
Subject key identifier: 39:60:76:3D:DE:32:D6:DD:23:D5:0D:43:74:F9:59:CA:34:AF:FE:15
Authority key identifier: 1F:18:DC:50:36:D7:FB:C0:DC:AB:F3:3B:CC:AA:D1:0B:17:C5:28:97
Certificate issuer: /CN=1f18dc5036d7fbc0dcabf33bccaad10b17c52897
Certificate serial: 019EB7A0E5381D6396E76DCD76E0594D8119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
Manifest number: 86
Signing time: Thu 11 Jun 2026 17:00:35 +0000
Manifest this update: Thu 11 Jun 2026 17:00:35 +0000
Manifest next update: Fri 12 Jun 2026 17:00:35 +0000
Files and hashes: 1: HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl (hash: pmvuuOl6PA5hLN4zNrjH/FxGxy6W931552+OVjX4S1E=)
2: _Sc3r6nRYQtQu2cZIjq2IjctaNg.roa (hash: e+HC4XFRl9Gj2y368uE+nXV2ycHussEEZzNT8l44+WA=)
3: p9L5cF_zrUQq9yQ8iih6wH2zdz8.roa (hash: xFDge0h0P1x29btG4Nd0kEneOqOsxT+krJ6Qhd0wSPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:e5:38:1d:63:96:e7:6d:cd:76:e0:59:4d:81:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f18dc5036d7fbc0dcabf33bccaad10b17c52897
Validity
Not Before: Jun 11 17:00:35 2026 GMT
Not After : Jun 12 17:00:35 2026 GMT
Subject: CN=3960763dde32d6dd23d50d4374f959ca34affe15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f5:30:96:93:29:0d:30:e0:5a:ec:9d:43:1e:
42:ef:a1:c6:a2:03:32:37:02:87:23:e0:22:65:4a:
26:0b:dd:05:af:0c:67:cf:3f:dd:41:f9:fb:6d:53:
8e:c7:c5:1a:75:44:72:84:25:18:ea:f7:25:b9:a9:
bf:78:46:9e:84:ce:0e:46:89:9c:53:e5:a6:e2:ed:
4b:30:09:c6:46:8a:64:95:a3:ce:77:97:d9:74:4e:
6b:32:c1:a8:fb:ca:7e:07:b8:1e:07:23:03:64:5e:
2a:b2:35:f1:e5:7a:63:83:69:f7:fb:06:4d:a0:5a:
4d:aa:e4:b6:f5:fc:ec:00:45:d0:35:3c:f5:66:8c:
05:23:f8:1f:57:99:70:15:72:fb:4a:57:ff:29:c6:
1f:c7:c3:02:c6:46:2f:0d:0c:46:ee:28:cb:b4:da:
3d:c8:e0:86:03:7e:2c:5b:9a:50:2a:5e:b1:0b:c4:
66:c4:f7:77:0e:e3:c3:d3:67:03:0a:36:d6:30:f6:
eb:15:8a:df:48:7c:9b:35:9e:07:e2:07:9c:30:75:
35:9f:b1:65:f1:8f:63:b2:d0:ec:50:cb:1e:d4:da:
33:aa:10:03:f6:ca:44:b9:77:a9:bb:01:c4:80:80:
21:b0:f4:47:ab:ec:7f:da:b8:88:41:1b:39:1c:5f:
bc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:60:76:3D:DE:32:D6:DD:23:D5:0D:43:74:F9:59:CA:34:AF:FE:15
X509v3 Authority Key Identifier:
keyid:1F:18:DC:50:36:D7:FB:C0:DC:AB:F3:3B:CC:AA:D1:0B:17:C5:28:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f2:b5:8d:61:4a:12:82:8f:ba:82:83:fe:b2:44:08:1a:c5:
a8:74:ec:29:6a:fc:d7:24:34:3a:b4:d5:09:72:36:6e:a4:e8:
a8:19:09:63:ce:96:15:73:5c:7e:83:60:51:25:38:98:83:aa:
51:39:1f:28:d5:cf:e2:a4:91:c7:e8:34:fa:59:ac:4a:01:d0:
07:dc:9d:33:aa:d2:18:8f:e4:66:72:83:95:56:05:51:68:33:
31:b5:6c:8a:32:cf:5a:2a:ac:8e:2d:5d:92:f9:dd:7d:20:78:
68:be:34:89:08:80:c1:23:90:58:bb:17:37:c4:2a:56:6d:94:
32:4a:5f:22:15:d3:60:cd:8d:d2:13:43:1d:b8:7d:b4:cd:7b:
eb:15:86:f7:eb:a6:3d:bc:ea:1d:9d:25:d0:9b:3b:2f:37:30:
16:4a:44:83:d5:14:89:04:bc:02:6b:5f:af:dd:07:33:60:95:
52:29:3c:f6:2d:66:16:47:73:f3:23:b3:13:f2:cf:e7:62:9b:
ed:b8:15:c3:2b:05:a5:60:a1:80:45:76:67:b6:f7:11:74:be:
51:18:5c:cf:4d:4c:a5:38:5c:c5:bc:0b:23:49:ae:72:12:62:
47:ad:89:d7:79:a8:81:d7:39:a4:c9:d8:1b:a9:50:1e:4f:be:
8c:ff:a6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:53:29 2026 by rpki-client