Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
File: HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft (raw, json)
Hash identifier: /ID3v3mRLzqNqEG7gYVZ3kj9qk+U2vAJnjHgkdgguTI=
Subject key identifier: 30:68:68:40:F7:4A:C3:4C:52:75:3B:24:83:2B:F5:63:EF:ED:78:49
Authority key identifier: 1F:18:DC:50:36:D7:FB:C0:DC:AB:F3:3B:CC:AA:D1:0B:17:C5:28:97
Certificate issuer: /CN=1f18dc5036d7fbc0dcabf33bccaad10b17c52897
Certificate serial: 01A08AFA265E354F72CC10F7D8141284C5B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
Manifest number: 0178
Signing time: Thu 10 Sep 2026 11:00:44 +0000
Manifest this update: Thu 10 Sep 2026 11:00:44 +0000
Manifest next update: Fri 11 Sep 2026 11:00:44 +0000
Files and hashes: 1: HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl (hash: XUSjxvIVljPOojbCpP/hMBknQgrABh9TcdVg3h0Lsgw=)
2: _Sc3r6nRYQtQu2cZIjq2IjctaNg.roa (hash: e+HC4XFRl9Gj2y368uE+nXV2ycHussEEZzNT8l44+WA=)
3: p9L5cF_zrUQq9yQ8iih6wH2zdz8.roa (hash: xFDge0h0P1x29btG4Nd0kEneOqOsxT+krJ6Qhd0wSPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:26:5e:35:4f:72:cc:10:f7:d8:14:12:84:c5:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f18dc5036d7fbc0dcabf33bccaad10b17c52897
Validity
Not Before: Sep 10 11:00:44 2026 GMT
Not After : Sep 11 11:00:44 2026 GMT
Subject: CN=30686840f74ac34c52753b24832bf563efed7849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:06:fa:2e:26:87:1c:25:ea:47:43:e2:c4:bd:
ea:55:10:ce:89:a7:ed:bd:9c:29:59:02:39:bb:51:
7a:66:b8:27:92:47:62:d6:00:fb:f2:a6:c5:a9:ed:
5f:7d:94:93:46:9a:8a:22:bd:8c:e8:af:6a:48:38:
40:12:d7:41:21:14:db:02:3d:4d:33:7b:4d:5d:0d:
88:10:97:5d:b3:cd:9d:0e:ab:37:dc:df:41:a2:5b:
3b:01:b0:52:6d:a4:04:5d:88:7a:35:f7:ff:96:cc:
c2:d3:63:a2:f7:00:68:e8:46:2c:2a:ac:fe:9b:58:
39:ef:d4:be:12:b2:8c:6b:af:4d:fc:f2:5e:89:fd:
4f:55:ab:5d:ba:26:bf:ca:6c:66:ad:8b:bf:2a:a8:
c2:6d:02:3d:58:3a:3d:76:79:11:e6:5f:54:0b:66:
33:2d:61:92:d6:9a:d8:8e:98:f8:3b:7c:dd:bc:98:
bc:f3:41:21:11:7b:73:75:cc:11:3a:bf:62:6f:ef:
8e:d7:26:e7:70:46:36:8e:09:65:5f:02:94:7f:6f:
13:a3:70:3d:1e:36:72:fc:c8:ca:bb:0d:75:aa:0b:
00:0b:0f:60:f8:49:38:f5:85:ea:24:13:af:bc:06:
b0:96:df:f6:28:17:e7:38:ca:a3:1a:fb:fb:1c:96:
03:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:68:68:40:F7:4A:C3:4C:52:75:3B:24:83:2B:F5:63:EF:ED:78:49
X509v3 Authority Key Identifier:
keyid:1F:18:DC:50:36:D7:FB:C0:DC:AB:F3:3B:CC:AA:D1:0B:17:C5:28:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a7:68:9c:37:ce:d3:07:18:10:00:96:89:a4:6d:84:5d:3e:
49:9c:32:a7:a1:dd:e6:fe:be:f4:9d:1f:36:e4:1b:48:ef:b2:
e9:58:99:df:47:c5:95:65:12:bb:43:66:91:5d:42:4e:a0:a0:
cc:84:33:a1:13:00:4e:b1:30:59:d1:ce:0c:d3:8c:65:cb:a6:
95:4a:0e:ca:8f:c2:2d:5d:34:88:60:08:fb:c5:bb:40:a4:a0:
ec:5a:91:c6:8d:22:11:a3:02:2c:84:78:c9:bd:2b:f2:44:3e:
31:1c:9e:c2:31:4a:60:b4:56:2f:b4:3b:80:b4:4c:bd:a4:a8:
aa:5b:25:7a:3c:af:ab:33:11:56:d8:87:ca:78:97:4f:cd:b7:
fd:b4:3a:72:16:d6:6b:ec:3d:3a:c9:8c:8d:a5:1e:e1:9b:a0:
03:2a:a4:4f:41:cd:75:1f:d7:1f:63:70:f2:a7:31:61:b1:39:
9c:b4:08:26:c0:25:fe:4e:78:d6:72:79:22:63:85:f5:09:19:
25:1d:5e:0e:7b:94:fc:3b:15:ab:ca:44:cc:40:6a:ad:be:70:
04:64:0b:8e:36:08:90:0e:00:23:79:38:8a:09:09:4e:7c:cf:
f1:f1:3b:a7:d8:6f:c8:c3:a1:c7:f9:d6:52:5b:4c:e2:cb:ec:
e4:a0:68:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:05:49 2026 by rpki-client