Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
File: HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft (raw, json)
Hash identifier: 37DjkBEMNbSa6zCoBT18MI/jTgi7g8jo0QURIIqcIJo=
Subject key identifier: CF:27:C0:3F:8C:AA:D8:B7:24:AC:34:6E:40:F7:AE:41:42:91:8F:62
Authority key identifier: 1F:18:DC:50:36:D7:FB:C0:DC:AB:F3:3B:CC:AA:D1:0B:17:C5:28:97
Certificate issuer: /CN=1f18dc5036d7fbc0dcabf33bccaad10b17c52897
Certificate serial: 019DCFE3643F6B9994C990959D52101BC528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
Manifest number: 0E
Signing time: Mon 27 Apr 2026 17:01:19 +0000
Manifest this update: Mon 27 Apr 2026 17:01:19 +0000
Manifest next update: Tue 28 Apr 2026 17:01:19 +0000
Files and hashes: 1: HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl (hash: /c3K/9nMTP8t2qsAp+iZ5+g6K8A6S8QfD1361jVQXTM=)
2: _Sc3r6nRYQtQu2cZIjq2IjctaNg.roa (hash: e+HC4XFRl9Gj2y368uE+nXV2ycHussEEZzNT8l44+WA=)
3: p9L5cF_zrUQq9yQ8iih6wH2zdz8.roa (hash: xFDge0h0P1x29btG4Nd0kEneOqOsxT+krJ6Qhd0wSPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:64:3f:6b:99:94:c9:90:95:9d:52:10:1b:c5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f18dc5036d7fbc0dcabf33bccaad10b17c52897
Validity
Not Before: Apr 27 17:01:19 2026 GMT
Not After : Apr 28 17:01:19 2026 GMT
Subject: CN=cf27c03f8caad8b724ac346e40f7ae4142918f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d9:48:5a:9c:a5:bd:c0:a1:03:c4:24:d3:c8:
79:72:82:6c:75:fa:70:05:52:24:63:45:f9:e0:17:
29:78:0a:3d:29:34:ed:4f:c3:53:33:b7:c3:4a:72:
45:b8:34:88:8e:19:9f:8a:ee:a8:73:11:b3:c1:a4:
df:e3:5c:60:5e:60:d4:0f:16:17:56:c0:9d:de:19:
71:dd:40:93:ed:59:2f:49:0d:b9:c1:e0:36:97:66:
b7:83:44:32:5b:af:27:e5:e6:9b:f0:bf:c1:e4:22:
a4:96:00:93:fa:9e:e5:60:a8:fb:87:a4:a0:f9:f9:
a2:c6:0e:27:3e:47:3e:00:86:f1:7e:30:0c:a8:4e:
be:7e:c8:cc:34:a1:bc:ce:e3:30:07:26:80:18:00:
59:0d:e2:90:33:76:c4:a1:3f:12:56:2a:ec:8e:4d:
a9:0a:11:60:5b:9e:14:85:4a:d5:53:61:c6:56:66:
bb:97:d4:7f:84:86:1a:71:1f:94:8d:11:5a:8d:2b:
8a:31:cd:2e:64:0d:11:57:9e:87:ea:d6:03:32:ee:
fb:69:29:98:71:41:d1:74:57:7f:61:8c:04:31:f9:
68:c6:d0:d4:0d:80:8c:26:8a:fa:bd:72:cd:e0:6a:
3e:3c:74:22:0f:d1:69:9d:8e:6e:2e:0c:b7:fb:e4:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:27:C0:3F:8C:AA:D8:B7:24:AC:34:6E:40:F7:AE:41:42:91:8F:62
X509v3 Authority Key Identifier:
keyid:1F:18:DC:50:36:D7:FB:C0:DC:AB:F3:3B:CC:AA:D1:0B:17:C5:28:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ea:44:15:9c:37:81:8f:7c:81:48:08:85:35:66:8c:6a:79:
00:e5:94:d3:76:f6:6c:39:ee:59:d6:d2:63:ca:7a:05:7a:ef:
19:bd:99:41:83:46:2f:b4:13:31:34:03:45:d5:44:3f:ef:51:
b2:fb:81:b5:68:e0:30:2c:4c:2e:04:b2:0b:a0:47:d4:33:e4:
2b:dc:44:40:b9:74:71:b1:ca:e2:51:25:68:96:f2:a7:ec:cb:
a9:64:59:98:92:a8:42:9c:d8:11:45:bf:b6:73:95:c4:fe:94:
cc:c2:25:34:80:b0:22:9c:d3:cf:c9:7a:fb:d7:34:db:c8:64:
bc:95:61:a4:8d:fd:ba:ec:50:12:56:09:b7:9d:a9:b0:6d:03:
7a:67:4b:a9:7b:40:3d:6c:f3:5b:a5:d4:01:0e:a0:ca:78:4b:
42:c0:b8:f6:fc:15:ff:dc:24:87:7c:e5:cf:f1:56:e3:e6:7d:
4f:e3:61:29:76:e9:6e:0e:df:00:34:5b:95:c8:47:d5:03:2f:
6f:66:e0:60:29:68:9c:50:c8:4b:ba:0d:c7:88:0c:2b:15:bd:
ff:0e:df:e4:33:50:b0:80:93:7d:4f:61:8a:3e:d0:f5:35:f7:
a0:b8:2e:d8:39:e9:25:ea:d7:90:e4:dc:a3:92:25:c3:19:82:
c5:f8:7e:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3P42Q/a5mUyZCVnVIQG8UoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMThkYzUwMzZkN2ZiYzBkY2FiZjMzYmNjYWFkMTBiMTdj
NTI4OTcwHhcNMjYwNDI3MTcwMTE5WhcNMjYwNDI4MTcwMTE5WjAzMTEwLwYDVQQD
EyhjZjI3YzAzZjhjYWFkOGI3MjRhYzM0NmU0MGY3YWU0MTQyOTE4ZjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9lIWpylvcChA8Qk08h5coJsdfpw
BVIkY0X54BcpeAo9KTTtT8NTM7fDSnJFuDSIjhmfiu6ocxGzwaTf41xgXmDUDxYX
VsCd3hlx3UCT7VkvSQ25weA2l2a3g0QyW68n5eab8L/B5CKklgCT+p7lYKj7h6Sg
+fmixg4nPkc+AIbxfjAMqE6+fsjMNKG8zuMwByaAGABZDeKQM3bEoT8SVirsjk2p
ChFgW54UhUrVU2HGVma7l9R/hIYacR+UjRFajSuKMc0uZA0RV56H6tYDMu77aSmY
cUHRdFd/YYwEMfloxtDUDYCMJor6vXLN4Go+PHQiD9FpnY5uLgy3++QS/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8nwD+Mqti3JKw0bkD3rkFCkY9iMB8GA1UdIwQY
MBaAFB8Y3FA21/vA3KvzO8yq0QsXxSiXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHhqY1VEYlgtOERjcV9NN3pLclJDeGZGS0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85ZDA2YWItOTY1Zi00NmE3LTg2YzMt
MmIwODJkMmRiNDFiLzEvSHhqY1VEYlgtOERjcV9NN3pLclJDeGZGS0pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85ZDA2YWItOTY1Zi00NmE3LTg2YzMtMmIwODJkMmRiNDFi
LzEvSHhqY1VEYlgtOERjcV9NN3pLclJDeGZGS0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQupEFZw3
gY98gUgIhTVmjGp5AOWU03b2bDnuWdbSY8p6BXrvGb2ZQYNGL7QTMTQDRdVEP+9R
svuBtWjgMCxMLgSyC6BH1DPkK9xEQLl0cbHK4lElaJbyp+zLqWRZmJKoQpzYEUW/
tnOVxP6UzMIlNICwIpzTz8l6+9c028hkvJVhpI39uuxQElYJt52psG0DemdLqXtA
PWzzW6XUAQ6gynhLQsC49vwV/9wkh3zlz/FW4+Z9T+NhKXbpbg7fADRblchH1QMv
b2bgYClonFDIS7oNx4gMKxW9/w7f5DNQsICTfU9hij7Q9TX3oLgu2DnpJerXkOTc
o5IlwxmCxfh+JQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 23:03:10 2026 by rpki-client