Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
File: HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft (raw, json)
Hash identifier: Bg3zFGYjR5Q/2IatmdWVQcMG5R9iOVaFJ6rWqBwyWuI=
Subject key identifier: 6E:04:55:55:DF:AB:0A:1D:C6:4A:D9:96:73:F2:1F:2E:F3:01:FB:A9
Authority key identifier: 1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8
Certificate issuer: /CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8
Certificate serial: 019D38D37E1ABB3335CE3BA95DA9BD6088FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
Manifest number: 0746
Signing time: Sun 29 Mar 2026 09:01:17 +0000
Manifest this update: Sun 29 Mar 2026 09:01:17 +0000
Manifest next update: Mon 30 Mar 2026 09:01:17 +0000
Files and hashes: 1: CwVKknNyyDgr3v_akSkNJXeCl5g.roa (hash: qbY0Sgh72+FRb460J2WnaLt9Z6SaHUYLTsclKcq8xqU=)
2: HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl (hash: P1olvcJ9zfDR+ZzwGYfkVeIn+PNRUL5gGmQsx0Z4iYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:7e:1a:bb:33:35:ce:3b:a9:5d:a9:bd:60:88:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8
Validity
Not Before: Mar 29 09:01:17 2026 GMT
Not After : Mar 30 09:01:17 2026 GMT
Subject: CN=6e045555dfab0a1dc64ad99673f21f2ef301fba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:69:a4:3b:40:e2:11:45:30:00:73:23:2e:93:
6b:b5:28:df:ca:8d:69:3b:8a:2e:0d:e5:63:73:06:
fd:20:8a:c0:62:ec:17:44:f2:da:f4:8f:c9:62:d8:
4f:a9:68:52:3b:b0:b3:d5:1b:01:e4:bd:16:77:68:
87:34:a2:86:2f:a0:45:29:13:cf:d6:6f:41:c5:01:
98:e1:08:6b:9e:cd:95:24:e6:65:0a:ce:3f:df:36:
c3:cb:c7:da:1a:19:82:cf:0c:1e:53:5e:a7:11:d5:
48:d2:d9:54:e5:b3:86:24:4f:3c:71:56:e5:13:3a:
cc:6a:b5:4a:7a:0b:67:48:5b:c3:54:0d:3f:03:67:
16:70:e1:dd:47:69:15:3a:c5:20:3e:de:20:f4:1b:
8d:df:42:74:34:8b:5f:28:6b:b5:2e:bd:6e:b7:72:
7c:55:4f:c5:c5:02:a6:de:91:e1:60:b9:90:0f:08:
b9:c8:b0:58:1f:eb:ba:fe:f1:d7:29:d6:d5:f1:99:
12:f5:ca:8c:dd:2f:bd:7b:ed:b8:70:67:52:55:b6:
f5:f0:0e:9b:7e:eb:c7:35:ce:94:1d:ae:1a:78:a9:
e0:b4:52:05:e6:f7:17:69:81:3c:cd:f0:18:7a:bc:
9b:48:95:5e:d5:33:24:df:7c:05:78:44:aa:8e:80:
04:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:04:55:55:DF:AB:0A:1D:C6:4A:D9:96:73:F2:1F:2E:F3:01:FB:A9
X509v3 Authority Key Identifier:
keyid:1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:02:ce:e3:85:44:18:49:ef:d7:1d:86:9e:72:8f:12:1f:61:
8e:56:df:57:72:f7:61:55:55:c7:47:c1:84:88:12:fa:ec:1f:
53:55:cb:70:ae:c0:bf:b0:95:a6:6d:0c:21:c7:8e:c2:61:b5:
37:d2:c7:45:7d:96:05:d8:c5:fc:0a:2a:96:ce:7b:93:d4:46:
12:67:7e:c1:99:81:3a:02:2d:e9:6d:af:d8:8c:f2:87:45:43:
41:d6:78:3b:77:3d:00:f7:2c:fe:d2:c3:21:ab:e4:fa:27:74:
9e:ec:0c:12:c4:3f:e4:16:ec:2e:26:11:8d:e0:2a:57:cf:be:
1c:3d:cf:3b:a5:1a:3e:2a:e2:f8:2c:93:a5:cb:c5:78:b6:fd:
1b:00:8f:2a:01:19:62:3b:aa:cb:55:e8:e8:91:38:fc:49:14:
5f:85:9b:51:4f:17:83:ba:31:df:9b:ab:03:a4:e4:90:95:d2:
67:03:01:99:b0:6d:e8:4d:e0:47:0a:c8:81:29:15:7f:8a:2c:
90:b1:10:d5:60:9a:75:6e:e1:52:97:8d:21:93:77:79:75:b1:
80:b5:93:85:1b:f9:c1:83:f9:7b:4f:a0:ae:de:5c:7f:a2:a8:
e8:6c:4a:0e:80:09:ab:ba:1d:7b:c5:e5:dd:10:43:6f:e3:b8:
43:10:99:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:54 2026 by rpki-client