Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
File: HHixg23sq0_1vfpeN3o9-H8Y_A8.mft (raw, json)
Hash identifier: E1X8SweNnJ9VenRPyKvCogRXSSPgrnZ0T6EaoMESwEw=
Subject key identifier: 31:8D:D4:EB:32:B0:57:54:0C:33:D7:9F:C9:AE:B8:BE:87:BA:16:81
Authority key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Certificate issuer: /CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Certificate serial: 01A12AD6A9134AF92FD610C516FB0600355E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
Manifest number: 12B1
Signing time: Sun 11 Oct 2026 12:01:13 +0000
Manifest this update: Sun 11 Oct 2026 12:01:13 +0000
Manifest next update: Mon 12 Oct 2026 12:01:13 +0000
Files and hashes: 1: HHixg23sq0_1vfpeN3o9-H8Y_A8.crl (hash: IdcHCch/fwXO+cOQLcMAG6C5SOhOiwqwOw7+XPzzirQ=)
2: IviSs_87UUl9qVXZnSSlcS-C_RI.asa (hash: wdYAl3BdUIB3Umq2J3hRMzmaflBh8zzGwFUl64xraYc=)
3: gB28ikvXaAy5hSbZoUNZbTzRb2w.roa (hash: VDZz7b/Ru8Catta9bi8i3h+9lOqwQj0GwnjJ6fKuQOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:a9:13:4a:f9:2f:d6:10:c5:16:fb:06:00:35:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Validity
Not Before: Oct 11 12:01:13 2026 GMT
Not After : Oct 12 12:01:13 2026 GMT
Subject: CN=318dd4eb32b057540c33d79fc9aeb8be87ba1681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c3:ac:23:5a:77:26:cb:60:f9:af:36:47:ac:
8a:87:ab:0f:ca:2e:e6:e5:be:e0:b4:05:f6:af:69:
77:02:2f:b7:37:b3:6b:ac:f7:f0:f0:d0:90:88:37:
7b:4b:b5:4a:19:fb:5d:08:7d:f8:ef:cc:8e:60:c1:
2f:e8:64:b3:d4:10:cd:9a:6b:46:77:0f:fc:aa:dc:
92:80:2f:01:03:e9:e1:36:f4:26:b7:d4:73:31:c5:
c1:89:43:23:5b:16:7a:81:b3:47:0c:69:23:fc:65:
31:04:ca:5c:25:7d:a9:3b:6f:a8:a3:0a:0a:45:60:
46:d4:c4:e5:3e:a4:28:a3:89:dd:00:71:36:3d:a6:
9e:f8:9d:40:4c:22:37:9c:1f:c9:4e:05:70:7c:0a:
97:f2:b5:4c:63:bd:c9:c7:c4:12:0a:0a:45:ee:94:
95:ed:85:e7:de:bd:2a:a5:6d:a9:27:13:d0:00:6c:
c9:15:44:92:71:2d:a1:4e:00:ab:29:aa:1b:17:d2:
b0:7c:d3:8c:e7:4e:15:b5:bd:ff:0d:73:a4:b4:92:
37:1f:7f:17:6e:04:96:6c:06:6f:e2:47:bc:7e:de:
92:8b:b3:9d:af:a3:e3:21:97:df:83:2b:0b:8a:f9:
10:cc:5a:1b:e6:33:2c:ea:dc:91:6f:53:b5:6b:27:
44:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8D:D4:EB:32:B0:57:54:0C:33:D7:9F:C9:AE:B8:BE:87:BA:16:81
X509v3 Authority Key Identifier:
keyid:1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:97:9e:51:f0:e1:60:b6:a9:9c:a6:e5:8b:0c:30:25:08:56:
ef:bb:8c:8d:c2:f0:66:35:ff:95:0c:f0:19:0e:07:5b:55:93:
a7:85:52:97:45:5e:b1:42:27:04:c3:39:48:c0:20:6a:5f:33:
33:ac:fe:c4:c1:3b:b7:cd:8c:bf:31:62:10:38:0e:22:ef:17:
87:08:d4:9b:3e:bd:b9:88:f0:30:ea:c3:42:04:0a:68:eb:ac:
68:ae:bd:e9:1d:c0:2d:34:4c:3f:4b:6f:1f:a8:ca:48:95:f2:
26:d2:49:19:36:31:28:f6:f7:40:6b:d4:67:4a:c3:43:61:8d:
78:ab:1a:24:f9:c7:72:ea:b5:86:79:cc:3f:19:e2:34:0c:b0:
0a:b2:15:1d:9f:b0:4a:58:84:8b:cf:e1:00:82:83:03:97:79:
9e:f3:68:c8:01:39:f3:9b:ff:0f:73:26:13:2e:e3:0e:ed:f9:
c2:ec:1c:ab:19:3d:8d:b2:ac:6b:30:79:14:9b:76:38:d9:31:
c5:fd:92:27:7d:d0:d2:e5:5c:d0:35:16:ef:1d:3b:48:69:a8:
c5:81:d9:cd:92:e6:76:e6:81:88:ce:8b:e4:4c:27:56:7d:d1:
76:f7:68:13:61:9f:86:10:14:63:22:70:1f:0a:90:04:19:39:
c6:7e:d5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:01:59 2026 by rpki-client