Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
File: HHixg23sq0_1vfpeN3o9-H8Y_A8.mft (raw, json)
Hash identifier: glF27kQyZRHfTtun5m8BhWPya+iB6kErPR098ILwQh0=
Subject key identifier: 8B:02:81:3C:5C:D9:A2:11:EE:8C:18:DB:CA:3E:BB:15:9F:D2:3D:4D
Authority key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Certificate issuer: /CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Certificate serial: 019EAF7975932EFA571F7D1958E394F4685C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
Manifest number: 1168
Signing time: Wed 10 Jun 2026 03:00:33 +0000
Manifest this update: Wed 10 Jun 2026 03:00:33 +0000
Manifest next update: Thu 11 Jun 2026 03:00:33 +0000
Files and hashes: 1: HHixg23sq0_1vfpeN3o9-H8Y_A8.crl (hash: r1Iv2mQgOyaq/u8IcQfrFUcoL21Ohr0vnOXX2zee58g=)
2: IviSs_87UUl9qVXZnSSlcS-C_RI.asa (hash: wdYAl3BdUIB3Umq2J3hRMzmaflBh8zzGwFUl64xraYc=)
3: gB28ikvXaAy5hSbZoUNZbTzRb2w.roa (hash: VDZz7b/Ru8Catta9bi8i3h+9lOqwQj0GwnjJ6fKuQOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:af:79:75:93:2e:fa:57:1f:7d:19:58:e3:94:f4:68:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Validity
Not Before: Jun 10 03:00:33 2026 GMT
Not After : Jun 11 03:00:33 2026 GMT
Subject: CN=8b02813c5cd9a211ee8c18dbca3ebb159fd23d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:41:9e:78:52:65:d1:f6:61:b1:52:62:59:2c:
04:49:a1:59:5c:7b:34:aa:84:b3:61:31:7b:d2:63:
25:63:db:01:fe:ee:6f:37:cb:04:fe:37:9e:6e:89:
42:af:1e:35:c4:f9:12:40:a7:85:80:05:f1:f3:a9:
eb:44:d0:57:d3:0b:e9:50:c7:ab:18:14:43:74:99:
2e:05:60:1e:d0:22:6c:8c:05:9b:cf:02:52:f9:92:
60:54:ae:42:25:13:33:af:43:37:10:28:b6:ce:7d:
d2:88:25:03:f1:54:1b:8c:37:bf:4e:48:9e:ad:28:
b9:78:dc:05:08:a0:29:80:ad:26:34:fd:33:84:f3:
60:55:60:76:7c:1f:4e:be:9c:f8:b1:0c:48:dc:55:
4f:7f:9c:24:95:dd:0a:8a:41:6c:a2:66:eb:0f:05:
cd:7b:1f:5c:8c:34:ed:b0:be:67:e1:37:7c:6b:ac:
d8:99:31:7f:26:bf:97:60:b9:96:0b:ab:1a:50:6a:
24:05:47:c4:fb:6e:a8:e8:6c:a2:45:da:bc:8d:f5:
d5:32:f8:c5:fa:aa:f3:0b:fe:ce:38:d9:30:1e:30:
17:09:61:a1:79:d9:55:75:a8:68:51:4e:0a:05:87:
10:a4:08:af:48:32:29:b8:cd:11:36:38:6a:7e:2f:
6b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:02:81:3C:5C:D9:A2:11:EE:8C:18:DB:CA:3E:BB:15:9F:D2:3D:4D
X509v3 Authority Key Identifier:
keyid:1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d2:c3:e2:fe:97:80:cb:e2:38:da:2f:77:6c:c8:51:df:93:
8a:7b:7e:3f:84:75:ed:f8:7c:d9:cb:d7:eb:94:dc:7c:e1:d0:
31:86:58:55:84:dc:88:9a:55:18:bc:f0:b7:e1:5c:64:b7:38:
5a:47:cb:33:3c:26:14:f8:f1:c0:c7:ab:78:e1:3f:d8:a4:28:
08:89:87:c2:45:56:96:70:35:2a:cb:1d:71:62:62:eb:c0:56:
5a:f5:5d:c6:70:8a:b5:d4:62:ce:32:ae:7c:31:43:e9:72:f0:
32:ef:f2:71:2d:d5:91:bd:49:62:db:15:da:03:2f:7b:9d:f2:
11:a8:5a:86:08:16:3e:b5:66:ef:32:b4:74:6d:ad:1e:f7:cc:
db:ed:14:80:cb:0f:40:23:20:3b:68:5f:3d:86:d1:1a:5c:bf:
6f:5a:68:98:e6:a0:f7:fc:6a:bb:54:5b:6e:0d:8b:20:bf:25:
cc:2b:c9:cf:4a:4b:db:6c:6f:e2:83:14:7e:4f:92:e5:fc:f6:
9c:80:7b:84:a2:be:27:c7:fd:d1:1b:ae:e4:94:cd:23:ec:64:
90:5f:50:2e:75:32:d4:86:12:90:99:d8:aa:8f:ba:98:f3:d7:
87:9f:40:89:6e:e9:f9:02:cc:37:1f:db:97:7b:ee:41:5d:6e:
f0:8e:82:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6veXWTLvpXH30ZWOOU9GhcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNzhiMTgzNmRlY2FiNGZmNWJkZmE1ZTM3N2EzZGY4N2Yx
OGZjMGYwHhcNMjYwNjEwMDMwMDMzWhcNMjYwNjExMDMwMDMzWjAzMTEwLwYDVQQD
Eyg4YjAyODEzYzVjZDlhMjExZWU4YzE4ZGJjYTNlYmIxNTlmZDIzZDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20GeeFJl0fZhsVJiWSwESaFZXHs0
qoSzYTF70mMlY9sB/u5vN8sE/jeebolCrx41xPkSQKeFgAXx86nrRNBX0wvpUMer
GBRDdJkuBWAe0CJsjAWbzwJS+ZJgVK5CJRMzr0M3ECi2zn3SiCUD8VQbjDe/Tkie
rSi5eNwFCKApgK0mNP0zhPNgVWB2fB9Ovpz4sQxI3FVPf5wkld0KikFsombrDwXN
ex9cjDTtsL5n4Td8a6zYmTF/Jr+XYLmWC6saUGokBUfE+26o6GyiRdq8jfXVMvjF
+qrzC/7OONkwHjAXCWGhedlVdahoUU4KBYcQpAivSDIpuM0RNjhqfi9r8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsCgTxc2aIR7owY28o+uxWf0j1NMB8GA1UdIwQY
MBaAFBx4sYNt7KtP9b36Xjd6Pfh/GPwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhpeGcyM3NxMF8xdmZwZU4zbzktSDhZX0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jNjE1MmQtMWM5MC00MGNjLWEyMDYt
ZWMzY2IzNmQxMDI2LzEvSEhpeGcyM3NxMF8xdmZwZU4zbzktSDhZX0E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9jNjE1MmQtMWM5MC00MGNjLWEyMDYtZWMzY2IzNmQxMDI2
LzEvSEhpeGcyM3NxMF8xdmZwZU4zbzktSDhZX0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtLD4v6X
gMviONovd2zIUd+Tint+P4R17fh82cvX65TcfOHQMYZYVYTciJpVGLzwt+FcZLc4
WkfLMzwmFPjxwMereOE/2KQoCImHwkVWlnA1KssdcWJi68BWWvVdxnCKtdRizjKu
fDFD6XLwMu/ycS3Vkb1JYtsV2gMve53yEahahggWPrVm7zK0dG2tHvfM2+0UgMsP
QCMgO2hfPYbRGly/b1pomOag9/xqu1Rbbg2LIL8lzCvJz0pL22xv4oMUfk+S5fz2
nIB7hKK+J8f90Ruu5JTNI+xkkF9QLnUy1IYSkJnYqo+6mPPXh59AiW7p+QLMNx/b
l3vuQV1u8I6CNg==
-----END CERTIFICATE-----
Generated at Wed Jun 10 05:14:06 2026 by rpki-client