Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
File: hXLVrMJRZ2mcf886G4BOoyWsTl0.mft (raw, json)
Hash identifier: OKmpBHCb8gILx1q55pzMUdpj+FvakMYZCR3U4NIW9QE=
Subject key identifier: ED:CE:8B:80:51:E6:03:F1:00:93:6C:A9:EC:CC:CB:D3:82:A1:8B:3B
Authority key identifier: 85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
Certificate issuer: /CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Certificate serial: 019D37C13CB7215C0B18ACD177DAA0869B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
Manifest number: 17BE
Signing time: Sun 29 Mar 2026 04:01:43 +0000
Manifest this update: Sun 29 Mar 2026 04:01:43 +0000
Manifest next update: Mon 30 Mar 2026 04:01:43 +0000
Files and hashes: 1: hBm5sqEsYgYzGLvahciDaWXB5tc.roa (hash: B8HbKYDNFdLFprrv9ZSAbv02c/Z7c5d/cp8eKIMZxIo=)
2: hXLVrMJRZ2mcf886G4BOoyWsTl0.crl (hash: iTXkg9LXk79CvX8bp9EYgKlp46DwoWjHXzmJq41kHYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:3c:b7:21:5c:0b:18:ac:d1:77:da:a0:86:9b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Validity
Not Before: Mar 29 04:01:43 2026 GMT
Not After : Mar 30 04:01:43 2026 GMT
Subject: CN=edce8b8051e603f100936ca9eccccbd382a18b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:03:e7:f0:74:8a:54:bd:e8:98:8b:26:a7:
06:8b:5a:a6:b7:b6:e2:a0:f0:14:d7:33:9f:77:ef:
c6:b8:3d:bd:e8:73:94:78:5d:87:1b:ac:10:65:9c:
82:81:46:9b:0c:ee:bf:94:a1:b5:d9:57:ed:35:fd:
f1:ad:b7:31:3c:b6:64:1d:27:c9:a4:6e:02:ac:73:
88:27:f1:a6:f9:20:2e:48:8b:e3:d5:68:02:33:07:
21:e3:6c:23:36:fe:00:6b:db:ba:60:04:b7:77:13:
0f:cf:df:fc:53:9f:43:fc:32:0e:17:5b:4c:7b:37:
8c:e9:13:d8:3c:ed:5f:99:80:a8:1c:b4:97:b7:28:
1f:70:7f:3b:d8:91:26:98:6f:a3:c6:e0:3b:87:17:
82:ff:d3:4f:d4:61:70:ad:6b:0f:14:12:de:10:2d:
ed:31:01:21:b4:1a:27:45:4c:af:80:a1:e3:7f:c9:
85:a5:1a:4a:2d:61:f8:23:94:1e:85:47:7d:e1:4b:
3e:a2:1b:c3:29:a5:c6:76:b0:0b:9e:09:5d:32:87:
4a:eb:8f:38:3a:0c:7e:fa:6f:58:95:8a:ba:f7:10:
45:59:f8:10:22:9b:05:79:9a:d7:97:46:6d:63:b1:
33:ef:e9:53:59:fb:94:9b:c9:e8:6e:ce:cf:46:f3:
c2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CE:8B:80:51:E6:03:F1:00:93:6C:A9:EC:CC:CB:D3:82:A1:8B:3B
X509v3 Authority Key Identifier:
keyid:85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6a:45:c5:de:79:0e:4d:2f:fa:5a:0a:ab:11:eb:5e:26:0e:
83:03:88:3d:b3:97:ba:14:09:be:2e:75:d3:f1:d3:5f:bf:7c:
c7:b6:bc:42:26:e2:86:ca:aa:36:12:8c:c7:32:2d:43:85:5a:
34:32:8b:d1:56:42:97:e2:3e:3a:fa:06:89:a9:e2:4a:49:fa:
54:b5:45:3e:c6:ef:0a:56:66:fe:c4:c7:b1:4c:4b:ef:b4:04:
15:bb:88:48:f4:9a:f2:04:18:88:8e:b0:3a:f5:43:b2:4d:37:
68:fe:94:2f:3c:58:0f:f2:06:6d:09:de:c1:c4:12:25:9a:d9:
f3:9a:27:71:b5:d6:9b:4c:c6:4a:0c:07:6e:b2:99:ec:07:2c:
9c:fd:35:8e:ab:1c:76:47:55:f3:65:fe:5a:65:09:0d:0f:23:
2a:9b:79:54:9b:75:ac:93:01:15:c8:c8:8a:dc:19:75:23:b0:
e3:4e:9f:f5:77:3d:3b:0d:11:b3:e8:5b:17:50:43:43:9e:fe:
b5:ad:de:36:98:2a:14:49:1e:74:a5:c9:43:e0:da:8c:fc:9e:
69:d9:c5:59:ae:b4:14:50:71:dd:4c:ab:89:7b:3d:77:f2:fc:
e6:94:04:3e:87:44:66:4d:e8:9c:90:ee:88:db:bd:67:9b:d0:
38:ba:54:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:16 2026 by rpki-client