Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
File: hhxnvbbYwjD820J6n3G4ATWHL8I.mft (raw, json)
Hash identifier: XEeMpTqHhVlLHPa0SqIfuDKPXJ5D2p3dBX0IAldM0A4=
Subject key identifier: 52:AA:F5:0D:59:B3:DD:C0:06:28:8E:82:6C:C5:35:1E:45:12:23:97
Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Certificate serial: 019D9BF53302392893B91A1F27A860BD00B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 15:00:30 +0000
Manifest this update: Fri 17 Apr 2026 15:00:30 +0000
Manifest next update: Sat 18 Apr 2026 15:00:30 +0000
Files and hashes: 1: Cx3L6stT48ESFPU7dsSwev_71rM.roa (hash: qfJbE21IlMxNOU9ikBVG55ZmDtmkEW1ywFQa88RaFu0=)
2: hhxnvbbYwjD820J6n3G4ATWHL8I.crl (hash: 6QakgZ/lKAXk26X054AsPlwAQTYdO13k2NHvW5uJ6LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:33:02:39:28:93:b9:1a:1f:27:a8:60:bd:00:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Validity
Not Before: Apr 17 15:00:30 2026 GMT
Not After : Apr 18 15:00:30 2026 GMT
Subject: CN=52aaf50d59b3ddc006288e826cc5351e45122397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ce:77:ba:2e:6a:ed:6d:4c:34:d5:92:a4:a1:
ec:ce:03:c6:36:91:61:a9:68:36:9b:66:1e:b5:97:
a1:28:38:d2:8c:ce:22:76:98:83:0e:5a:22:55:88:
9a:b2:45:06:5b:9b:0b:f0:b0:a2:f5:dc:69:06:f1:
8a:60:42:75:fa:49:c8:29:1b:e3:8d:41:ac:9a:79:
1e:45:59:a4:5b:ec:c7:5c:d2:69:06:98:13:59:fe:
af:d9:32:d2:33:23:b7:fb:07:75:2a:05:fb:dc:de:
5c:3f:5b:1c:42:e8:f4:57:c5:08:48:a9:e3:00:3e:
8c:76:78:f4:32:0f:64:0f:19:59:73:00:77:4f:74:
fd:a4:fc:b1:76:62:78:98:66:61:a5:9c:67:01:0d:
21:5f:32:99:1e:3f:7c:30:58:64:44:65:3b:71:91:
15:35:d7:f6:99:87:f0:a3:59:0b:3f:cd:31:cd:5f:
d7:23:99:25:49:39:e2:6e:04:40:92:1b:4c:55:c2:
84:d3:48:05:dd:d9:15:91:44:a5:05:9b:06:ea:52:
51:8a:f8:93:bb:66:48:b6:65:85:85:16:b0:87:72:
d5:44:50:ee:f0:96:99:f0:c5:b4:25:89:85:39:55:
1a:3e:55:a0:19:c8:f4:c3:f9:88:3b:b7:3b:8f:c3:
6d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AA:F5:0D:59:B3:DD:C0:06:28:8E:82:6C:C5:35:1E:45:12:23:97
X509v3 Authority Key Identifier:
keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fa:c1:87:8f:d5:d8:74:40:f2:1e:f1:1b:56:f3:52:11:6c:
14:8a:db:a3:77:76:d7:7a:71:82:ff:39:90:f2:28:a3:ed:d7:
2c:80:fa:b0:b5:47:e2:bd:50:0b:53:49:0d:10:cf:59:e0:07:
e7:74:e9:15:ca:3f:5c:7f:c5:b8:61:ad:36:e1:70:00:37:4e:
9b:e5:eb:3a:0d:c0:7e:36:bf:4c:47:86:e5:c7:9b:aa:77:82:
aa:ea:2c:15:3f:e5:3b:b8:43:e9:d5:ec:ea:fd:3e:f5:a4:f3:
36:18:d9:65:f2:40:a9:9c:0b:dd:70:f1:a8:51:ff:d3:b4:2a:
0f:ee:ed:9c:c3:f7:17:76:67:27:fc:59:75:0c:41:3c:75:a4:
7f:66:8d:e6:ca:5a:b1:9e:6b:d4:24:86:3d:a9:ec:a6:3c:4c:
5d:70:7e:33:5a:18:cf:86:88:a3:74:ea:71:de:3e:01:73:59:
08:59:32:93:69:94:85:62:60:b6:e7:ad:78:8d:b6:86:0f:be:
e6:90:79:80:2e:fd:79:93:60:f2:f7:f5:0e:85:a9:bd:0e:dc:
0f:3a:b8:89:99:c7:70:10:2a:63:e1:16:69:b8:81:48:3a:46:
75:2d:12:c1:cb:0f:87:89:b8:c2:d6:0f:6d:35:00:23:03:a0:
4f:4d:7e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:03:03 2026 by rpki-client