Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
File: hhxnvbbYwjD820J6n3G4ATWHL8I.mft (raw, json)
Hash identifier: x17HZ23HbURxsTAqTN2C13GsnS5vhJoiv2WwQR5uSa8=
Subject key identifier: 72:C8:45:88:52:BA:DF:56:97:D7:C1:8D:1A:39:07:14:BF:AB:1F:7F
Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Certificate serial: 019CAC7DF2E80AD5222704C12C93D0DEE924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 03:01:01 +0000
Manifest this update: Mon 02 Mar 2026 03:01:01 +0000
Manifest next update: Tue 03 Mar 2026 03:01:01 +0000
Files and hashes: 1: Cx3L6stT48ESFPU7dsSwev_71rM.roa (hash: qfJbE21IlMxNOU9ikBVG55ZmDtmkEW1ywFQa88RaFu0=)
2: hhxnvbbYwjD820J6n3G4ATWHL8I.crl (hash: KsxeiFiPJvghFP3ai9EZmtvly0jSU/mBposuNL244HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:f2:e8:0a:d5:22:27:04:c1:2c:93:d0:de:e9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Validity
Not Before: Mar 2 03:01:01 2026 GMT
Not After : Mar 3 03:01:01 2026 GMT
Subject: CN=72c8458852badf5697d7c18d1a390714bfab1f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:71:4a:a5:af:3a:48:02:a4:0e:45:fd:52:
cc:81:32:66:d8:d5:47:8c:d0:f4:b4:25:a0:8c:0d:
47:55:9e:ec:77:86:fd:25:b1:cb:93:5d:82:b4:2a:
0e:3f:af:b8:4d:61:86:b1:3d:aa:fd:5a:a2:23:b9:
33:56:3c:ff:0f:08:54:62:82:fe:36:c4:fa:da:88:
47:80:0e:72:7d:7b:e2:e3:ef:e1:7d:28:84:da:53:
54:ce:e5:a7:47:54:37:27:4f:d3:63:1d:7b:77:2a:
55:39:56:4f:7d:fe:a8:8b:db:5d:d4:02:2e:8a:c7:
69:d7:8a:4e:c0:5c:1f:2c:5a:99:18:d2:46:e3:f4:
fa:4a:77:d0:1b:2a:c8:cc:05:22:fd:1f:3b:9e:c8:
8c:b7:5a:1f:c6:a2:01:8f:1b:42:66:92:eb:76:aa:
89:24:03:7f:2e:a5:cd:51:cf:1f:32:e0:50:ce:90:
b4:50:97:14:db:20:83:4e:d9:bd:e7:d7:65:22:a8:
c1:70:b1:9c:61:eb:c0:36:23:a3:4c:59:91:b3:6b:
ce:5c:a1:4d:90:bd:16:9f:40:5e:0d:a1:40:10:7e:
0e:96:85:07:2f:1f:53:70:9c:92:fb:16:6b:f2:28:
c4:e1:12:2b:42:11:a7:de:dc:90:b7:0d:d3:6b:62:
0d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C8:45:88:52:BA:DF:56:97:D7:C1:8D:1A:39:07:14:BF:AB:1F:7F
X509v3 Authority Key Identifier:
keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b4:4f:5e:51:e3:dd:7d:5b:2c:e4:e4:40:6a:5d:25:e6:83:
59:d0:78:b2:35:6d:02:5b:c5:8d:85:e7:9e:5d:18:75:1e:42:
ec:f2:88:5b:5d:f7:6f:07:9b:cf:00:a2:10:e7:61:6e:19:21:
78:23:1b:4e:35:be:e4:3c:99:99:77:60:e2:f0:4d:5d:ae:b4:
29:01:37:62:09:4c:12:0c:f1:b0:2d:1c:9a:c6:0b:28:a9:00:
ec:e7:82:6e:25:7e:9e:05:48:a1:53:c3:da:c6:dc:5d:6b:6e:
6e:3a:44:4f:e7:cf:9d:c1:bb:47:56:86:d0:da:25:b2:f8:84:
cd:ce:1f:51:ee:b3:85:2f:4e:ab:fc:c6:17:1a:c7:8d:8d:34:
4b:b5:b5:eb:3b:0f:28:c0:5f:77:5c:43:3f:26:f9:85:c1:27:
aa:bb:d1:d2:28:9d:23:d1:34:ad:d1:83:28:cc:bd:e9:aa:6b:
11:e8:13:8d:b8:f3:0b:bf:20:ff:0c:88:af:ec:c8:b4:20:ce:
64:f6:49:cd:29:1b:09:48:0f:19:b6:59:d4:68:9a:9b:f8:5b:
db:71:4d:7d:a9:a6:c9:00:31:8a:6e:c7:e3:74:0b:ac:0d:db:
b9:4f:e0:17:86:e4:32:0d:db:56:27:7f:3c:59:07:5c:bc:82:
5b:e3:f8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:42 2026 by rpki-client