Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
File: hhxnvbbYwjD820J6n3G4ATWHL8I.mft (raw, json)
Hash identifier: EEqG4wDaNr34G5kw186jqAjZNQHLPRKvFNGtKTx83Z4=
Subject key identifier: 73:5E:C1:28:0C:96:78:3D:6D:33:DD:96:F4:AB:16:64:F2:35:13:83
Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Certificate serial: 019ED4CFEF96E5D68A6482A9EFF4BDCF4D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
Manifest number: 1968
Signing time: Wed 17 Jun 2026 09:00:57 +0000
Manifest this update: Wed 17 Jun 2026 09:00:57 +0000
Manifest next update: Thu 18 Jun 2026 09:00:57 +0000
Files and hashes: 1: Cx3L6stT48ESFPU7dsSwev_71rM.roa (hash: qfJbE21IlMxNOU9ikBVG55ZmDtmkEW1ywFQa88RaFu0=)
2: hhxnvbbYwjD820J6n3G4ATWHL8I.crl (hash: 9pswyn6wan99Scg0+52ih79Z7D0C3PXPs9/wNfSaK3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:cf:ef:96:e5:d6:8a:64:82:a9:ef:f4:bd:cf:4d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Validity
Not Before: Jun 17 09:00:57 2026 GMT
Not After : Jun 18 09:00:57 2026 GMT
Subject: CN=735ec1280c96783d6d33dd96f4ab1664f2351383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b9:a3:31:84:5a:57:20:ba:c6:8f:a6:65:56:
67:14:c4:01:3c:db:d9:f8:70:a7:cd:2b:92:4b:62:
62:21:cb:97:60:37:02:25:b6:00:68:62:e3:2b:99:
bc:ad:2d:e4:38:aa:0b:c0:0c:2a:50:c2:35:49:fc:
87:bf:ef:50:44:d5:0b:ec:42:75:b7:40:0c:41:96:
f9:9e:5e:b2:95:11:0e:37:a6:ce:23:f8:f8:75:e1:
6b:5b:9a:38:c1:cf:82:60:ee:7d:7d:f8:35:3f:1e:
27:6c:34:7d:34:6b:cc:b0:9d:3c:7d:da:8c:4e:4d:
08:58:48:8f:3c:ec:ea:a7:a8:72:04:28:98:71:b0:
d3:df:22:fa:4c:df:ab:a1:b4:70:8f:df:db:7e:0d:
b1:58:d2:e7:7c:b5:87:d3:83:a5:15:c3:20:06:4f:
95:98:7f:1e:d3:22:81:c9:97:94:9f:64:a4:20:fd:
70:99:d8:5b:88:fd:da:f6:b0:d2:26:af:6b:de:a9:
6b:24:cd:e6:42:59:a2:64:01:a0:86:c6:79:9e:eb:
42:87:eb:2b:ea:9e:72:f4:84:27:60:39:cb:40:89:
ed:f2:d3:f8:a8:c0:f9:99:c9:f3:5c:9a:2b:9b:21:
bb:90:81:9a:b3:49:1c:2e:d9:2b:b7:d7:11:ed:92:
b4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5E:C1:28:0C:96:78:3D:6D:33:DD:96:F4:AB:16:64:F2:35:13:83
X509v3 Authority Key Identifier:
keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:8f:7b:b3:03:f1:b5:7d:02:95:7c:b5:33:c5:aa:1d:18:94:
c1:76:4f:64:75:8c:e6:e8:88:ae:cc:6d:5b:8e:eb:07:da:32:
00:ae:fc:bc:5f:80:69:29:d0:88:83:4f:9c:2f:d1:ec:74:ae:
53:7f:d7:ad:43:35:2c:cf:12:54:64:c3:33:b1:49:81:10:a3:
22:61:5e:39:94:f0:b1:d0:df:da:4f:13:5b:64:5a:bb:d1:e2:
61:cb:1a:10:a2:3d:82:9e:42:9c:72:bc:d6:6a:2b:9b:84:2f:
9f:07:34:ed:18:04:b5:72:2d:fe:f7:3a:86:bb:5e:a4:96:b0:
a8:29:3c:00:d8:5d:19:65:27:2f:c1:56:6e:cd:63:6c:f8:52:
e3:a9:57:75:99:a6:f6:ec:a8:13:27:01:9f:92:d6:05:ec:3c:
67:05:80:87:b7:89:5b:fc:05:8b:95:ae:30:98:1a:85:89:09:
2e:ef:0a:c4:bc:00:d0:45:1e:94:fe:5e:49:e7:1c:8f:f3:d6:
6e:54:81:c8:f0:d7:03:1c:4e:de:c3:4f:20:4a:be:9a:b0:52:
2d:c4:68:f5:46:3b:db:76:a8:a0:82:23:66:ea:cb:9f:27:75:
7d:86:d8:67:45:7e:57:49:92:18:17:82:e9:a8:46:ce:70:25:
60:9e:b2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:55:24 2026 by rpki-client