Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
File: HxKTy74vaSVA08xaboI2YElMQGM.mft (raw, json)
Hash identifier: zCo68G3cqzS7DfHy0AxXF+77ZbDX+bR3m0JN9yVxlvY=
Subject key identifier: D9:6D:8B:5F:AB:7F:5A:BA:94:57:67:B1:4A:36:B8:73:51:EB:F8:18
Authority key identifier: 1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
Certificate issuer: /CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Certificate serial: 019CAB6BA8814D2E3426485CEDF43E9A5BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
Manifest number: 0FC9
Signing time: Sun 01 Mar 2026 22:01:25 +0000
Manifest this update: Sun 01 Mar 2026 22:01:25 +0000
Manifest next update: Mon 02 Mar 2026 22:01:25 +0000
Files and hashes: 1: HxKTy74vaSVA08xaboI2YElMQGM.crl (hash: Af6MrJloZ6WQRv3Eh6AjscVnkq5xGJsjfpYe5EitINM=)
2: qZFE4vvvTJ5M0gUNt0iW88jKACg.roa (hash: qVu2Vq/zJz0bGweHHRGe7Gy0T4GqhgX5DzTBtgSOzZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:a8:81:4d:2e:34:26:48:5c:ed:f4:3e:9a:5b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Validity
Not Before: Mar 1 22:01:25 2026 GMT
Not After : Mar 2 22:01:25 2026 GMT
Subject: CN=d96d8b5fab7f5aba945767b14a36b87351ebf818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:65:77:fc:5c:ad:8d:3e:47:cf:52:1d:68:b2:
cb:2a:05:26:70:9f:f7:ec:d6:4d:5e:9d:9c:52:f7:
a2:6c:6f:35:72:b9:9e:af:90:a2:b0:2b:36:dd:ff:
e5:80:a5:60:d6:74:f7:1e:db:e8:c1:5c:84:49:ba:
cc:55:06:3f:0d:94:ef:64:61:4c:ff:13:f8:66:ec:
58:03:16:7d:6d:9c:c7:40:51:a8:97:8f:5f:8c:dd:
fe:fe:d0:92:92:5a:f8:9b:90:54:9e:f0:3d:37:d3:
bc:3a:ac:ea:74:cc:44:46:4a:c7:7c:81:22:63:38:
28:d0:f3:5f:92:c7:a2:dc:6e:5f:ed:dd:2d:dd:bf:
6f:fb:f0:d5:ce:b9:71:7b:42:c2:57:0e:5e:84:6f:
fe:8d:75:f6:17:f2:6d:5e:54:6f:30:53:f9:b1:b0:
32:fd:c7:5b:ed:36:ed:7b:2a:b6:fc:d0:18:1d:8d:
66:3e:d0:0b:cf:69:9c:d4:01:27:69:ff:7b:d2:ba:
3f:5b:39:4a:a8:2b:9d:67:24:8e:77:83:6c:3d:24:
0d:5e:01:54:95:4c:6c:2b:c6:00:7a:b9:0b:bf:52:
ef:f9:ef:fe:a2:26:1b:73:2e:66:d9:e4:01:2f:11:
a0:b5:90:03:68:d8:71:bb:6d:09:91:88:3a:a8:83:
4d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6D:8B:5F:AB:7F:5A:BA:94:57:67:B1:4A:36:B8:73:51:EB:F8:18
X509v3 Authority Key Identifier:
keyid:1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:58:34:a3:c3:5b:6a:51:de:41:cd:e2:e1:90:de:32:8c:b9:
fe:99:8b:bc:7c:c7:53:75:e8:a2:b8:72:f0:e8:2e:07:67:01:
f3:53:4d:c3:25:71:ec:e3:39:cb:dc:13:2b:09:e7:dc:8d:8d:
00:4d:c1:17:7c:af:18:aa:fa:01:7d:c0:a3:27:cc:45:ac:ab:
a3:2f:64:0d:e8:4c:0b:f6:72:df:95:81:31:4a:fe:e1:09:8b:
3d:9a:32:11:63:a9:b9:ce:00:01:4c:9d:69:ec:76:a2:30:f0:
6f:60:12:c5:7e:8b:b6:49:21:d4:f8:d5:9b:9e:a9:2d:cd:ca:
ce:51:e4:d1:5a:02:c4:9e:bc:82:0b:44:ca:6c:5e:2e:65:c9:
60:52:fa:4a:41:bc:5b:b2:bb:34:0f:4c:fa:11:70:8d:2e:a0:
06:45:7e:4f:b9:c5:47:2d:ce:38:4c:8f:ab:8b:91:18:88:d9:
79:d9:e9:89:3e:84:15:e3:fc:82:af:e7:20:f2:cf:da:77:69:
60:c3:57:75:dc:bf:52:74:61:2e:1e:3c:3c:96:0b:25:8f:20:
1f:0e:bc:8d:3f:d3:2a:cd:24:c3:83:38:64:a1:07:b7:33:3e:
c3:a0:b6:1d:f4:bd:0f:28:f0:61:44:37:cf:89:f7:77:e1:1c:
2f:02:ca:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra6iBTS40Jkhc7fQ+mlvhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMTI5M2NiYmUyZjY5MjU0MGQzY2M1YTZlODIzNjYwNDk0
YzQwNjMwHhcNMjYwMzAxMjIwMTI1WhcNMjYwMzAyMjIwMTI1WjAzMTEwLwYDVQQD
EyhkOTZkOGI1ZmFiN2Y1YWJhOTQ1NzY3YjE0YTM2Yjg3MzUxZWJmODE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2V3/FytjT5Hz1IdaLLLKgUmcJ/3
7NZNXp2cUveibG81crmer5CisCs23f/lgKVg1nT3HtvowVyESbrMVQY/DZTvZGFM
/xP4ZuxYAxZ9bZzHQFGol49fjN3+/tCSklr4m5BUnvA9N9O8OqzqdMxERkrHfIEi
Yzgo0PNfksei3G5f7d0t3b9v+/DVzrlxe0LCVw5ehG/+jXX2F/JtXlRvMFP5sbAy
/cdb7Tbteyq2/NAYHY1mPtALz2mc1AEnaf970ro/WzlKqCudZySOd4NsPSQNXgFU
lUxsK8YAerkLv1Lv+e/+oiYbcy5m2eQBLxGgtZADaNhxu20JkYg6qINNnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlti1+rf1q6lFdnsUo2uHNR6/gYMB8GA1UdIwQY
MBaAFB8Sk8u+L2klQNPMWm6CNmBJTEBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjVlM2MtYWM3Yi00ZjBmLWE4NzQt
MjY5NzE1OTlhNTU0LzEvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8zZjVlM2MtYWM3Yi00ZjBmLWE4NzQtMjY5NzE1OTlhNTU0
LzEvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlg0o8Nb
alHeQc3i4ZDeMoy5/pmLvHzHU3Xoorhy8OguB2cB81NNwyVx7OM5y9wTKwnn3I2N
AE3BF3yvGKr6AX3AoyfMRayroy9kDehMC/Zy35WBMUr+4QmLPZoyEWOpuc4AAUyd
aex2ojDwb2ASxX6Ltkkh1PjVm56pLc3KzlHk0VoCxJ68ggtEymxeLmXJYFL6SkG8
W7K7NA9M+hFwjS6gBkV+T7nFRy3OOEyPq4uRGIjZednpiT6EFeP8gq/nIPLP2ndp
YMNXddy/UnRhLh48PJYLJY8gHw68jT/TKs0kw4M4ZKEHtzM+w6C2HfS9DyjwYUQ3
z4n3d+EcLwLKgA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:52:02 2026 by rpki-client