Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File: 1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier: sM0Gn/tLOEL+npBw33miFJecNLil2JTNVPACggphmQs=
Subject key identifier: AA:D6:12:99:9B:83:2D:C4:12:AC:2E:FD:45:E5:22:FC:F3:F8:64:84
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer: /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial: 019CA97D45B93EAF12FEFF73DD476D9389A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number: 0981
Signing time: Sun 01 Mar 2026 13:01:25 +0000
Manifest this update: Sun 01 Mar 2026 13:01:25 +0000
Manifest next update: Mon 02 Mar 2026 13:01:25 +0000
Files and hashes: 1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: gDVkQj6NakLa3oVc2PAO4XGuL6ZvVZ6EGbsEW2/aIYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:45:b9:3e:af:12:fe:ff:73:dd:47:6d:93:89:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Validity
Not Before: Mar 1 13:01:25 2026 GMT
Not After : Mar 2 13:01:25 2026 GMT
Subject: CN=aad612999b832dc412ac2efd45e522fcf3f86484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cb:17:8d:f7:e1:30:b4:3c:2f:1c:43:d9:87:
2d:70:3a:b2:6f:2e:eb:6b:1c:47:ec:22:6c:04:30:
5d:6b:20:98:75:14:f8:ab:a9:f5:fc:36:0a:29:90:
dc:0f:c1:fa:5e:a2:ce:43:21:3f:f0:1e:5b:05:74:
b6:46:df:4a:8e:7f:fe:3a:e0:ce:c8:1e:44:1b:61:
8a:bd:c1:d1:cd:04:b8:43:0f:7a:1c:14:65:e0:b9:
32:77:52:b4:65:85:22:83:5c:2a:ea:e8:74:e5:04:
5c:d5:af:54:08:14:b6:ff:87:b3:49:b3:62:84:59:
d8:d2:09:f1:d1:1e:33:f5:d7:8d:3b:4d:65:1b:40:
ec:f1:de:90:69:91:1f:13:38:42:34:d0:27:2b:d3:
ff:73:5c:c2:ef:10:69:07:4c:53:53:0f:a3:fa:55:
39:a0:90:a7:11:0d:5d:8e:8b:94:3c:90:db:42:b8:
2f:96:c4:4d:96:d0:01:ad:5b:3f:0c:7d:07:e2:30:
7e:e4:50:2d:86:7a:f9:8f:64:a3:eb:11:9c:c7:74:
11:ef:63:3a:3b:23:ac:e4:d3:50:e8:ef:00:8b:fa:
2c:56:ff:48:4f:7e:b0:01:73:bd:52:a2:cf:0a:6e:
53:11:f0:47:55:ab:0b:a9:c0:ca:ab:cc:7a:c3:f2:
87:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D6:12:99:9B:83:2D:C4:12:AC:2E:FD:45:E5:22:FC:F3:F8:64:84
X509v3 Authority Key Identifier:
keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ab:d2:25:73:72:fa:fd:74:a6:34:ed:e6:ef:18:9a:9c:8e:
ce:ce:c2:66:0f:bf:5d:c6:68:55:d6:c8:a9:05:3d:57:56:bd:
5e:da:81:ee:98:4a:5c:9d:3f:48:af:c5:59:fa:d8:21:91:4c:
33:cd:8f:c6:d8:2c:c5:51:5a:67:31:ce:d8:b4:cd:8f:91:38:
7b:8c:4c:70:82:02:1a:98:b0:97:26:f1:a6:d5:78:c1:f7:4a:
fe:50:44:3b:50:9b:4d:ad:53:a8:a9:45:cb:d5:54:d4:54:64:
97:37:43:d9:c6:d8:a1:f1:90:02:16:e3:d3:32:b6:e0:7c:3d:
a2:0d:13:61:be:65:35:e8:72:6b:c5:59:bd:9e:2a:00:4e:64:
28:ab:a5:49:23:05:07:01:b5:c0:0c:76:6f:4d:58:49:74:63:
a6:eb:e0:42:0f:50:84:bb:13:ae:da:78:99:1c:ea:0f:65:c6:
ce:9f:a6:ab:be:89:58:57:bd:70:7f:76:90:49:40:46:12:b3:
71:ee:8c:cd:cd:5b:d0:06:45:46:5b:2a:e3:69:46:34:c5:96:
29:e8:f2:be:68:55:39:37:ea:61:68:84:48:ad:65:e6:c5:b0:
25:1b:fd:a3:3a:af:73:53:a2:f2:a3:29:0e:f4:40:60:67:a5:
09:55:fa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:18 2026 by rpki-client