Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File: 1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier: Q+pJ/qrCbyVrytTdVwNfqlc0Tkh3rlYmgAf4NX1ODGk=
Subject key identifier: 60:2C:1C:B2:03:B0:A5:6D:F2:03:09:2F:04:29:C1:65:8F:DF:12:ED
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer: /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial: 01A1AB27BAAB00DC76E91A2AAD01090AB21C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number: 0C19
Signing time: Thu 05 Nov 2026 10:01:09 +0000
Manifest this update: Thu 05 Nov 2026 10:01:09 +0000
Manifest next update: Fri 06 Nov 2026 10:01:09 +0000
Files and hashes: 1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: XwR/4QWvShKjKW4W7OyF7hqDv/mejTn4I++GnyocPyk=)
2: 93kiNNYoQc853Cz6ue8qioc2i3U.asa (hash: WLUYaARSKUVqmQ7ak9029kT0kjkhtKg9e5NIskAm7E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:27:ba:ab:00:dc:76:e9:1a:2a:ad:01:09:0a:b2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Validity
Not Before: Nov 5 10:01:09 2026 GMT
Not After : Nov 6 10:01:09 2026 GMT
Subject: CN=602c1cb203b0a56df203092f0429c1658fdf12ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:d0:20:ea:ec:bb:9b:99:52:91:97:64:43:
8b:bd:f3:fd:c7:b1:43:16:17:97:a1:08:d9:80:0c:
fa:78:fc:6f:30:42:59:8d:11:19:68:eb:dc:ff:a6:
33:97:48:6e:0c:da:7b:7e:8c:26:b3:f3:7e:bb:b1:
46:fe:e1:2b:24:20:dd:de:b2:64:1a:10:bf:59:e6:
78:4b:7d:f9:2b:60:18:e9:0d:0f:fc:57:8d:ac:cf:
37:36:b6:37:26:19:6a:f0:04:f9:84:18:a2:a4:74:
f9:9b:92:53:32:45:0c:58:40:75:3b:05:9b:79:00:
32:e4:4f:06:92:02:e7:7a:bd:f4:33:ac:11:9f:9a:
c2:71:87:80:de:ff:8e:22:4b:46:48:9e:0c:88:d4:
f3:33:97:51:42:a3:3f:ab:58:81:09:9b:ea:b0:ab:
0e:17:4a:16:ef:36:8a:e9:41:78:98:78:04:31:1e:
73:40:ef:ce:a8:c5:78:d0:60:53:05:9d:5b:20:96:
ca:8a:bd:e2:09:79:01:0b:1b:a5:40:75:02:76:4c:
d5:7f:e8:66:bc:54:d4:d1:b4:b1:1b:58:8c:55:d4:
a8:9c:1f:64:c2:0d:64:66:98:e7:97:0b:83:b9:d4:
d6:e0:f8:1f:24:db:bb:7c:7e:3b:44:fc:6f:a8:e0:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2C:1C:B2:03:B0:A5:6D:F2:03:09:2F:04:29:C1:65:8F:DF:12:ED
X509v3 Authority Key Identifier:
keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d2:76:c6:b5:78:14:29:78:27:17:fc:78:73:7a:c8:a0:c4:
c0:ed:87:03:9c:3b:13:c5:f0:dd:0c:b3:b2:db:d7:29:e8:60:
19:5e:6a:b6:37:f7:26:21:7c:3d:d9:14:e5:57:86:59:e9:72:
a1:38:cb:d4:c5:92:9b:7e:67:7f:4f:e1:12:a3:2e:b9:fb:b6:
f4:93:eb:7d:3d:ac:54:6f:14:f0:36:3f:47:39:0c:10:cc:38:
43:06:c6:7d:00:5a:52:31:bf:1d:2a:1f:7d:67:a7:03:45:4f:
76:14:f7:1a:bc:2d:c3:08:89:82:8f:c9:a2:ee:cb:b5:83:e1:
2f:7f:b5:6e:71:52:5e:8f:93:d3:be:3f:46:ca:a9:47:79:de:
a0:59:d6:c9:4c:89:31:6d:e1:08:25:3a:f2:f6:9e:0b:21:c8:
d8:5d:d5:db:fa:ce:e4:88:bd:5c:2e:92:6b:ac:b7:16:36:e4:
d7:91:fb:91:64:b4:9c:e6:95:72:41:42:5c:a7:61:28:a7:81:
d2:1b:e2:6f:73:60:fd:e3:3a:9a:9e:ba:7f:be:92:0c:a5:d5:
71:98:6f:06:fb:a9:14:b9:bb:bf:a6:14:d2:0c:c3:97:51:72:
9d:8a:76:e8:5f:c5:47:ad:90:fc:7e:da:83:3f:81:fb:21:a6:
24:52:7c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:16:49 2026 by rpki-client