Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
File: HUxgeKWUHFyxV9XylXyzFNftG-0.mft (raw, json)
Hash identifier: XpSknOl3JqzhVhacFxFZ0Uc4OubZLnzsmL0Zqoiwur8=
Subject key identifier: 4D:EF:06:9C:6D:63:AE:57:88:EB:3F:FF:D1:3D:56:55:6D:E2:0F:2F
Authority key identifier: 1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED
Certificate issuer: /CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed
Certificate serial: 019CAF10C554BAEB262D613E1E3748950F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
Manifest number: 0C49
Signing time: Mon 02 Mar 2026 15:00:37 +0000
Manifest this update: Mon 02 Mar 2026 15:00:37 +0000
Manifest next update: Tue 03 Mar 2026 15:00:37 +0000
Files and hashes: 1: HUxgeKWUHFyxV9XylXyzFNftG-0.crl (hash: KHwpwVIQ9K+n6MEGnnJnf0PhU7hnZiAVZT9S1utCr/g=)
2: cBCyxlvufUfGOWDilS38ttT1uvY.roa (hash: r7Dt5WSAAV3olhtKkx8/cVrUqstLuq8swjnGaqOS5no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:c5:54:ba:eb:26:2d:61:3e:1e:37:48:95:0f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed
Validity
Not Before: Mar 2 15:00:37 2026 GMT
Not After : Mar 3 15:00:37 2026 GMT
Subject: CN=4def069c6d63ae5788eb3fffd13d56556de20f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c0:13:bf:26:c6:9d:3d:14:31:b8:c2:d2:09:
56:1f:fb:65:b1:fc:2b:00:b3:5c:88:0a:29:19:1c:
24:d0:ab:a1:d0:4c:89:7f:f6:9d:e4:ff:a7:a8:49:
e0:4b:6b:96:89:30:32:8c:27:35:06:59:e8:3e:2d:
bb:2b:f3:54:d5:e7:0f:16:3d:9e:24:73:00:c0:57:
6d:ac:7b:a4:85:28:85:e6:ee:15:ac:c6:ed:18:c8:
2e:fb:b3:fe:6b:85:1c:1c:48:81:d7:b5:d3:80:82:
9b:0d:fd:a6:7a:ac:94:aa:d4:a3:09:28:4f:50:34:
05:b1:b7:9a:c7:bd:92:25:db:50:33:85:12:5d:f7:
4f:2d:ef:01:0a:67:18:ba:50:b6:44:11:15:bb:49:
1b:3a:14:6c:01:72:a3:dd:40:01:d8:0a:5b:e7:c4:
27:dc:4d:f0:26:30:37:d4:db:24:ec:51:09:00:73:
b4:fd:49:cb:6c:7a:54:5f:dd:b0:ce:a3:c0:ac:8e:
36:bb:92:53:6c:e9:8f:70:91:65:f9:a8:9f:33:6b:
09:7c:06:ef:a7:ed:8d:b1:81:c7:42:09:78:88:84:
f2:15:af:04:6c:9c:ea:36:9f:65:e5:4d:8f:2b:0a:
1c:e7:c0:20:88:09:39:04:b0:80:60:57:21:c7:ad:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EF:06:9C:6D:63:AE:57:88:EB:3F:FF:D1:3D:56:55:6D:E2:0F:2F
X509v3 Authority Key Identifier:
keyid:1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0c:ea:08:90:82:d9:85:a1:e3:1c:b6:84:72:09:34:e1:38:
67:a5:c4:ea:37:49:b7:5c:b4:53:9a:0f:f7:60:c1:ce:fd:44:
e4:1f:c5:32:d9:90:25:cc:cb:75:8c:40:dc:df:d8:26:17:c3:
08:b7:61:32:ac:3b:48:34:0d:69:37:b5:5f:9f:34:03:36:22:
04:54:6d:77:29:12:f2:1d:0a:88:54:02:90:be:55:7c:ec:20:
fb:2c:6c:f7:1b:ff:9c:a1:33:c2:fd:cc:12:a3:b9:d3:97:7f:
4e:72:90:57:cb:bc:b9:c6:3e:f6:87:ea:1c:dc:38:e6:a6:d3:
dc:60:bb:1b:e2:36:83:d3:77:9c:2d:75:4f:e6:c4:73:78:e7:
b2:74:21:53:c4:5e:e9:00:2d:c0:9a:a1:ae:87:1a:51:ef:5d:
36:4c:03:23:d2:eb:db:c1:28:f0:99:94:49:fc:d5:75:63:e4:
65:0e:34:b4:e6:18:d4:67:9a:a3:d6:ae:db:33:1b:1a:49:6e:
20:aa:49:7b:59:7a:3d:25:61:60:69:a6:b8:69:a8:a1:21:6a:
d9:1c:9f:65:d0:87:72:56:b1:d6:42:d0:2a:2f:61:60:6b:55:
fd:84:39:6c:c9:7e:56:3c:72:5a:08:d1:e6:e1:d3:1a:60:67:
b9:f8:4d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:28:51 2026 by rpki-client