Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
File: HUxgeKWUHFyxV9XylXyzFNftG-0.mft (raw, json)
Hash identifier: JB+vnryJsfiNdpUiAhhyBIWrLUk7BvNZKqxvySceuKk=
Subject key identifier: 1B:FD:8A:ED:3F:F4:6A:57:0A:58:0B:AB:1F:E2:B9:55:2B:1F:97:2B
Authority key identifier: 1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED
Certificate issuer: /CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed
Certificate serial: 019D9AAB7976EB9C3F24A7F1726883475FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
Manifest number: 0CC3
Signing time: Fri 17 Apr 2026 09:00:22 +0000
Manifest this update: Fri 17 Apr 2026 09:00:22 +0000
Manifest next update: Sat 18 Apr 2026 09:00:22 +0000
Files and hashes: 1: HUxgeKWUHFyxV9XylXyzFNftG-0.crl (hash: KsP8dYqvAT8n8nzWa8bZml3dOacL3SaolZAgJLBHPWU=)
2: cBCyxlvufUfGOWDilS38ttT1uvY.roa (hash: r7Dt5WSAAV3olhtKkx8/cVrUqstLuq8swjnGaqOS5no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:79:76:eb:9c:3f:24:a7:f1:72:68:83:47:5f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed
Validity
Not Before: Apr 17 09:00:22 2026 GMT
Not After : Apr 18 09:00:22 2026 GMT
Subject: CN=1bfd8aed3ff46a570a580bab1fe2b9552b1f972b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:df:65:cc:9a:96:1d:a5:bf:d4:c0:a6:3e:59:
a9:08:1e:7f:16:3b:39:fa:53:3a:83:47:2f:c2:08:
af:b7:2a:a6:10:0d:e1:3e:e1:73:b7:ed:01:1f:d8:
30:9f:35:fd:e0:7e:a2:7f:aa:e3:37:67:73:40:fa:
f7:c2:b1:72:ad:3a:bd:8d:5c:2b:0a:25:5c:14:7d:
61:7a:a1:55:77:94:7f:be:ac:75:2e:8e:18:38:ef:
84:05:b7:3d:8d:49:6c:44:41:c7:0b:7b:92:18:52:
eb:e2:ac:e9:b4:ce:ba:d2:e1:be:97:38:ef:bd:db:
93:63:54:f8:b6:19:60:9c:bd:84:94:53:0f:4a:b9:
b2:24:b0:ad:6e:6b:80:a2:b1:a5:54:c2:c2:80:55:
b2:8c:35:3f:4a:76:90:45:98:96:0e:2e:6b:49:85:
b4:1d:6a:5b:09:88:c1:ce:a5:3f:cc:b4:23:c8:f9:
e2:62:3a:5c:d0:62:ab:d8:8b:ce:dd:5b:b1:84:22:
bd:b7:9e:e9:8a:b4:e6:54:4e:83:9d:fc:54:8c:cd:
c1:61:8c:4d:8c:3b:57:0f:70:49:b2:56:16:b8:37:
9e:67:93:35:f0:ff:4d:75:ae:a3:d7:11:76:5f:d1:
7d:38:d0:3e:49:20:56:f7:2d:74:c7:69:52:b1:f5:
3a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FD:8A:ED:3F:F4:6A:57:0A:58:0B:AB:1F:E2:B9:55:2B:1F:97:2B
X509v3 Authority Key Identifier:
keyid:1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ce:8a:d5:b4:4f:5a:e0:c0:3e:43:26:40:8b:a9:37:49:20:
7c:72:5b:af:03:0a:eb:59:0f:9f:ee:dc:83:ce:88:2a:fb:9f:
21:b5:a6:ef:6f:fb:ee:66:8c:c3:2e:db:1d:82:58:7b:63:46:
08:5f:29:0a:a7:0e:ba:6b:81:88:04:39:bc:61:34:6a:a5:8e:
2f:a8:f2:2b:f6:49:db:27:13:f5:10:5b:ab:27:51:27:7b:00:
72:41:bd:bd:9b:91:5a:9b:69:20:bd:1a:81:71:40:4e:b5:8c:
64:65:f2:40:0a:bf:0e:a7:ad:a2:a7:8c:f1:75:62:b0:de:52:
1b:c8:4e:ae:fb:e6:92:b6:90:38:72:be:11:df:a4:0f:03:2c:
a3:04:4b:7d:c4:1f:08:b2:32:da:d4:84:58:25:2d:67:9b:08:
82:f7:0f:9d:c0:65:0a:54:ac:12:89:d9:38:28:ff:26:0a:11:
f6:a9:68:2f:dc:e7:b3:40:30:62:c7:17:d5:3b:fe:c4:7b:31:
54:15:43:b4:51:75:8a:e2:86:38:59:04:2d:44:f9:55:48:74:
44:38:fb:cf:b6:3f:94:d1:05:9d:17:43:a2:00:92:ec:3e:7b:
50:39:26:51:39:ab:60:8c:a5:3d:9e:dc:3c:e9:19:e4:3f:e0:
c1:62:5d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:31:13 2026 by rpki-client