Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
File: hxv5w80rNkB9-9l2-4SiEZeg6qE.mft (raw, json)
Hash identifier: vDk9AOrc3HW7rkFDK7HeMsBeqvAYslB+vTiF2vV1ih8=
Subject key identifier: 09:56:91:A0:04:23:B9:AB:E7:E7:5C:D5:D2:46:9E:76:7B:1D:7A:83
Authority key identifier: 87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1
Certificate issuer: /CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
Certificate serial: 019CADC7E3D52723F95E70221906F0515D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 09:01:24 +0000
Manifest this update: Mon 02 Mar 2026 09:01:24 +0000
Manifest next update: Tue 03 Mar 2026 09:01:24 +0000
Files and hashes: 1: hxv5w80rNkB9-9l2-4SiEZeg6qE.crl (hash: 9yG4iwvpu77+ONhruNqOAksb+kgikzlYopW2d4Q6VKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:e3:d5:27:23:f9:5e:70:22:19:06:f0:51:5d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
Validity
Not Before: Mar 2 09:01:24 2026 GMT
Not After : Mar 3 09:01:24 2026 GMT
Subject: CN=095691a00423b9abe7e75cd5d2469e767b1d7a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:62:e9:7a:a5:07:b9:ec:f1:1b:68:34:22:
b3:ec:d6:4c:43:fc:b3:51:21:43:4a:8c:e7:f7:b9:
39:e1:e8:04:99:e8:74:83:7f:c3:90:0e:74:e5:41:
f5:bf:36:1b:23:54:3a:3c:b5:93:4f:a2:41:69:1f:
db:70:14:77:29:4e:cb:f1:78:d5:46:19:e8:66:8d:
28:3d:74:a0:8d:a2:bc:d0:13:1e:e1:71:89:31:a4:
9f:6a:9c:ca:bc:04:61:c9:d9:98:d5:26:18:02:2b:
28:08:ba:5f:af:e3:7f:0d:cb:33:75:bf:43:09:a9:
e8:fa:20:e9:8b:f2:65:07:ab:a8:a0:03:52:6f:9e:
7b:64:95:34:c7:f5:ff:15:7a:9e:44:62:96:4a:ae:
7b:7f:1d:c5:d6:e9:0b:13:4e:5e:31:84:34:f3:7f:
7c:e8:d9:ff:cb:ce:54:87:f8:5d:57:a6:52:ff:a8:
4b:2e:e3:ab:da:69:9a:c4:eb:1b:5b:0c:be:64:e5:
47:3f:f1:e3:33:57:e3:cd:77:37:dc:46:41:bc:b6:
83:d7:0b:31:47:0d:a7:bc:a6:10:e4:58:ea:62:b4:
7b:08:5f:10:13:13:7b:fb:1f:1d:e1:98:70:33:e7:
5f:49:23:9e:df:6b:8d:ea:71:bc:b2:3e:cc:19:b9:
53:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:56:91:A0:04:23:B9:AB:E7:E7:5C:D5:D2:46:9E:76:7B:1D:7A:83
X509v3 Authority Key Identifier:
keyid:87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:be:05:fb:df:e8:62:c3:f4:d2:a1:b9:9c:ed:93:33:2d:19:
47:2c:8a:3b:a6:4f:ae:e5:e0:6c:86:79:17:03:9f:a6:b5:d5:
24:14:a4:5d:6e:25:8d:8d:9e:7f:83:29:dd:ce:e2:8a:c7:d3:
d1:57:b3:90:b9:e7:89:ce:e9:5c:98:eb:2c:1c:ec:8f:6b:97:
d0:be:ec:5e:ca:77:c9:e4:2a:ea:79:08:aa:61:9e:f5:02:85:
39:f8:58:bf:1a:f1:61:6e:95:f7:22:37:59:dd:7c:85:7c:be:
5d:55:fe:a1:47:72:63:76:2d:b8:94:a4:74:65:ea:2a:1e:8d:
5b:84:2e:e0:bc:cf:9f:02:f3:5d:2b:af:cb:e9:bb:33:91:df:
f1:49:e8:cb:ed:8a:e2:ca:75:9b:5e:80:ff:8f:49:ef:bc:52:
f9:f7:1c:00:8a:8c:9e:4e:10:34:41:bc:e2:e8:c9:76:63:dd:
91:a3:9a:52:2a:6d:03:23:ba:2b:2d:0c:05:2a:4f:bb:92:b0:
6a:fb:01:9d:11:72:0d:92:50:e2:af:1b:dc:69:7d:1c:7a:16:
74:24:c7:8b:2d:48:63:40:0e:93:03:db:82:86:f9:84:ad:8b:
aa:e4:8b:c1:13:2e:77:c0:30:7c:ab:46:ef:a8:b0:4d:ad:03:
8d:dc:74:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:26 2026 by rpki-client