Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
File: hxB-P9m5S0s25qjzcOhlCn9X5sM.mft (raw, json)
Hash identifier: hduEwFaip4GvhGQf52a2erTAyyTO9wI9EXhr5AOLTGU=
Subject key identifier: 90:12:13:51:36:08:72:B1:FC:5D:F7:2E:09:CC:DE:88:86:64:8C:B3
Authority key identifier: 87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
Certificate issuer: /CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Certificate serial: 019CAC46C7CC9FA3B63B25FA7ACC5115A7B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 02:00:45 +0000
Manifest this update: Mon 02 Mar 2026 02:00:45 +0000
Manifest next update: Tue 03 Mar 2026 02:00:45 +0000
Files and hashes: 1: 0HF7W4kcPQAPpdf6IKBVke2daLo.roa (hash: ExfRmSPaStPYRpsa/vvn6ljkkYwEx3sjxTDf4lBvVfo=)
2: hIl9YwGP9KNNYc-kWa9ByhnFFMw.roa (hash: k+CEky46uUg1wUDtSRfbPi4iQjpsDQmTlW/NwFlLWDI=)
3: hxB-P9m5S0s25qjzcOhlCn9X5sM.crl (hash: menag2lUUCx8mJa4Dy/pYOlsOPAhidmkXbbcrUTDlSk=)
4: lltq5u-SeWoxH2Rfx7VDHzLu7aA.roa (hash: 7tYsidyr0RJ/K+oNpq6hH3jgwmAvhIj3TNXLWptDGp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:c7:cc:9f:a3:b6:3b:25:fa:7a:cc:51:15:a7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Validity
Not Before: Mar 2 02:00:45 2026 GMT
Not After : Mar 3 02:00:45 2026 GMT
Subject: CN=90121351360872b1fc5df72e09ccde8886648cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:f6:37:30:0a:8e:d5:04:c9:e1:15:d5:3a:
dd:85:0d:33:7c:7a:ce:94:a5:d8:66:10:1a:d0:b6:
67:c8:8c:af:4a:07:01:ed:0b:6c:18:0b:c4:e2:5c:
43:e2:ab:de:f6:98:e4:69:8d:c3:20:f8:e1:25:26:
41:ee:de:4d:0d:ee:fd:e3:12:9d:62:0c:9c:27:82:
63:0c:c8:ef:ec:ff:a9:1d:4e:6f:60:3b:b2:6d:66:
e9:e4:d9:b2:ab:dc:18:9c:2b:55:bc:51:9e:22:7e:
09:26:85:18:5c:6b:77:23:28:16:01:47:33:78:d5:
aa:37:a5:7b:e1:bb:74:71:d8:2d:32:a3:ea:89:25:
51:24:4f:0f:28:70:18:91:c7:37:7b:db:a1:30:7a:
5d:aa:0d:c3:89:17:0b:31:9c:ed:54:bf:a1:ed:06:
56:2a:b5:92:e8:16:a9:a4:74:0c:e6:76:be:40:09:
a5:58:d9:0d:32:99:f8:a0:f2:7b:e9:7f:72:f9:cc:
dd:ab:d2:2e:bf:23:ab:d3:73:cb:78:fd:70:c3:57:
e4:8d:3f:bd:db:d4:5a:64:a5:99:d9:09:16:7f:3c:
5e:9a:30:5f:9c:f8:d0:3f:e8:24:04:d6:79:2b:14:
a9:3f:11:7f:d4:18:ed:bc:c6:76:9c:f7:5a:f9:37:
e9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:12:13:51:36:08:72:B1:FC:5D:F7:2E:09:CC:DE:88:86:64:8C:B3
X509v3 Authority Key Identifier:
keyid:87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:90:6d:10:8f:c7:30:9c:ee:b7:f3:70:43:2b:d9:5f:eb:f8:
34:bb:48:f5:0b:0a:68:c3:88:cd:de:f9:37:bd:68:e6:44:2c:
7a:90:23:fa:f3:ec:65:d2:94:23:e8:20:1d:09:35:65:bd:74:
8f:ba:00:91:d7:27:02:19:cf:0e:db:b8:90:80:3c:ca:81:26:
5f:f8:dd:fe:14:2a:c2:24:c9:1a:16:72:55:76:7a:02:33:7d:
1e:9b:cf:41:fb:6d:d3:28:ca:64:e8:8c:7d:33:ef:77:6e:ac:
21:a9:7e:65:ad:1f:1b:51:83:2a:07:d3:7c:a2:c1:29:7c:15:
08:fc:0d:3d:5a:64:46:a9:90:46:21:ea:15:94:8b:31:c9:c0:
06:b6:47:6a:4b:5d:6f:df:df:22:be:45:7c:2a:41:e2:ea:7a:
48:b8:9c:63:0f:bd:15:7a:e2:aa:b9:8a:94:cb:01:23:fa:01:
6b:fa:18:22:ef:9e:cb:8f:75:b2:8b:03:1c:a2:0b:12:31:01:
c9:cb:95:a5:a8:b5:61:dd:0a:86:69:96:2c:74:7e:ed:39:3a:
a2:04:1e:f7:bc:53:73:9b:ed:25:5a:71:dc:d3:8a:ea:43:58:
f4:be:7e:45:8a:1a:d5:48:1f:dc:ee:95:4c:ce:d3:69:ee:88:
62:d1:1f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:12:01 2026 by rpki-client