Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
File: hxB-P9m5S0s25qjzcOhlCn9X5sM.mft (raw, json)
Hash identifier: HsMXM4HYRR33DEEr1DygUNYy9Z+Eccj2qGuQ9AvlDgk=
Subject key identifier: 2B:9C:A1:3C:2D:35:C6:B8:BE:B4:35:77:24:59:DF:5B:70:DA:8F:1D
Authority key identifier: 87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
Certificate issuer: /CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Certificate serial: 019D9BBE1E15F72731ACA02160F772F48F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 14:00:21 +0000
Manifest this update: Fri 17 Apr 2026 14:00:21 +0000
Manifest next update: Sat 18 Apr 2026 14:00:21 +0000
Files and hashes: 1: 0HF7W4kcPQAPpdf6IKBVke2daLo.roa (hash: ExfRmSPaStPYRpsa/vvn6ljkkYwEx3sjxTDf4lBvVfo=)
2: hIl9YwGP9KNNYc-kWa9ByhnFFMw.roa (hash: k+CEky46uUg1wUDtSRfbPi4iQjpsDQmTlW/NwFlLWDI=)
3: hxB-P9m5S0s25qjzcOhlCn9X5sM.crl (hash: df6GaxPUWzlpurKJ0tvvim4sJQA/sQ1GFPCX6gaRnyA=)
4: lltq5u-SeWoxH2Rfx7VDHzLu7aA.roa (hash: 7tYsidyr0RJ/K+oNpq6hH3jgwmAvhIj3TNXLWptDGp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:1e:15:f7:27:31:ac:a0:21:60:f7:72:f4:8f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Validity
Not Before: Apr 17 14:00:21 2026 GMT
Not After : Apr 18 14:00:21 2026 GMT
Subject: CN=2b9ca13c2d35c6b8beb435772459df5b70da8f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dc:0c:72:ec:18:b2:8f:51:01:fc:d5:0d:a8:
72:e1:69:f3:1a:98:5e:4b:51:f1:e6:1c:9b:8c:db:
2c:1f:e6:56:11:34:9c:66:51:7a:a3:8f:3a:99:82:
29:2f:aa:cd:28:3c:fb:2e:ad:29:c5:d2:5a:53:50:
4b:72:7f:7b:a4:76:a9:a4:8e:58:92:b7:bd:71:c3:
27:0a:a1:7d:a7:59:e9:bb:40:42:a6:26:9e:fd:a9:
ad:8b:d4:9c:0b:46:cf:56:2b:71:af:4b:38:ef:c1:
b8:da:af:89:f9:09:d9:2a:44:4c:3a:5d:28:40:99:
05:f7:d2:5b:e7:fa:60:53:e5:39:e9:c3:19:d2:83:
24:7f:ff:27:b3:0a:90:1b:0b:73:de:5f:4c:a5:b2:
28:59:00:13:01:a4:46:80:b9:d1:ec:5f:55:ec:0c:
d8:44:00:74:df:d8:95:e9:c4:f9:ac:10:a2:09:75:
ef:ba:b7:13:18:ea:6c:9b:2c:d8:4b:81:73:ed:07:
fd:53:bb:6b:57:ac:c1:34:04:65:46:30:22:df:a5:
3b:b4:27:a4:e3:df:af:74:56:b0:3b:08:b7:2d:79:
1b:3c:73:00:dc:0c:24:fb:24:86:33:41:d1:c5:b8:
af:73:4d:72:97:df:8a:2f:b6:8f:0b:d6:5e:57:d4:
fe:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9C:A1:3C:2D:35:C6:B8:BE:B4:35:77:24:59:DF:5B:70:DA:8F:1D
X509v3 Authority Key Identifier:
keyid:87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:55:4c:3c:6a:52:12:4e:5e:24:29:11:b8:5d:12:2a:2b:4e:
ee:3e:73:7a:1c:15:5e:ae:f0:07:33:85:34:43:27:a0:65:14:
76:28:bd:f3:f7:8a:55:4a:ce:12:f8:34:99:66:7e:27:5a:86:
42:34:51:d7:18:2b:eb:6f:fa:e3:16:a4:6e:74:7f:76:50:a5:
16:35:18:a3:e0:3d:bf:79:49:bf:95:39:a6:d1:5c:0b:7c:e6:
d4:4c:40:98:0b:b5:a1:3c:2f:d7:8f:6f:3c:fe:2e:7c:39:01:
0a:04:d1:c8:63:ee:7a:ce:94:3c:a1:72:c3:9d:b8:a4:7f:f6:
1b:4b:8a:73:c5:9e:12:57:4e:1c:5c:66:3c:ac:f4:a3:8c:19:
c4:3a:22:70:ec:38:16:38:a0:1d:dc:48:37:61:ce:1f:3d:65:
42:34:60:64:c5:2c:4d:1a:5a:41:97:45:85:7a:41:42:ba:0f:
60:29:99:09:89:ae:e0:38:aa:5d:7c:99:42:74:8c:b6:48:ef:
37:d5:23:20:53:65:6c:f0:40:be:e4:f9:2d:f7:64:04:24:c0:
e4:e9:10:57:4f:d1:64:6c:18:a2:1e:09:f1:64:df:ee:51:f4:
69:e9:89:78:6f:3e:3c:22:3b:0f:29:28:33:0f:18:a2:69:7a:
5d:13:a0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:23:30 2026 by rpki-client