Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
File: HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft (raw, json)
Hash identifier: 7FRmye9TOmXiWAcNt3cD+i9HR9kxP5j9BATjdgPraO0=
Subject key identifier: E3:05:23:40:50:50:8C:6D:BF:4D:41:7A:1F:78:71:FD:ED:AA:75:CA
Authority key identifier: 1F:18:DC:50:36:D7:FB:C0:DC:AB:F3:3B:CC:AA:D1:0B:17:C5:28:97
Certificate issuer: /CN=1f18dc5036d7fbc0dcabf33bccaad10b17c52897
Certificate serial: 01A0C2FB5980BE886FB753C7E9D30EE3E300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
Manifest number: 0195
Signing time: Mon 21 Sep 2026 08:00:47 +0000
Manifest this update: Mon 21 Sep 2026 08:00:47 +0000
Manifest next update: Tue 22 Sep 2026 08:00:47 +0000
Files and hashes: 1: HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl (hash: j3fQte5PyE4xH3I+KFpU3Capbgzymvexk5A5FsXcaoU=)
2: _Sc3r6nRYQtQu2cZIjq2IjctaNg.roa (hash: e+HC4XFRl9Gj2y368uE+nXV2ycHussEEZzNT8l44+WA=)
3: p9L5cF_zrUQq9yQ8iih6wH2zdz8.roa (hash: xFDge0h0P1x29btG4Nd0kEneOqOsxT+krJ6Qhd0wSPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:59:80:be:88:6f:b7:53:c7:e9:d3:0e:e3:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f18dc5036d7fbc0dcabf33bccaad10b17c52897
Validity
Not Before: Sep 21 08:00:47 2026 GMT
Not After : Sep 22 08:00:47 2026 GMT
Subject: CN=e305234050508c6dbf4d417a1f7871fdedaa75ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:de:c8:6b:3c:b1:6e:0b:4d:e3:99:a7:d8:
de:0b:04:13:36:70:65:99:7e:cb:01:2c:d5:b1:02:
d5:b8:65:f5:25:8d:5e:c1:09:d4:85:5c:94:4a:b4:
93:a2:7c:48:f8:cd:6e:db:09:5d:c5:d1:40:8e:95:
61:fa:44:31:c7:8f:e2:7b:67:27:d5:83:a8:db:10:
53:5a:aa:8c:8e:b4:8d:27:37:61:2e:c0:2e:ba:3b:
ff:a7:d0:a4:57:43:5e:19:1d:d3:39:e6:7e:b7:f0:
b3:8a:9d:68:22:55:71:d7:c2:96:f4:37:8d:48:e6:
2f:87:0d:aa:73:47:3f:c8:88:d1:bb:d4:3a:70:57:
8f:ed:cb:c6:0c:fa:20:22:5d:09:2a:66:ff:a0:b8:
92:1f:a3:de:df:66:d0:b8:5b:d6:e9:dc:d0:51:df:
80:f4:e0:26:08:a9:a8:29:ec:22:94:58:86:d4:ad:
f6:70:98:e9:ed:9e:31:71:4c:4a:91:30:1d:0c:78:
ff:0c:60:17:bc:00:fd:77:f2:23:d9:40:72:ca:a4:
4e:12:88:80:7e:5a:89:cf:3b:a1:60:24:e9:de:81:
32:f2:8d:e0:3b:b8:c0:9e:1a:a7:a4:f3:ee:6e:20:
19:af:02:c2:92:0f:9b:99:9c:aa:b0:c9:bd:85:f8:
97:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:05:23:40:50:50:8C:6D:BF:4D:41:7A:1F:78:71:FD:ED:AA:75:CA
X509v3 Authority Key Identifier:
keyid:1F:18:DC:50:36:D7:FB:C0:DC:AB:F3:3B:CC:AA:D1:0B:17:C5:28:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:8d:fd:14:ba:6f:5d:09:55:4d:33:78:38:98:9f:02:d2:2b:
bf:bd:68:a5:ad:01:22:f5:c1:70:c9:63:eb:19:bf:e3:a1:1a:
e9:ee:f2:9f:c3:38:e6:f9:0d:f4:8f:f0:3a:dd:5b:56:06:11:
89:4a:bc:b0:2a:e2:de:0e:09:5b:5e:e2:45:79:17:37:c7:b9:
03:ad:53:e0:b0:91:da:e7:80:17:9f:c4:f3:62:2e:4b:7b:b3:
7f:30:9e:8b:c1:ad:14:5c:d6:79:8d:60:39:a0:cb:bd:9f:f9:
ef:78:c0:58:e3:7d:d1:9f:48:d1:9e:c2:1c:6f:91:5f:c0:8f:
7b:a1:25:4f:17:d3:ba:c6:b2:e4:5c:9a:5f:dd:f1:bc:82:97:
8f:b1:36:43:c3:87:a9:34:39:1b:ec:a1:55:ff:90:78:fa:ce:
97:ac:46:d1:30:3e:eb:ff:74:8b:d6:3b:5e:dc:7f:df:e2:b6:
73:f5:e3:ae:05:e2:ea:cf:32:67:e2:41:66:aa:cb:dc:e0:86:
c0:42:1a:22:de:c8:ff:56:4f:30:ef:55:4f:15:2b:3e:36:84:
c3:3f:01:77:e1:8c:cb:0d:43:b3:22:fe:a1:0f:a5:9f:ca:24:
82:54:2f:b1:85:42:12:bc:17:c0:ab:89:7d:bb:d7:1d:24:e2:
ee:37:96:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:10:05 2026 by rpki-client