Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
File: HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft (raw, json)
Hash identifier: aEI8wSIdkogdvjEi3K52cSLpjSjeQmzkYoDiL93ZhF4=
Subject key identifier: 97:90:8D:E7:E7:A5:45:C4:2B:8F:A4:2D:4C:53:29:B8:E0:71:A6:56
Authority key identifier: 1F:18:DC:50:36:D7:FB:C0:DC:AB:F3:3B:CC:AA:D1:0B:17:C5:28:97
Certificate issuer: /CN=1f18dc5036d7fbc0dcabf33bccaad10b17c52897
Certificate serial: 019FA9073FF72879E04385FF0D8EA78E439C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
Manifest number: 0103
Signing time: Tue 28 Jul 2026 14:00:52 +0000
Manifest this update: Tue 28 Jul 2026 14:00:52 +0000
Manifest next update: Wed 29 Jul 2026 14:00:52 +0000
Files and hashes: 1: HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl (hash: P/2q0g45KkWRP+MMrLsI8JxvSx93QHydqglRTeui49c=)
2: _Sc3r6nRYQtQu2cZIjq2IjctaNg.roa (hash: e+HC4XFRl9Gj2y368uE+nXV2ycHussEEZzNT8l44+WA=)
3: p9L5cF_zrUQq9yQ8iih6wH2zdz8.roa (hash: xFDge0h0P1x29btG4Nd0kEneOqOsxT+krJ6Qhd0wSPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:3f:f7:28:79:e0:43:85:ff:0d:8e:a7:8e:43:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f18dc5036d7fbc0dcabf33bccaad10b17c52897
Validity
Not Before: Jul 28 14:00:52 2026 GMT
Not After : Jul 29 14:00:52 2026 GMT
Subject: CN=97908de7e7a545c42b8fa42d4c5329b8e071a656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:f9:c6:39:6a:fb:1b:b6:40:c3:2e:80:23:
5f:bc:84:e7:11:ce:01:ab:60:f7:21:8c:3b:a9:95:
0d:cf:60:5a:af:d1:01:69:da:13:d1:39:df:e9:86:
57:08:57:8c:16:ed:4c:a6:f8:79:43:00:a5:1e:d9:
c3:2f:32:74:86:65:f0:c4:5f:68:56:49:49:25:3a:
1b:62:f1:9f:5c:7d:b7:08:7e:6d:a9:e3:af:a6:ae:
83:cd:ab:a5:d7:bb:fd:e0:3c:48:6d:a3:0c:35:74:
99:45:c4:d7:ee:b9:c5:db:f6:a0:58:fc:08:a5:23:
45:f3:00:6f:c1:2b:6b:c2:b5:35:09:f5:77:a3:5b:
2a:09:c9:98:58:ee:47:05:aa:4f:f8:7b:fb:8d:7d:
cc:b3:53:85:ed:02:58:17:c7:a4:ad:86:0f:3a:ee:
d8:ba:20:79:58:7e:2e:a6:03:4a:79:95:a3:a4:39:
7d:1f:d7:c1:d8:6b:04:54:5c:76:58:58:c6:83:8b:
95:ff:9e:65:ac:1b:37:91:b0:2e:c8:1e:f3:ab:55:
24:83:90:60:4e:0c:92:1e:47:7b:9e:d0:7a:84:16:
c4:03:64:3d:7d:6a:a0:cf:ee:f1:47:bc:f9:31:3f:
fb:52:9d:c0:a4:b3:d5:ce:21:2b:52:f9:aa:bd:34:
68:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:90:8D:E7:E7:A5:45:C4:2B:8F:A4:2D:4C:53:29:B8:E0:71:A6:56
X509v3 Authority Key Identifier:
keyid:1F:18:DC:50:36:D7:FB:C0:DC:AB:F3:3B:CC:AA:D1:0B:17:C5:28:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9d06ab-965f-46a7-86c3-2b082d2db41b/1/HxjcUDbX-8Dcq_M7zKrRCxfFKJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d7:e2:6f:ad:b8:62:08:1a:10:b3:c9:08:a6:15:d7:86:e0:
8d:a1:e7:15:85:9c:79:32:79:ef:76:b9:76:af:f4:39:ca:38:
d7:5d:4d:b0:78:2a:8e:15:a5:ea:c6:90:d2:97:33:b4:77:b2:
27:a3:75:8d:40:d1:ef:6c:a6:7b:02:15:82:b2:52:65:1d:0d:
16:ee:33:43:fe:28:20:df:53:92:f3:dc:21:aa:79:6d:87:34:
3b:1e:bb:3d:73:de:8b:29:2b:f6:11:d7:00:73:c6:77:9e:b2:
db:1a:cd:19:c5:d4:31:c1:6c:41:4a:37:2d:dd:88:ca:29:a0:
de:4e:bc:0e:f8:4d:c6:aa:3a:b3:49:80:7d:c7:dd:9f:9a:de:
fe:16:ea:71:2e:00:4c:92:92:f6:bc:bd:7f:9d:1e:14:13:d1:
bc:41:47:a1:2b:cc:5a:65:7a:27:b1:41:62:e6:40:2b:4f:a0:
cc:58:4c:ae:44:8c:ff:07:ec:5c:65:2e:d6:ef:d5:a9:ba:38:
f7:2b:fd:48:fd:4f:32:e8:2f:16:1f:b6:b1:5e:1c:73:40:eb:
89:8f:57:c4:78:87:d2:72:fb:6c:d7:c8:29:cc:59:a8:e9:dc:
7a:88:4a:08:45:70:87:20:73:2c:5e:b0:56:4a:1f:2f:9e:43:
15:a5:56:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:54:17 2026 by rpki-client