Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
File: HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft (raw, json)
Hash identifier: knPFhCIv8DvxPj6B7eDWKX4NO/l/NWEE/D4OKXBCLtc=
Subject key identifier: 94:6E:3C:39:CC:0A:91:BB:9D:D4:D7:D3:FD:53:05:6E:89:1C:9B:CD
Authority key identifier: 1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8
Certificate issuer: /CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8
Certificate serial: 019CADC76E780F5EE739782291EAF91D79B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
Manifest number: 06FE
Signing time: Mon 02 Mar 2026 09:00:54 +0000
Manifest this update: Mon 02 Mar 2026 09:00:54 +0000
Manifest next update: Tue 03 Mar 2026 09:00:54 +0000
Files and hashes: 1: CwVKknNyyDgr3v_akSkNJXeCl5g.roa (hash: qbY0Sgh72+FRb460J2WnaLt9Z6SaHUYLTsclKcq8xqU=)
2: HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl (hash: PI+L/C2EL5QGjnBTG1sRCX9/Ygn5XJzF3pBWJaMiEmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:6e:78:0f:5e:e7:39:78:22:91:ea:f9:1d:79:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8
Validity
Not Before: Mar 2 09:00:54 2026 GMT
Not After : Mar 3 09:00:54 2026 GMT
Subject: CN=946e3c39cc0a91bb9dd4d7d3fd53056e891c9bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:49:5f:59:31:d4:05:1b:90:7a:db:29:f6:
8f:6c:a0:57:1a:7e:79:e3:35:fb:d6:ff:cd:53:23:
b9:df:25:e3:2a:a6:e9:a6:d1:f4:e9:d4:aa:5b:7a:
47:fe:49:37:3a:f1:4f:ed:94:3b:d3:1b:b4:78:d2:
61:fe:5b:e4:80:98:50:4f:31:56:ab:d9:53:3f:d4:
88:ab:a5:12:1e:be:ab:44:c8:81:74:40:b0:56:3b:
c1:6a:3e:07:67:0d:44:2b:18:4e:2a:ff:59:90:7c:
c9:90:38:da:ff:4d:9f:9e:07:17:b9:dc:e7:b8:7b:
6b:75:99:bd:6c:23:4e:9a:9d:6c:cb:6f:90:48:ea:
57:83:0f:24:23:5e:7e:f6:df:35:9b:f6:47:50:37:
f8:e3:77:fb:08:1a:d7:e1:6c:62:1f:46:60:db:86:
37:57:9a:02:8e:1d:e1:02:1b:25:9f:d3:b7:43:e6:
5d:2d:65:18:80:6c:e0:d8:63:15:c3:48:3c:44:37:
83:24:b0:da:a4:20:3d:c2:15:6b:d7:32:d1:a8:77:
33:46:3e:51:34:81:de:64:cb:1d:4e:fd:4d:d7:a3:
db:9f:5a:53:36:3c:d0:bb:c4:b4:60:0d:13:3c:8e:
22:18:5b:c5:5f:56:8e:f0:9a:d2:15:f1:74:cd:a4:
2c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6E:3C:39:CC:0A:91:BB:9D:D4:D7:D3:FD:53:05:6E:89:1C:9B:CD
X509v3 Authority Key Identifier:
keyid:1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d4:bf:ea:09:64:b3:c8:a7:04:e8:a2:4c:13:0e:c4:5d:b7:
a5:42:30:9a:6a:9b:9e:ac:f1:09:54:ec:d5:1b:c9:81:a1:6b:
87:fc:30:77:dd:49:51:82:af:87:28:41:31:ad:d9:1d:9f:95:
b7:36:9a:f8:89:3b:c7:c2:92:23:2c:88:72:4d:c9:cd:fa:d5:
ff:68:12:a7:84:ec:2f:aa:05:b5:eb:24:58:8c:be:54:38:16:
dc:18:12:d8:c1:a3:a2:e2:0c:73:36:9a:d7:30:06:63:c4:0f:
88:1e:66:5c:df:35:ab:a7:bf:37:6d:7a:85:c8:6a:75:74:9f:
27:a0:9a:12:90:c2:b6:94:d0:be:d4:35:aa:e7:52:7c:ff:db:
ba:ce:e4:42:08:ea:45:d8:a2:9b:b2:1b:ac:d6:74:cb:6d:e8:
40:f3:70:17:eb:29:6f:51:5f:32:5f:13:36:0c:09:79:72:49:
4c:fe:8f:25:f1:b5:45:5c:32:d1:43:0e:4c:eb:e7:99:d1:67:
78:59:b3:7f:da:d4:5e:d1:07:2b:30:26:dc:0d:03:f9:6d:f3:
27:05:f7:8f:e8:5c:02:84:56:b5:45:20:8a:af:19:11:d9:da:
0e:31:93:24:c5:e2:ac:ad:32:92:ca:04:8e:e4:f6:7b:c1:7f:
b0:5a:e0:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx254D17nOXgiker5HXm5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMTI0NzhiMWNhNGNiYTAzMDk5MWJkOGNiNDRkOWYyNGY1
OWMwYjgwHhcNMjYwMzAyMDkwMDU0WhcNMjYwMzAzMDkwMDU0WjAzMTEwLwYDVQQD
Eyg5NDZlM2MzOWNjMGE5MWJiOWRkNGQ3ZDNmZDUzMDU2ZTg5MWM5YmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfpJX1kx1AUbkHrbKfaPbKBXGn55
4zX71v/NUyO53yXjKqbpptH06dSqW3pH/kk3OvFP7ZQ70xu0eNJh/lvkgJhQTzFW
q9lTP9SIq6USHr6rRMiBdECwVjvBaj4HZw1EKxhOKv9ZkHzJkDja/02fngcXudzn
uHtrdZm9bCNOmp1sy2+QSOpXgw8kI15+9t81m/ZHUDf443f7CBrX4WxiH0Zg24Y3
V5oCjh3hAhsln9O3Q+ZdLWUYgGzg2GMVw0g8RDeDJLDapCA9whVr1zLRqHczRj5R
NIHeZMsdTv1N16Pbn1pTNjzQu8S0YA0TPI4iGFvFX1aO8JrSFfF0zaQscQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRuPDnMCpG7ndTX0/1TBW6JHJvNMB8GA1UdIwQY
MBaAFB8SR4scpMugMJkb2MtE2fJPWcC4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHhKSGl4eWt5NkF3bVJ2WXkwVFo4azlad0xnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mNjIzYjYtYTE5OC00MDVjLTgzMjYt
MDlmMTUyNGE1MjQ2LzEvSHhKSGl4eWt5NkF3bVJ2WXkwVFo4azlad0xnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mNjIzYjYtYTE5OC00MDVjLTgzMjYtMDlmMTUyNGE1MjQ2
LzEvSHhKSGl4eWt5NkF3bVJ2WXkwVFo4azlad0xnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwtS/6glk
s8inBOiiTBMOxF23pUIwmmqbnqzxCVTs1RvJgaFrh/wwd91JUYKvhyhBMa3ZHZ+V
tzaa+Ik7x8KSIyyIck3JzfrV/2gSp4TsL6oFteskWIy+VDgW3BgS2MGjouIMczaa
1zAGY8QPiB5mXN81q6e/N216hchqdXSfJ6CaEpDCtpTQvtQ1qudSfP/bus7kQgjq
Rdiim7IbrNZ0y23oQPNwF+spb1FfMl8TNgwJeXJJTP6PJfG1RVwy0UMOTOvnmdFn
eFmzf9rUXtEHKzAm3A0D+W3zJwX3j+hcAoRWtUUgiq8ZEdnaDjGTJMXirK0yksoE
juT2e8F/sFrgLA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:28:07 2026 by rpki-client