Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
File: HHixg23sq0_1vfpeN3o9-H8Y_A8.mft (raw, json)
Hash identifier: 9SDKXGYt3xd/Ym86EfVCzfIFQQqfyrmUG1h013RJ7Ks=
Subject key identifier: 3A:B4:28:9F:1D:31:A6:65:56:AD:9D:0C:83:5C:21:03:0E:0A:70:7A
Authority key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Certificate issuer: /CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Certificate serial: 019D99D088C4AC8D88FAC3B448A9AA559129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
Manifest number: 10D8
Signing time: Fri 17 Apr 2026 05:01:13 +0000
Manifest this update: Fri 17 Apr 2026 05:01:13 +0000
Manifest next update: Sat 18 Apr 2026 05:01:13 +0000
Files and hashes: 1: HHixg23sq0_1vfpeN3o9-H8Y_A8.crl (hash: Xj3foL4G3GQZefqjEUyKUq2M3b/mPX8p+6KjeMWlgx4=)
2: gB28ikvXaAy5hSbZoUNZbTzRb2w.roa (hash: VDZz7b/Ru8Catta9bi8i3h+9lOqwQj0GwnjJ6fKuQOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:88:c4:ac:8d:88:fa:c3:b4:48:a9:aa:55:91:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Validity
Not Before: Apr 17 05:01:13 2026 GMT
Not After : Apr 18 05:01:13 2026 GMT
Subject: CN=3ab4289f1d31a66556ad9d0c835c21030e0a707a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:23:c4:d1:0a:70:5e:3d:ce:55:b7:a5:7f:41:
10:8c:1a:e7:2d:22:28:76:52:0f:fd:d0:56:30:e3:
92:1b:85:c9:08:0b:53:fc:48:25:fc:8d:93:64:bb:
fe:66:6f:87:36:09:9a:4b:ab:66:8a:c5:72:7d:cb:
ad:ec:a8:55:13:99:63:ca:57:ff:20:a0:92:91:f2:
59:d3:06:a3:e3:2f:d5:09:e2:a6:b2:c7:ec:aa:31:
8a:5d:5c:1b:83:3d:33:a4:e6:d5:aa:b8:a0:f7:ed:
8a:82:be:10:03:08:dd:c0:ea:c5:6a:54:dc:29:b2:
59:ab:f9:99:ce:38:b0:c8:9d:4d:23:12:6e:13:2b:
82:c5:e6:ca:eb:8d:b1:af:3c:b1:8b:97:54:a7:40:
1e:20:a3:b9:28:72:aa:44:52:7c:82:0d:4a:0b:08:
3c:0e:35:aa:b0:cc:ff:ac:8f:a6:ff:5b:70:3f:9b:
ab:10:e5:ff:22:13:57:8b:5d:da:d0:d5:12:07:49:
8b:59:74:9b:79:dd:79:f0:dc:c1:de:c2:bb:b4:cc:
d6:5e:c0:64:3a:6b:02:99:80:30:71:43:80:53:df:
7d:52:f8:7a:a6:c1:c2:c0:83:4e:b4:09:e9:df:4b:
45:03:a8:2d:d0:48:aa:b9:6e:d0:ba:38:7e:63:72:
4b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B4:28:9F:1D:31:A6:65:56:AD:9D:0C:83:5C:21:03:0E:0A:70:7A
X509v3 Authority Key Identifier:
keyid:1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:61:2e:a4:44:83:e7:3f:30:6c:ce:66:54:04:04:65:77:82:
7c:7d:5f:2d:f7:7a:01:fc:4b:33:a3:0d:cb:47:1f:e1:02:d5:
fe:ec:87:41:f7:ae:08:f4:95:cc:d9:98:09:82:51:f2:a3:06:
ee:b7:23:84:92:13:06:d7:f9:12:5d:4d:a2:33:45:50:a8:af:
a0:9a:e5:27:ca:c7:d9:0a:c8:50:a9:7b:f9:a7:ba:0c:7e:e1:
8d:e0:bc:6c:dc:5c:5b:ac:c8:ef:14:ea:6e:ab:ba:43:52:e0:
e1:3c:31:ac:4e:11:14:be:4d:77:7f:6a:1f:a0:d6:a1:9e:c9:
27:23:a2:b5:93:86:55:88:16:2e:bc:49:bc:5a:b9:a3:b7:52:
5b:7b:8e:61:d1:34:68:9e:b5:4c:b2:d5:0f:73:07:5a:02:69:
60:62:d8:99:6e:db:12:f6:34:ef:6e:bd:13:e8:de:a6:6f:b1:
58:36:b9:1a:c7:f2:25:4e:dc:47:7d:95:82:cd:64:47:9b:85:
3e:7c:64:62:44:4d:65:75:37:18:0a:d0:2e:d0:01:e2:93:c1:
29:47:df:86:e2:ce:02:89:6e:75:0d:d8:bf:41:2a:06:f0:c4:
8a:e2:a7:72:dc:6c:10:15:d4:dc:48:b4:0d:1b:d1:7d:a7:a7:
d7:ea:2f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:49:00 2026 by rpki-client