Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
File: HHixg23sq0_1vfpeN3o9-H8Y_A8.mft (raw, json)
Hash identifier: ZuLYd/y/JQyaGjJW2iuMYOIcmzWtVkm0byzB99sEkH8=
Subject key identifier: 00:97:79:40:69:60:CE:AE:7A:13:23:60:E3:4C:E7:28:5C:0E:AA:02
Authority key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Certificate issuer: /CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Certificate serial: 019FA899F1120DD2C3C6997F08626EBF3565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
Manifest number: 11E9
Signing time: Tue 28 Jul 2026 12:01:28 +0000
Manifest this update: Tue 28 Jul 2026 12:01:28 +0000
Manifest next update: Wed 29 Jul 2026 12:01:28 +0000
Files and hashes: 1: HHixg23sq0_1vfpeN3o9-H8Y_A8.crl (hash: zm4mEjKbRmD1eAHinacNxA7C3dP9FhkztNf/Dxu5d6c=)
2: IviSs_87UUl9qVXZnSSlcS-C_RI.asa (hash: wdYAl3BdUIB3Umq2J3hRMzmaflBh8zzGwFUl64xraYc=)
3: gB28ikvXaAy5hSbZoUNZbTzRb2w.roa (hash: VDZz7b/Ru8Catta9bi8i3h+9lOqwQj0GwnjJ6fKuQOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:f1:12:0d:d2:c3:c6:99:7f:08:62:6e:bf:35:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Validity
Not Before: Jul 28 12:01:28 2026 GMT
Not After : Jul 29 12:01:28 2026 GMT
Subject: CN=009779406960ceae7a132360e34ce7285c0eaa02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:3d:1d:e6:2e:b4:38:c8:63:70:99:2f:98:
24:56:3b:b7:a1:3c:6d:4e:dd:3e:20:ef:57:7f:33:
bc:00:58:c2:94:e4:8e:8e:d3:7e:20:7d:11:37:1e:
42:bc:31:6e:b1:09:b7:6b:78:94:9b:bf:de:2e:cd:
3a:7f:23:2e:49:b5:cd:18:c2:cb:8d:d5:c2:01:c8:
d0:bc:c4:74:f1:47:c1:28:8e:4b:fc:12:36:b6:cb:
62:f2:58:a7:42:94:38:69:1d:01:c8:32:79:81:95:
a0:d2:a2:63:c7:df:41:c4:a9:57:0d:09:1a:8d:77:
04:d9:35:19:bf:c4:f3:5f:a3:ac:86:c2:a6:cc:19:
0d:42:a1:b4:fb:17:0d:67:01:48:41:26:04:68:dd:
74:37:45:2e:e3:f9:3c:87:d3:2e:cb:bc:17:ca:9a:
35:3e:21:67:38:aa:df:2b:e3:ea:c5:d0:31:53:d2:
28:47:85:ad:43:5f:3c:3b:99:05:e0:30:76:cb:21:
de:24:e9:83:ca:7b:b7:af:3e:b6:05:43:5d:da:0e:
7e:9a:ef:f5:30:86:67:c7:c6:bf:96:2a:1f:c6:8f:
b7:32:0d:fa:ba:a7:f5:07:58:2c:48:50:87:02:a4:
03:e2:b4:f2:d5:22:b7:21:c2:96:77:30:ca:b3:30:
cc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:97:79:40:69:60:CE:AE:7A:13:23:60:E3:4C:E7:28:5C:0E:AA:02
X509v3 Authority Key Identifier:
keyid:1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:11:7b:3b:e1:eb:fa:48:5f:39:56:d2:d7:83:c8:1d:3b:7f:
82:20:0e:a1:61:02:4e:a8:60:2b:e0:e6:51:d7:0c:af:68:a5:
97:a5:3b:ae:90:d7:66:e9:f3:fb:2e:96:a8:fb:18:ba:a3:0f:
60:58:38:42:25:47:3e:d7:8a:03:97:82:4f:72:8d:ae:25:6e:
58:7d:9b:26:57:64:af:45:f3:75:a0:ef:1a:72:72:d3:49:c8:
43:0a:2c:46:80:b0:34:5e:9a:c3:69:75:3d:98:35:cf:e0:70:
46:2d:be:6f:e0:32:ff:9a:3e:a8:14:7f:b1:7c:b6:4b:be:7a:
f8:b7:ee:2b:1e:a8:08:0b:47:75:bf:fb:72:cc:ee:cd:da:79:
ba:49:8d:7c:7b:f8:be:37:5b:26:5a:42:35:00:42:3a:2a:78:
74:ec:91:1a:e7:90:68:84:db:2f:3d:44:ce:b6:40:54:eb:da:
74:45:df:47:23:0b:82:9b:de:36:1e:86:52:96:07:d7:bf:21:
01:01:55:50:c4:55:aa:53:74:38:26:7e:de:09:e0:b7:71:3b:
cf:3f:9a:8d:80:2c:9c:f0:d2:04:44:ca:06:d2:64:d0:19:39:
51:28:0a:bf:c3:26:cf:75:ac:09:be:0d:9d:d2:b6:a8:8f:43:
58:6d:b0:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omfESDdLDxpl/CGJuvzVlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNzhiMTgzNmRlY2FiNGZmNWJkZmE1ZTM3N2EzZGY4N2Yx
OGZjMGYwHhcNMjYwNzI4MTIwMTI4WhcNMjYwNzI5MTIwMTI4WjAzMTEwLwYDVQQD
EygwMDk3Nzk0MDY5NjBjZWFlN2ExMzIzNjBlMzRjZTcyODVjMGVhYTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1Q9HeYutDjIY3CZL5gkVju3oTxt
Tt0+IO9XfzO8AFjClOSOjtN+IH0RNx5CvDFusQm3a3iUm7/eLs06fyMuSbXNGMLL
jdXCAcjQvMR08UfBKI5L/BI2tsti8linQpQ4aR0ByDJ5gZWg0qJjx99BxKlXDQka
jXcE2TUZv8TzX6OshsKmzBkNQqG0+xcNZwFIQSYEaN10N0Uu4/k8h9Muy7wXypo1
PiFnOKrfK+PqxdAxU9IoR4WtQ188O5kF4DB2yyHeJOmDynu3rz62BUNd2g5+mu/1
MIZnx8a/liofxo+3Mg36uqf1B1gsSFCHAqQD4rTy1SK3IcKWdzDKszDMNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACXeUBpYM6uehMjYONM5yhcDqoCMB8GA1UdIwQY
MBaAFBx4sYNt7KtP9b36Xjd6Pfh/GPwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhpeGcyM3NxMF8xdmZwZU4zbzktSDhZX0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jNjE1MmQtMWM5MC00MGNjLWEyMDYt
ZWMzY2IzNmQxMDI2LzEvSEhpeGcyM3NxMF8xdmZwZU4zbzktSDhZX0E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9jNjE1MmQtMWM5MC00MGNjLWEyMDYtZWMzY2IzNmQxMDI2
LzEvSEhpeGcyM3NxMF8xdmZwZU4zbzktSDhZX0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhF7O+Hr
+khfOVbS14PIHTt/giAOoWECTqhgK+DmUdcMr2ill6U7rpDXZunz+y6WqPsYuqMP
YFg4QiVHPteKA5eCT3KNriVuWH2bJldkr0XzdaDvGnJy00nIQwosRoCwNF6aw2l1
PZg1z+BwRi2+b+Ay/5o+qBR/sXy2S756+LfuKx6oCAtHdb/7cszuzdp5ukmNfHv4
vjdbJlpCNQBCOip4dOyRGueQaITbLz1EzrZAVOvadEXfRyMLgpveNh6GUpYH178h
AQFVUMRVqlN0OCZ+3gngt3E7zz+ajYAsnPDSBETKBtJk0Bk5USgKv8Mmz3WsCb4N
ndK2qI9DWG2w1A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:57:00 2026 by rpki-client