Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
File: HHixg23sq0_1vfpeN3o9-H8Y_A8.mft (raw, json)
Hash identifier: QzEnxMPp6GNKVkGD2rh0iBAfxBA5nTQL3YN0yCE2OKY=
Subject key identifier: 8E:AC:71:41:64:1A:6C:2A:1E:3F:36:3F:35:3A:D9:E2:EB:AC:D5:DE
Authority key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Certificate issuer: /CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Certificate serial: 019CAE35CA221193E8B8867A0D4E5F1A40E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
Manifest number: 105E
Signing time: Mon 02 Mar 2026 11:01:26 +0000
Manifest this update: Mon 02 Mar 2026 11:01:26 +0000
Manifest next update: Tue 03 Mar 2026 11:01:26 +0000
Files and hashes: 1: HHixg23sq0_1vfpeN3o9-H8Y_A8.crl (hash: CThTGAr+JWqmJ6fwfIudYYz0pV5+DoTjGpcXywch6uI=)
2: gB28ikvXaAy5hSbZoUNZbTzRb2w.roa (hash: VDZz7b/Ru8Catta9bi8i3h+9lOqwQj0GwnjJ6fKuQOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:ca:22:11:93:e8:b8:86:7a:0d:4e:5f:1a:40:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Validity
Not Before: Mar 2 11:01:26 2026 GMT
Not After : Mar 3 11:01:26 2026 GMT
Subject: CN=8eac7141641a6c2a1e3f363f353ad9e2ebacd5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:09:bd:b7:14:0d:28:76:ef:a4:f8:91:05:
4b:42:8b:59:ee:d3:46:63:6f:2f:d0:b6:ff:45:78:
23:04:06:ac:47:18:a3:92:b3:a3:c1:4f:8d:8b:ee:
de:4d:7e:34:03:ca:11:73:0e:a9:9c:a9:04:73:c3:
0d:42:f1:7c:bb:ab:1a:49:83:fd:aa:48:37:03:6b:
3a:85:cf:93:5b:2f:9a:9b:43:55:f4:b2:be:01:ed:
29:7d:ba:43:a1:4f:58:18:e0:8d:ca:cd:29:a3:29:
bf:f6:5b:ae:55:f9:f6:4a:fa:89:fe:0a:f1:08:79:
d7:20:96:ad:cb:cb:73:60:fa:d0:d3:9d:5d:99:77:
d5:2f:c3:9e:62:e1:4d:42:0e:b0:cb:fa:cb:e2:dd:
ec:a2:23:0d:ed:09:fa:99:28:a0:eb:6d:b4:0f:95:
b3:7b:64:15:00:68:08:2b:0a:a4:ed:e2:d6:d1:1f:
c1:30:45:c1:e8:36:bc:1a:57:e5:a0:d1:02:20:7c:
04:78:b2:60:e6:bd:73:52:32:7d:98:90:78:fb:38:
34:ea:0b:82:7e:00:a5:71:23:60:4f:59:70:f4:da:
80:65:4f:ba:e5:09:f4:17:cf:1e:ff:10:7d:66:fe:
2b:e4:b5:6b:e6:6a:72:8f:a8:87:a6:25:7f:e2:a1:
d1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AC:71:41:64:1A:6C:2A:1E:3F:36:3F:35:3A:D9:E2:EB:AC:D5:DE
X509v3 Authority Key Identifier:
keyid:1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:07:e0:da:30:e3:bd:5a:ea:ef:af:a9:3d:30:88:1b:fd:e2:
9c:80:21:17:1a:9c:6f:67:0d:85:b1:e0:26:a6:c6:dd:ad:37:
bf:61:e3:6f:f2:79:c8:c3:69:87:44:c6:ef:6e:cd:a7:43:b9:
dc:9a:02:3a:1d:ce:37:e5:7b:b6:ba:d1:03:74:08:cb:03:f8:
ba:94:c4:ca:30:c2:d6:00:83:2d:ef:f9:db:7c:b9:eb:2a:cd:
f1:7f:37:d1:19:95:d0:14:98:57:46:30:c9:c7:10:07:5b:72:
c3:b7:6a:31:78:c4:53:4d:8c:cb:f8:fd:15:b6:e5:83:f9:61:
2d:b3:36:c0:a7:75:e0:47:de:92:85:29:6a:68:d9:1f:d2:1f:
84:af:81:48:69:83:2c:df:47:2b:e9:ef:1a:5c:cb:7f:20:43:
7f:10:57:57:4c:5a:9d:71:71:fb:04:e6:2b:8d:f7:62:43:4f:
ef:1a:34:13:8f:93:4e:04:af:be:ee:20:38:f6:8f:6d:e0:a3:
35:7b:4c:63:9f:d1:5a:cc:88:5d:b7:cb:25:53:a2:73:d3:78:
e8:c6:3b:13:98:93:47:a1:fd:3b:be:1f:7e:79:28:74:0f:3c:
fc:f1:b9:c4:ed:be:96:ae:b5:48:eb:99:86:ba:58:b0:02:f7:
50:dc:80:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:54 2026 by rpki-client