Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
File: HHixg23sq0_1vfpeN3o9-H8Y_A8.mft (raw, json)
Hash identifier: ajonVVg6pVFeK2DuIgob4GXQ0ciuvM/VtsxlNZic0WA=
Subject key identifier: E7:8E:BD:D1:E2:46:0E:7C:B3:E4:F5:56:28:A1:BA:C1:9B:8B:7C:71
Authority key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Certificate issuer: /CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Certificate serial: 019FAA88A1EC27C37764473F3F992E4066CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
Manifest number: 11EA
Signing time: Tue 28 Jul 2026 21:01:48 +0000
Manifest this update: Tue 28 Jul 2026 21:01:48 +0000
Manifest next update: Wed 29 Jul 2026 21:01:48 +0000
Files and hashes: 1: HHixg23sq0_1vfpeN3o9-H8Y_A8.crl (hash: w3aS6rVwaDUIlwlMwXrdLRZE80RqXNLzcmBsRNjfUB8=)
2: IviSs_87UUl9qVXZnSSlcS-C_RI.asa (hash: wdYAl3BdUIB3Umq2J3hRMzmaflBh8zzGwFUl64xraYc=)
3: gB28ikvXaAy5hSbZoUNZbTzRb2w.roa (hash: VDZz7b/Ru8Catta9bi8i3h+9lOqwQj0GwnjJ6fKuQOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:a1:ec:27:c3:77:64:47:3f:3f:99:2e:40:66:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Validity
Not Before: Jul 28 21:01:48 2026 GMT
Not After : Jul 29 21:01:48 2026 GMT
Subject: CN=e78ebdd1e2460e7cb3e4f55628a1bac19b8b7c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:81:da:55:0c:ab:48:91:96:f8:63:b2:98:2a:
af:53:51:79:17:65:de:68:25:18:70:b7:16:b4:53:
bf:91:fe:6e:5b:00:15:5c:6d:5e:d2:3e:2f:c9:f9:
f6:39:4c:1b:89:82:a1:ad:ed:8e:a0:ba:cb:6e:ea:
b0:21:0b:cf:6a:de:96:06:55:02:b2:a1:8e:2a:f1:
5a:c2:74:c7:0d:e8:a2:5e:01:78:cf:8e:3d:5f:78:
b0:e1:20:ba:af:c3:6b:f7:c6:cb:1b:9b:db:ab:a6:
69:eb:95:53:d1:4c:d9:b3:9c:f1:d3:ae:42:66:52:
27:ea:5a:2b:6b:96:8a:1c:47:a8:07:91:6d:60:f3:
96:18:d0:d5:69:b7:81:52:05:d0:13:77:80:65:de:
c1:c4:52:04:11:d9:7b:ae:38:95:7e:56:5d:57:45:
fe:58:38:9d:46:fb:b0:e0:cf:4b:74:2f:fe:1b:b2:
f1:93:26:d5:9e:7e:98:25:ca:2d:ea:23:b1:f7:b2:
1b:a9:a0:78:fc:bc:80:0f:b2:fe:5e:2b:a5:0b:7e:
6c:04:22:7a:a5:14:fa:9b:b6:b2:ac:38:c2:0e:33:
c0:ab:c3:7b:9b:6f:e4:4f:c4:1f:4c:3d:0b:72:5b:
8f:df:19:a2:57:ba:85:03:4f:41:17:69:e7:6b:9f:
f9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8E:BD:D1:E2:46:0E:7C:B3:E4:F5:56:28:A1:BA:C1:9B:8B:7C:71
X509v3 Authority Key Identifier:
keyid:1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e0:54:ad:4b:02:24:ed:39:21:a1:58:6d:ab:94:f3:29:f6:
0b:2f:1a:eb:1a:c1:d0:ae:17:d6:35:13:23:0a:6f:28:b8:52:
97:4a:2d:60:d4:5a:2a:d1:10:b5:a5:72:22:b7:57:da:8c:27:
a6:9f:4c:d5:77:10:80:76:35:20:31:de:d5:91:2f:b1:94:7a:
56:47:24:87:d5:4c:bf:1f:d5:34:6e:39:9f:97:3c:67:4b:9a:
24:d1:d5:e3:6b:3e:81:74:b1:b0:3e:df:a6:be:ed:a1:d1:6a:
0e:92:14:39:42:b5:1d:41:53:e6:45:da:f3:08:91:f4:dd:bf:
56:3d:10:2b:ff:a1:52:a0:39:58:6b:9b:03:4b:90:5c:01:a0:
0e:1f:67:75:c2:79:4e:fb:cc:01:be:d6:d8:e9:3d:c7:85:4d:
91:c1:13:34:07:f2:c9:5a:d6:44:2b:5a:db:c7:08:4e:c9:e6:
a3:b0:e7:eb:ca:dc:30:cf:77:d7:3e:79:ca:2c:86:ee:10:32:
64:18:9c:3e:9e:72:8b:4d:ce:bc:2b:55:f2:85:53:c2:d8:cd:
47:a5:b1:44:40:49:45:e4:0e:6e:ec:cd:e9:b0:ab:5c:f9:8f:
69:94:c6:b8:41:11:6d:1d:d4:5f:b2:a9:3e:7c:76:a3:27:65:
4b:75:56:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:25:37 2026 by rpki-client