Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
File: HHixg23sq0_1vfpeN3o9-H8Y_A8.mft (raw, json)
Hash identifier: TDBXOMsNkShL7PZMFuJW0rtBUm9ImImGQcHhGd6rMmk=
Subject key identifier: BD:DC:0F:8A:DD:0F:3E:2E:21:E2:FF:07:31:A2:7C:5B:23:5C:08:BA
Authority key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Certificate issuer: /CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Certificate serial: 01A11F3FAEA930F5888388657F18095EDE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
Manifest number: 12AB
Signing time: Fri 09 Oct 2026 06:00:29 +0000
Manifest this update: Fri 09 Oct 2026 06:00:29 +0000
Manifest next update: Sat 10 Oct 2026 06:00:29 +0000
Files and hashes: 1: HHixg23sq0_1vfpeN3o9-H8Y_A8.crl (hash: YA1Ocr7KPfW/HxumNfjE9rMVpR9w9JlEPUVDFGBk1Jo=)
2: IviSs_87UUl9qVXZnSSlcS-C_RI.asa (hash: wdYAl3BdUIB3Umq2J3hRMzmaflBh8zzGwFUl64xraYc=)
3: gB28ikvXaAy5hSbZoUNZbTzRb2w.roa (hash: VDZz7b/Ru8Catta9bi8i3h+9lOqwQj0GwnjJ6fKuQOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 23:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:3f:ae:a9:30:f5:88:83:88:65:7f:18:09:5e:de:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Validity
Not Before: Oct 9 06:00:29 2026 GMT
Not After : Oct 10 06:00:29 2026 GMT
Subject: CN=bddc0f8add0f3e2e21e2ff0731a27c5b235c08ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6b:87:fc:f6:ef:c4:51:04:4c:cc:f7:5f:75:
f2:8d:34:a2:86:d7:47:64:cd:26:aa:c5:5d:f0:74:
9d:bf:23:97:18:25:e8:a4:b8:7e:93:26:87:c4:40:
8f:b9:99:11:6c:9b:c7:57:63:19:19:9e:2f:31:02:
97:36:e3:b9:c8:d1:8d:33:e2:72:a8:a7:cf:4f:4e:
0b:e1:e4:e7:82:1a:c8:01:d0:79:ef:9c:74:87:d8:
05:cc:62:b8:fe:10:46:db:78:56:c5:3c:76:89:58:
3e:52:c6:c9:db:98:d1:40:32:33:49:1f:d8:7f:3a:
ee:d5:37:e6:ce:c7:b1:ff:92:52:26:86:80:39:d9:
a2:82:73:3f:68:54:31:01:63:30:1c:88:72:6c:ce:
76:ab:8b:9f:6a:ab:6f:1d:74:20:fb:81:0a:b3:31:
f3:2f:dd:96:70:05:49:8f:b6:ad:b8:6b:4b:87:e9:
cd:88:c9:76:08:5a:5a:34:2e:d8:91:90:1c:b7:7e:
8c:0c:33:36:46:b7:bc:e2:b0:47:16:f1:70:52:09:
67:95:a5:ac:9a:15:f7:a4:91:af:45:a5:53:96:9f:
5f:24:47:d1:78:ce:94:43:fc:c9:3a:78:a4:95:8c:
0d:81:75:c3:d3:70:e0:68:59:19:b9:5b:12:9c:fa:
1f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DC:0F:8A:DD:0F:3E:2E:21:E2:FF:07:31:A2:7C:5B:23:5C:08:BA
X509v3 Authority Key Identifier:
keyid:1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f3:db:f9:96:ee:5a:04:35:4b:02:0d:7d:b6:61:b4:46:bc:
70:f6:0b:78:79:3a:f9:95:26:19:91:62:0a:64:3b:3c:14:a4:
b8:b9:e4:a0:8d:7a:c0:28:bd:22:cb:8c:3e:26:d5:fd:dd:1e:
6f:f8:8b:2b:2c:ed:09:7a:e3:13:e0:99:07:77:3c:b4:e7:93:
b1:2e:04:9c:09:d7:6d:81:31:3c:2e:b2:90:2b:3c:41:59:1c:
36:bf:4a:ed:51:be:1c:8a:9b:10:ab:d8:17:32:a9:f4:1b:c8:
03:54:b0:4a:12:bb:b4:37:0f:1f:51:10:5f:04:d4:44:20:f0:
22:bd:61:a6:8b:35:65:1c:cd:a4:71:65:5f:3f:96:45:8a:76:
af:22:ae:fa:b5:a0:59:6c:da:77:b8:dd:c4:81:bd:00:24:3f:
5a:92:26:3f:8d:91:8e:24:2e:ba:b7:3a:e4:db:98:53:1b:c0:
78:fe:aa:1b:d9:9c:b6:bb:15:a5:f6:8d:71:71:5f:76:10:6b:
28:00:82:7c:20:87:88:0d:07:69:15:72:93:35:13:a8:e2:6a:
77:66:4b:21:d3:98:b5:e0:65:fb:35:c4:6d:fb:36:2a:ab:ab:
6e:e0:dc:9d:20:94:47:09:15:36:fc:36:75:e5:a4:22:d0:96:
d9:58:b2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 09:06:59 2026 by rpki-client