Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
File: HSixjfJE24nyuXpscmKXM7OIYC8.mft (raw, json)
Hash identifier: xHU2LWELCLsFWGuQKNgXjIsLmWgWqhTNzCn6ypSWh3E=
Subject key identifier: D9:8B:5E:28:91:65:CA:08:D6:64:5A:34:23:B9:E0:B3:89:12:5E:56
Authority key identifier: 1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F
Certificate issuer: /CN=1d28b18df244db89f2b97a6c72629733b388602f
Certificate serial: 019CAAC6B88D3D17811625CC7BAA5789C9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:01:15 +0000
Manifest this update: Sun 01 Mar 2026 19:01:15 +0000
Manifest next update: Mon 02 Mar 2026 19:01:15 +0000
Files and hashes: 1: F2tzVDQBbkmIrf7Rzc0Z1mCkiic.roa (hash: 9oOlsoWuljVApYdk+dHkE0uI0xd3Y1H6oZJ44vPob6Y=)
2: HSixjfJE24nyuXpscmKXM7OIYC8.crl (hash: ulGws4uyUxjjq0fdxp/yHa22Oazf47W88FLEzU9j9Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:b8:8d:3d:17:81:16:25:cc:7b:aa:57:89:c9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d28b18df244db89f2b97a6c72629733b388602f
Validity
Not Before: Mar 1 19:01:15 2026 GMT
Not After : Mar 2 19:01:15 2026 GMT
Subject: CN=d98b5e289165ca08d6645a3423b9e0b389125e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:1d:ad:67:05:26:19:06:f0:81:c2:2e:34:
f2:49:24:15:43:16:a9:2c:8a:80:ea:e1:1c:e4:3d:
fc:1d:e1:1d:c5:4e:40:1b:68:fc:c8:89:11:d8:ed:
23:a2:b9:26:4d:ee:07:b6:67:da:f5:d5:f6:05:55:
5d:31:a7:be:f9:0e:b4:69:59:a5:20:f1:54:a8:5a:
c4:ea:00:9e:dd:83:64:38:65:f1:74:24:d0:33:08:
5d:05:9a:54:1e:35:f3:cd:84:7b:cb:5f:e4:f0:dc:
c8:f5:af:9f:1f:79:75:30:32:af:f3:2d:f3:e1:e6:
6b:ba:5f:6d:20:0f:15:16:5e:b3:3d:2e:95:3e:1e:
16:3e:32:37:63:bf:bc:34:71:08:7f:d0:f1:15:97:
39:5d:f3:51:d2:02:09:44:4f:c5:bf:96:45:2c:7a:
ee:2b:0d:ba:3c:25:63:af:5f:7a:55:a2:1d:18:9b:
95:c3:f3:4c:37:cf:9a:98:0a:e2:a8:98:ad:07:66:
04:33:5e:56:e0:e2:b3:19:a7:3f:a7:9e:7f:7e:32:
63:eb:03:c4:d7:49:d7:0c:a9:f7:16:57:3b:0c:25:
ad:e4:db:53:93:7d:4c:b7:0b:98:73:ff:d0:b8:0a:
7b:fa:b8:12:a1:3b:e4:3f:22:eb:35:1a:ef:f6:e5:
1e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8B:5E:28:91:65:CA:08:D6:64:5A:34:23:B9:E0:B3:89:12:5E:56
X509v3 Authority Key Identifier:
keyid:1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f3:ab:8c:f9:5e:13:7b:85:e4:03:ff:e6:51:ea:22:ed:93:
1e:98:e5:33:b3:16:2e:1f:7d:12:9f:6f:bf:4e:71:e4:4e:8e:
a2:69:a5:b4:77:70:b5:ae:d0:d0:19:5b:14:ef:9f:74:38:b3:
1a:b0:07:85:5c:ec:0f:e4:ad:6d:4d:94:cc:87:2f:03:02:c5:
4e:39:d1:dc:e3:c9:6d:45:f3:d2:2e:c8:e2:8d:1d:46:f0:f2:
ee:a7:41:43:db:63:a5:9d:c1:12:cb:e7:47:a0:75:7b:5d:ca:
05:16:5a:f0:01:4d:09:43:07:ea:21:e5:e4:a4:d5:a0:d1:07:
02:e8:e8:e7:64:f9:38:44:ec:a3:34:3e:d2:15:a1:49:a9:54:
0e:c3:2b:66:59:55:55:69:92:3c:f7:31:30:0c:12:6a:f2:f2:
df:e2:9a:74:39:0a:ec:79:dc:e3:e7:cc:54:8a:df:af:44:e4:
de:a6:1e:99:d2:cf:20:66:74:85:3e:4e:b7:47:f7:60:a9:f1:
49:c5:73:64:df:c8:89:41:0a:68:a1:11:ea:b9:1b:02:1b:d3:
5a:98:c5:93:ec:be:a0:06:7c:69:5a:cb:a5:fc:58:b9:d8:ee:
35:d7:13:fc:0e:8f:16:40:ed:cc:5b:7c:f0:60:f6:11:00:ba:
cc:78:2c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:47 2026 by rpki-client