Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
File: hXLVrMJRZ2mcf886G4BOoyWsTl0.mft (raw, json)
Hash identifier: 4TEq3SCMk+zJfv9wO4RVEUy9B2T4ZLE0JPEFtKNK1j4=
Subject key identifier: 23:17:76:F0:DC:BD:E4:68:1B:06:DF:A6:DF:F3:B7:2D:2B:80:3B:B5
Authority key identifier: 85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
Certificate issuer: /CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Certificate serial: 019CACB487D67542D64206E779F21FEA2612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
Manifest number: 1776
Signing time: Mon 02 Mar 2026 04:00:38 +0000
Manifest this update: Mon 02 Mar 2026 04:00:38 +0000
Manifest next update: Tue 03 Mar 2026 04:00:38 +0000
Files and hashes: 1: hBm5sqEsYgYzGLvahciDaWXB5tc.roa (hash: B8HbKYDNFdLFprrv9ZSAbv02c/Z7c5d/cp8eKIMZxIo=)
2: hXLVrMJRZ2mcf886G4BOoyWsTl0.crl (hash: WCXDTFzQABzwQ9EH+Nrp0nHooeQIx0lI4O3yX/Rtc4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:87:d6:75:42:d6:42:06:e7:79:f2:1f:ea:26:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Validity
Not Before: Mar 2 04:00:38 2026 GMT
Not After : Mar 3 04:00:38 2026 GMT
Subject: CN=231776f0dcbde4681b06dfa6dff3b72d2b803bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5e:08:f4:33:20:a8:13:1c:c1:f2:5d:8c:ad:
3a:9e:a3:b5:5b:7c:f5:63:be:14:ec:97:88:9b:bb:
ee:0e:71:f2:48:3d:e7:c6:3e:75:f0:50:8b:e6:45:
40:70:c8:2f:27:16:c6:50:0e:22:7c:f8:7f:61:94:
8e:a6:d2:20:85:cd:02:1e:be:c2:0d:fa:79:c5:0e:
9c:70:f1:b3:e0:c0:84:a5:a3:26:85:f3:0a:73:7e:
62:3d:54:e8:11:4a:21:6b:ab:8f:83:41:f1:4a:b0:
91:ca:14:9d:fb:9a:09:14:fe:ed:c2:46:24:ef:64:
e0:a2:38:57:2f:59:b6:af:b5:06:5c:82:44:bf:3c:
9c:b0:e0:ee:cb:48:42:52:d2:55:51:c9:35:7b:b3:
21:44:29:18:a3:50:db:b1:ef:06:1a:d3:0d:24:91:
4b:cb:3f:e1:83:7e:04:47:3e:b7:1e:1b:a1:30:57:
44:eb:15:8f:1f:5f:82:03:c7:75:2e:89:37:3e:94:
00:5b:95:b5:54:6e:7c:42:d4:34:3a:89:9f:04:8b:
2e:e6:0c:9b:55:7c:4d:8c:3f:f4:cb:e5:b6:13:01:
d7:c5:fb:6d:5b:d5:db:f4:64:88:9d:b0:08:4d:5b:
9a:eb:fb:f6:7e:36:53:fe:5f:3b:37:ca:3f:ad:0a:
d5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:17:76:F0:DC:BD:E4:68:1B:06:DF:A6:DF:F3:B7:2D:2B:80:3B:B5
X509v3 Authority Key Identifier:
keyid:85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:bd:f1:b8:08:08:5c:26:c1:96:1f:85:3a:88:ff:35:9c:5e:
9b:8d:3a:6a:30:4f:69:c6:9d:77:6a:20:8a:63:f4:ef:a0:5e:
41:72:ab:32:06:b2:63:18:f6:9a:ee:7f:bf:39:16:a7:3e:c0:
09:d9:a9:01:61:57:ca:5a:6f:0e:87:18:4a:2b:ce:3c:52:67:
27:86:6f:00:44:58:67:52:ee:dd:c7:1d:02:5a:7d:ee:26:27:
d8:c0:2a:4b:37:6f:80:fb:25:31:57:57:0f:17:ae:e6:9e:a6:
eb:97:7e:50:fe:64:2b:10:bb:e6:f4:60:fb:ce:fe:63:13:0d:
a2:0c:8c:6b:2c:14:52:fa:58:ce:eb:0b:c5:8b:b7:de:71:59:
70:ac:fe:df:b5:51:fe:1a:6e:4d:57:f0:ac:66:1f:b6:87:22:
12:12:77:2b:90:97:ad:61:07:af:d8:b5:0b:c0:98:90:f2:73:
72:ec:d6:d4:ba:a5:08:30:b4:43:f4:f1:37:f4:b0:86:a7:5f:
a1:74:26:ad:ff:2f:ea:5e:86:e9:4b:21:96:67:d1:10:87:43:
fe:66:94:1a:a8:50:6b:ee:8e:a0:f0:13:c6:d8:db:1d:ab:62:
0a:65:5b:16:74:a4:80:fd:bc:33:2d:10:ab:77:d7:6e:b2:b7:
00:9d:09:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:26 2026 by rpki-client