Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
File: HuXdRp9xw40T9Xxil5YiTMAg3BU.mft (raw, json)
Hash identifier: GK+RMHdllXxNwXZECu1pwj0mnWu7LjHol1mA8s06eRc=
Subject key identifier: 0B:1A:54:0D:06:0E:52:3D:AF:36:B3:0F:5E:B2:17:CC:E6:F2:7B:F8
Authority key identifier: 1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
Certificate issuer: /CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Certificate serial: 019CB02405AFD75AAB33D9C53360FA1CCC12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
Manifest number: 0BE8
Signing time: Mon 02 Mar 2026 20:01:16 +0000
Manifest this update: Mon 02 Mar 2026 20:01:16 +0000
Manifest next update: Tue 03 Mar 2026 20:01:16 +0000
Files and hashes: 1: HuXdRp9xw40T9Xxil5YiTMAg3BU.crl (hash: jgp+E5wLB08Ps1liGBjVDJtKArCuG+0CmltfXKt59IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:24:05:af:d7:5a:ab:33:d9:c5:33:60:fa:1c:cc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Validity
Not Before: Mar 2 20:01:16 2026 GMT
Not After : Mar 3 20:01:16 2026 GMT
Subject: CN=0b1a540d060e523daf36b30f5eb217cce6f27bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:ec:1e:aa:a0:03:3e:88:ef:5e:29:52:54:
02:01:c3:5a:0a:86:a9:cf:84:d4:45:1a:52:ef:55:
61:35:66:cc:83:81:72:e0:fe:a0:78:a8:c7:d4:f0:
cc:75:15:01:4f:cb:ae:3a:fa:a7:c8:11:65:85:df:
8f:5d:68:19:bb:60:2b:33:df:21:ad:18:7c:2f:9a:
da:9e:6b:2d:a9:c7:3a:fc:03:96:49:45:a0:06:32:
a8:28:39:fd:88:25:db:e0:f6:29:23:cc:b4:fd:be:
ea:bd:16:cd:83:23:d9:b4:72:7f:f7:bd:ff:0d:f3:
e9:fb:2e:7f:5a:84:b7:ed:79:af:ba:39:d0:40:dd:
94:77:5a:94:7e:97:0e:af:8a:36:28:42:ae:0a:fc:
cb:79:c5:2d:e1:5c:62:1f:fe:be:15:b6:fb:92:28:
87:79:85:ab:47:28:b6:44:ac:a2:56:79:f1:d0:4c:
a6:d1:d8:64:e8:1c:27:1f:ae:9e:8d:1e:15:eb:46:
a0:19:6a:db:ab:c9:d1:dd:ec:c3:88:80:0f:33:21:
f5:ff:b2:93:f1:ef:56:ef:6a:71:fa:9a:bb:a6:76:
b5:4e:3c:b6:c3:f0:bd:c7:ad:d4:db:1c:ed:ec:98:
fd:e0:bd:b2:1c:7f:b1:c0:c3:ac:72:6a:59:15:6d:
af:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1A:54:0D:06:0E:52:3D:AF:36:B3:0F:5E:B2:17:CC:E6:F2:7B:F8
X509v3 Authority Key Identifier:
keyid:1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b6:37:c4:3f:53:5c:1e:b2:77:08:b9:42:48:29:69:0a:76:
26:d0:82:f9:ea:2f:03:d7:18:8f:e6:1f:7a:e9:d2:5a:55:39:
f5:40:61:6e:1b:c8:09:2f:a8:59:62:65:c9:9c:a7:a5:c7:9a:
48:6c:be:12:b3:d5:84:a6:e9:d0:89:62:b4:93:b4:fc:ac:ce:
d7:6e:f7:09:73:ea:6c:9f:0d:93:ea:6a:c1:a4:d4:e2:ca:b7:
a6:6f:d5:0d:f3:20:5f:a3:01:f5:89:67:5c:3d:ee:f3:27:a7:
21:30:ae:bb:89:b2:ed:cd:2a:42:38:c7:46:d2:47:d8:5b:70:
1f:5d:22:ba:bc:15:d5:7c:1f:ac:eb:1b:72:28:6b:8f:4f:f1:
e0:b1:13:29:5a:40:1d:29:55:61:42:18:8d:ea:89:9d:45:c1:
74:85:6c:a6:f9:6a:eb:82:8b:49:21:a2:ed:59:2b:63:c1:e2:
9e:49:06:5c:84:95:7d:78:70:8a:cc:5d:78:6e:3b:f5:24:c6:
8c:74:fd:1d:d6:7d:e0:b5:fd:1e:e2:06:0b:b2:ad:93:2f:0e:
0a:03:1f:46:e2:5b:e1:e4:89:1b:72:d7:5d:cf:48:d6:fe:c1:
28:47:25:39:a9:7c:a4:47:5d:94:cc:ce:39:76:a6:19:c6:ec:
04:08:be:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:00:44 2026 by rpki-client