Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
File: HuXdRp9xw40T9Xxil5YiTMAg3BU.mft (raw, json)
Hash identifier: lJGVqB+TvR7y3L3JlhdWgry75D8Xo2i/RBrC88JMTnU=
Subject key identifier: DF:A2:37:0D:3D:D3:B7:D8:8D:6E:74:AD:7E:2A:6F:99:44:8F:0B:01
Authority key identifier: 1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
Certificate issuer: /CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Certificate serial: 019DA379136BB437EBB7532E4270CE9F3E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
Manifest number: 0C66
Signing time: Sun 19 Apr 2026 02:01:54 +0000
Manifest this update: Sun 19 Apr 2026 02:01:54 +0000
Manifest next update: Mon 20 Apr 2026 02:01:54 +0000
Files and hashes: 1: HuXdRp9xw40T9Xxil5YiTMAg3BU.crl (hash: 9qlr/eeT+O+xWhOL9YMPmJK4h42yVaGdGI0JYnzeIr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:79:13:6b:b4:37:eb:b7:53:2e:42:70:ce:9f:3e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Validity
Not Before: Apr 19 02:01:54 2026 GMT
Not After : Apr 20 02:01:54 2026 GMT
Subject: CN=dfa2370d3dd3b7d88d6e74ad7e2a6f99448f0b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:ba:54:7f:51:34:a5:2a:ba:b3:8c:3e:19:
d5:fa:3b:79:b6:73:f0:14:d3:47:7e:80:bc:f1:ff:
5f:6e:c6:1e:5f:9d:a3:64:17:06:70:86:a6:ba:3f:
71:31:94:2b:38:18:a4:90:18:94:94:3b:1a:d7:da:
f1:5d:61:d2:d1:d5:42:02:fc:65:f2:17:03:9e:d2:
b5:dc:de:60:83:15:90:64:4b:18:bd:be:9f:d8:2f:
1d:56:4e:b0:99:47:b3:6f:ce:5a:ac:59:2a:36:9f:
f2:82:a7:0a:81:91:40:1e:0b:d0:eb:0c:28:55:d3:
e5:9b:78:cd:5d:f6:3e:18:b5:d6:b1:32:7c:58:2c:
30:10:30:35:c2:09:d9:54:13:94:c9:c6:24:ed:47:
d1:b0:bd:f5:e6:18:75:a1:fa:11:15:f9:43:06:e1:
47:9b:14:28:91:93:98:a7:a8:49:6f:1c:89:30:c3:
1e:01:fe:a5:66:93:4b:bc:35:3d:dd:93:ae:42:73:
35:11:73:42:8e:d5:86:c8:5a:61:14:48:b2:7c:ea:
69:3d:54:8e:66:b2:c9:cb:48:55:49:1d:6e:50:6a:
da:cd:cb:81:b6:38:0d:30:08:db:ff:d4:22:ee:5b:
38:53:1e:de:44:92:7e:b5:68:a5:d1:62:7d:1e:da:
fd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A2:37:0D:3D:D3:B7:D8:8D:6E:74:AD:7E:2A:6F:99:44:8F:0B:01
X509v3 Authority Key Identifier:
keyid:1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7a:28:e2:34:b2:8b:32:88:bf:97:bf:84:88:4f:d0:30:3e:
13:55:18:d2:51:6d:7f:3d:8a:f5:78:02:08:03:9b:d1:87:e4:
1d:9b:61:51:aa:7e:93:a3:b2:6f:cb:61:13:67:c0:bc:92:e7:
83:60:37:f7:e6:99:f3:9e:6c:92:37:ce:e4:e2:cc:33:3d:09:
1b:8a:9e:1c:de:a5:59:82:6c:8b:0c:fd:d4:aa:f7:93:30:18:
26:cd:4c:91:a8:45:42:3c:99:40:b0:66:f8:61:cc:e1:f1:79:
a0:8b:93:6e:5c:6d:74:53:39:21:84:c2:30:0a:6f:49:7f:9e:
49:19:a5:43:2b:f1:3a:23:49:a2:15:f3:b7:d6:6a:b8:cd:2e:
c5:ae:3a:db:c7:a0:64:f4:92:69:60:38:42:29:0f:86:46:78:
76:e0:df:d8:35:a8:22:d3:a5:98:93:3a:a6:96:f5:0c:4a:31:
a9:a6:30:eb:dc:c8:05:70:e0:d0:e9:ee:5c:dd:fe:1a:36:32:
b5:86:98:48:85:bb:21:1e:a7:78:65:43:ac:b7:e3:1f:02:41:
7f:b9:b2:36:2e:55:a3:69:45:44:a4:29:a5:19:56:c2:0b:28:
3a:53:a9:94:d2:1f:bb:cc:b3:e8:0d:80:4c:6a:33:a8:27:25:
71:ab:84:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:39:59 2026 by rpki-client