Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
File: HCQvLpRcanLuKPjIDoDUiEM-N6M.mft (raw, json)
Hash identifier: fNFp4dDLr/B3oC6zAeUDOftVQLVorhmmrigeQxDcm6Y=
Subject key identifier: D1:F3:23:76:77:1F:5A:4C:BA:EF:99:C7:B8:E8:63:76:C7:39:17:C0
Authority key identifier: 1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
Certificate issuer: /CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Certificate serial: 019D99D0CF3D2EE9D97005FC03612A5294DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
Manifest number: 0C05
Signing time: Fri 17 Apr 2026 05:01:31 +0000
Manifest this update: Fri 17 Apr 2026 05:01:31 +0000
Manifest next update: Sat 18 Apr 2026 05:01:31 +0000
Files and hashes: 1: 4lgY0W_OGeoIOrzJmbXnEdo5-pc.roa (hash: l5wy/qIfUulCmH/VGEZK2Kox3s/Htye0nx0GKzhDkHw=)
2: HCQvLpRcanLuKPjIDoDUiEM-N6M.crl (hash: 5hGXcsRBUtVIWU6s/P2Qxvq0j0C23PgK6LKO5CHoNPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:cf:3d:2e:e9:d9:70:05:fc:03:61:2a:52:94:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Validity
Not Before: Apr 17 05:01:31 2026 GMT
Not After : Apr 18 05:01:31 2026 GMT
Subject: CN=d1f32376771f5a4cbaef99c7b8e86376c73917c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:39:95:89:8d:dd:b8:53:2d:a9:39:05:12:45:
c5:07:2c:66:ae:24:69:bf:08:95:57:1a:c5:57:db:
15:f0:e2:e5:08:72:9f:d0:8e:69:1d:19:aa:9c:22:
df:d9:c4:54:fb:ea:4d:55:4e:35:eb:27:be:65:fa:
f0:e1:31:96:44:3a:f7:e2:63:74:5e:9d:66:5f:3e:
95:eb:b5:e3:6f:af:2c:f4:be:e2:e5:79:9f:07:e1:
89:39:07:63:2d:8a:9e:1a:6c:e4:76:33:c1:81:ef:
b7:3d:94:b7:ea:b3:cf:e9:e4:94:e7:57:1e:31:a8:
80:51:09:58:4e:1e:5e:5d:19:9b:2e:ad:67:46:66:
79:7d:06:65:2a:0b:7a:1a:34:f5:5f:06:cb:9a:b4:
74:3b:68:e3:c7:3d:18:17:be:ff:e0:37:ba:7c:c8:
69:ad:da:10:7e:f5:a4:26:fe:3f:c1:26:67:20:ff:
6a:7c:e1:c2:dd:75:53:96:30:99:73:6f:a8:56:47:
bd:2d:06:a4:6d:65:4d:21:c0:59:e4:10:85:88:a0:
02:f4:b4:02:45:4a:d5:b3:c8:a4:7d:e9:b9:ac:ad:
5b:f2:74:cf:ed:dc:9a:ad:c4:65:4d:91:94:94:de:
aa:83:85:e7:d4:2e:f4:eb:40:81:b8:65:68:7d:70:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F3:23:76:77:1F:5A:4C:BA:EF:99:C7:B8:E8:63:76:C7:39:17:C0
X509v3 Authority Key Identifier:
keyid:1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0e:8f:e2:be:ba:d3:e6:38:00:e0:fe:24:f4:ac:ad:94:fb:
bd:a2:2f:12:02:b3:fa:b9:b9:30:06:a5:07:67:71:be:ca:54:
ba:d3:5b:97:b5:ae:42:0b:61:ed:44:a2:da:05:29:da:5e:45:
5d:ef:da:49:97:38:b7:9e:e0:8a:99:df:32:d6:93:e0:0d:ae:
7f:df:1a:79:fc:6e:0f:2a:ca:cb:5c:dd:a3:d4:fa:81:4f:99:
47:ef:bd:b5:30:a7:30:d1:11:2e:fa:82:b6:ba:50:ce:a3:6c:
2c:a1:ab:67:af:5a:a3:01:d5:fb:16:66:3c:da:6c:90:a6:33:
46:7c:f5:20:46:f6:c7:cf:96:a1:6d:ab:85:d4:9a:19:69:4e:
52:9e:d9:c6:57:b3:d5:ec:92:19:5b:f6:a2:64:fc:d2:e8:6c:
cc:c7:55:6e:d4:ce:66:1f:3e:e9:1b:7b:f9:85:0d:c7:9d:2b:
ef:34:56:f5:cc:e8:fe:e0:25:5d:98:2e:88:e8:7c:0c:01:e9:
76:50:3f:bb:d5:1c:96:50:61:ba:9d:b2:19:02:d6:21:2a:46:
5f:e2:18:d9:70:72:a6:cc:fa:90:df:16:a9:29:d4:8a:97:70:
ed:09:fa:0a:2c:49:9d:6e:64:b7:f9:64:ae:01:25:64:a3:16:
28:ff:c8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:34 2026 by rpki-client