Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
File: HC03VaNQG5yw1euqSZ5eoUm88Is.mft (raw, json)
Hash identifier: KhMXYjlDX91FddKOIOvrfPvWeNkH1qGYJftYkQBwku4=
Subject key identifier: 70:6B:D2:F2:F5:ED:23:0B:86:DB:84:F7:60:18:16:13:F3:52:54:A7
Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
Certificate issuer: /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Certificate serial: 019CACEB64C638BED2FE80AA99B17F14DE98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
Manifest number: 0925
Signing time: Mon 02 Mar 2026 05:00:33 +0000
Manifest this update: Mon 02 Mar 2026 05:00:33 +0000
Manifest next update: Tue 03 Mar 2026 05:00:33 +0000
Files and hashes: 1: HC03VaNQG5yw1euqSZ5eoUm88Is.crl (hash: sX9mVAdJOo+30vcsjMVpydRkghHqwNVaz2wUR3+ov54=)
2: Lp1vmXiAHAmwk2iCgx7RB0tjwmg.roa (hash: SGv7A6ro4T2ZdRrPed862yoKpwBaCmoUOMJ9b5UxA+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:64:c6:38:be:d2:fe:80:aa:99:b1:7f:14:de:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Validity
Not Before: Mar 2 05:00:33 2026 GMT
Not After : Mar 3 05:00:33 2026 GMT
Subject: CN=706bd2f2f5ed230b86db84f760181613f35254a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a1:cc:18:7b:6d:db:7c:ea:23:64:51:38:93:
cc:87:e5:0d:44:6a:ca:6d:00:26:ac:ac:7c:3b:05:
d0:4a:72:1c:13:3f:50:9b:df:50:86:9d:02:7d:de:
2c:c3:c4:0e:3f:8e:be:e7:bb:06:88:0d:97:17:eb:
00:18:c8:26:c2:16:e5:1a:fd:28:b2:e0:7b:23:0d:
7a:45:ad:9f:39:76:ac:d5:d7:30:39:bc:4f:ce:71:
b5:25:d2:ff:72:1e:ec:6a:03:b8:93:bc:5a:2a:15:
f7:81:b4:2c:c9:73:69:6b:fa:eb:93:02:fc:be:62:
f6:53:02:ef:af:f0:f2:aa:26:cc:a1:fe:c9:84:9a:
57:76:fb:06:ac:3b:99:43:91:08:a5:db:b0:70:3c:
46:ee:5a:aa:b6:ea:40:89:89:2e:27:03:7e:a3:ff:
3a:09:66:84:d1:22:05:08:c5:dc:0f:ba:99:37:96:
28:6a:90:33:76:0f:c1:c0:3f:0b:57:b2:9b:bb:ad:
e1:9b:a1:f2:ec:f0:67:c8:ae:06:cb:bd:28:10:71:
7d:63:a3:fc:5c:8c:c3:56:80:65:a8:9b:7f:ec:8c:
44:35:e2:df:f0:be:eb:03:a4:91:2c:a9:dc:de:cb:
c7:b8:4a:5b:b0:ab:69:ab:06:92:e0:97:b9:e0:d0:
c5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6B:D2:F2:F5:ED:23:0B:86:DB:84:F7:60:18:16:13:F3:52:54:A7
X509v3 Authority Key Identifier:
keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b0:85:5c:fc:6d:bc:87:17:db:55:ca:a6:8b:6c:e1:a9:f2:
e8:45:85:55:d4:7c:63:cc:57:fd:9e:af:d1:3c:05:1f:b4:64:
58:42:17:a5:23:56:33:75:f8:49:8f:bb:cf:d0:bd:80:76:43:
54:1d:46:7e:60:07:3f:7e:2d:eb:9b:1f:76:d2:79:58:9a:ab:
75:19:95:85:e7:4c:89:8b:4d:67:c6:e4:cf:3f:35:94:9c:f0:
d5:c2:ee:59:96:e4:d2:68:ac:a6:cb:57:74:e2:07:9b:a6:c9:
a1:12:68:27:45:48:ca:09:17:6d:dc:ae:d9:ad:22:c2:2e:63:
7c:69:82:0f:1c:04:79:17:c4:6f:70:25:c3:89:94:ce:20:33:
87:9d:80:ba:aa:05:80:51:23:21:75:ee:29:79:64:3f:b7:1c:
fc:69:d2:e9:fd:63:f0:96:55:48:d8:98:f6:92:e9:0e:30:42:
20:71:08:90:ee:8c:77:13:b1:4b:bb:cc:7f:d0:83:da:88:9e:
3e:38:e7:eb:d8:b7:6f:4e:76:66:c8:d1:43:a4:8c:15:36:a8:
06:02:05:0f:29:a9:58:8e:b6:96:f9:cf:cc:64:85:6c:31:a0:
e9:dc:72:23:95:03:1b:1a:dd:b8:94:02:4b:db:fa:7d:88:b5:
28:2b:aa:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:32 2026 by rpki-client