
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
File: HC03VaNQG5yw1euqSZ5eoUm88Is.mft (raw, json)
Hash identifier: SUiGEI0C/vpAu0pcA4v5juUCjy09gsqT42zfOVkUCII=
Subject key identifier: D1:2E:13:20:FF:05:A0:B2:34:3A:26:61:8E:D5:C5:91:C2:B0:58:75
Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
Certificate issuer: /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Certificate serial: 019EC3DC4039E5D57598254C85FA2027F436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
Manifest number: 0A3A
Signing time: Sun 14 Jun 2026 02:00:51 +0000
Manifest this update: Sun 14 Jun 2026 02:00:51 +0000
Manifest next update: Mon 15 Jun 2026 02:00:51 +0000
Files and hashes: 1: HC03VaNQG5yw1euqSZ5eoUm88Is.crl (hash: LLpq5C+baIkq+xdl0W0ERY5ksPpHkCmD3Cd89CcVIiA=)
2: Lp1vmXiAHAmwk2iCgx7RB0tjwmg.roa (hash: SGv7A6ro4T2ZdRrPed862yoKpwBaCmoUOMJ9b5UxA+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:dc:40:39:e5:d5:75:98:25:4c:85:fa:20:27:f4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Validity
Not Before: Jun 14 02:00:51 2026 GMT
Not After : Jun 15 02:00:51 2026 GMT
Subject: CN=d12e1320ff05a0b2343a26618ed5c591c2b05875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:19:33:24:7a:d5:b8:1a:c7:81:ed:f3:39:
70:9f:86:b6:42:ad:2e:c2:05:19:0d:d9:27:6d:f6:
09:12:05:07:20:18:9f:c9:ce:3c:a5:a2:2b:7c:a7:
49:8a:d8:dd:b0:92:27:fe:d7:e0:e0:b2:e7:6f:28:
6c:b0:bc:f7:d5:b6:aa:3a:3d:46:74:22:0e:dd:2d:
6e:ea:7f:dd:57:88:8d:59:81:d2:71:d3:fc:65:da:
30:f7:29:e6:66:95:36:28:19:df:5d:41:64:8f:cc:
07:d6:04:de:28:38:3f:1e:ed:85:6d:e2:c2:c5:9d:
7f:42:8f:d2:5e:5a:3f:52:6c:3c:fa:a8:b1:70:3a:
0a:cf:4d:f4:fb:5a:4d:23:92:75:8b:33:15:a7:f3:
2e:08:a4:f1:fa:01:8b:aa:65:74:98:5e:e0:30:fa:
59:13:b3:7e:08:28:3b:be:9f:ca:fe:1f:9e:b7:2d:
52:29:e6:17:18:19:e8:c1:c2:e1:81:17:5e:fc:eb:
9f:62:90:ea:d0:24:35:0e:e6:a6:9c:7b:a4:36:20:
e4:d8:bc:2e:88:70:4a:62:fd:0f:89:44:e7:aa:2f:
e8:60:d1:3b:b6:c4:03:ce:4f:de:d4:0c:33:19:cb:
43:b4:69:70:c4:9c:aa:72:89:be:8a:d7:e9:81:43:
2f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2E:13:20:FF:05:A0:B2:34:3A:26:61:8E:D5:C5:91:C2:B0:58:75
X509v3 Authority Key Identifier:
keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:30:87:3a:1a:be:b3:db:31:1a:2e:e1:e8:1e:16:c0:65:c9:
81:ba:bc:b3:bd:0c:ce:3a:df:c5:be:df:f5:96:b5:be:08:1d:
74:e3:e0:e5:dc:4d:66:c7:eb:22:37:57:cd:ab:fb:5c:10:f9:
df:15:76:ee:40:f8:23:77:fb:30:65:b1:dd:e9:7f:28:11:55:
21:a6:d7:e5:c9:9a:e3:7a:ef:c0:7c:a7:85:66:a6:9d:07:5a:
f2:eb:a2:aa:8e:f4:dc:7c:af:fc:6d:15:ed:77:a1:e0:28:5e:
89:95:80:22:8e:cc:f2:f5:d7:a5:d5:d4:0b:d1:d0:bc:15:05:
37:90:b5:86:ab:00:0c:9e:77:ea:4a:af:39:45:e9:42:eb:dd:
03:85:86:b3:17:5a:da:37:af:6e:da:2e:9d:77:4e:a2:4c:e6:
23:86:af:e7:22:f8:ec:7c:46:c9:40:b0:64:8c:36:bb:73:a1:
c7:11:06:d1:49:f5:e0:57:50:ad:cb:58:50:96:3b:89:4f:1c:
67:d3:88:cf:75:2b:58:6e:27:93:91:54:30:5b:bb:8c:9c:bb:
1d:78:20:02:32:6b:d8:91:c0:b3:e2:e7:89:47:c3:46:d3:ea:
8f:83:aa:6c:13:a8:1d:d4:a6:68:b3:20:f5:71:54:bb:7b:c9:
f8:a5:c6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:09:39 2026 by rpki-client