Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
File: HC03VaNQG5yw1euqSZ5eoUm88Is.mft (raw, json)
Hash identifier: 1wUp/KQ71XqW4Mk/VG4LeHqjsLSb4UgmFH5Jq5dVhQc=
Subject key identifier: 1C:51:A0:2E:D5:77:A8:93:21:DB:2E:B4:2E:E0:10:BA:22:89:A7:6C
Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
Certificate issuer: /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Certificate serial: 019D9A74D40A99B985ECDCD3D23447F41D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
Manifest number: 09A0
Signing time: Fri 17 Apr 2026 08:00:40 +0000
Manifest this update: Fri 17 Apr 2026 08:00:40 +0000
Manifest next update: Sat 18 Apr 2026 08:00:40 +0000
Files and hashes: 1: HC03VaNQG5yw1euqSZ5eoUm88Is.crl (hash: rw3/D2VN6/jRS95QfuA1a2ibhJRXG7dmNqxIae57mhA=)
2: Lp1vmXiAHAmwk2iCgx7RB0tjwmg.roa (hash: SGv7A6ro4T2ZdRrPed862yoKpwBaCmoUOMJ9b5UxA+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:d4:0a:99:b9:85:ec:dc:d3:d2:34:47:f4:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Validity
Not Before: Apr 17 08:00:40 2026 GMT
Not After : Apr 18 08:00:40 2026 GMT
Subject: CN=1c51a02ed577a89321db2eb42ee010ba2289a76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9a:2d:b2:ab:d8:cf:91:05:f9:6b:35:f0:b8:
f7:ed:fa:59:da:b7:87:25:2d:fb:9b:0d:db:eb:87:
be:d7:b3:3e:74:1d:57:be:8b:b8:20:6e:d2:e3:f8:
01:11:6f:fc:48:d9:ba:d4:9e:04:98:b0:b4:2d:76:
fe:fa:58:c2:8c:e7:28:3e:58:5b:9e:04:0f:17:a0:
bd:bd:c4:37:77:08:eb:72:f3:39:5d:79:0c:d7:c0:
77:75:e8:4e:c8:5e:bd:dd:ae:2b:1b:70:24:c3:c3:
cd:2d:6d:4b:8c:e0:42:74:a0:7e:3d:59:81:e4:9d:
6f:f9:d9:9e:a2:1f:83:88:8c:5f:b8:e3:29:c2:a8:
b5:45:f5:da:e5:7a:20:ed:29:47:d3:91:f4:51:08:
4f:fe:8d:e2:0f:df:5c:0f:98:3b:df:42:50:80:f5:
d6:9e:be:ec:06:2e:69:f0:0e:0e:ed:12:bf:9f:49:
8a:13:67:b9:35:5e:68:4f:43:a7:10:11:6e:9f:97:
19:a6:b4:d8:c2:5b:96:30:3a:71:0b:6e:78:49:0e:
36:80:9f:e3:aa:8a:07:d3:de:e2:3a:70:e4:60:fc:
ff:79:ce:3c:2c:51:73:12:f4:53:a5:b6:96:f0:5f:
8c:05:c1:68:35:29:8c:8a:3b:53:f1:b1:1f:c2:36:
ff:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:51:A0:2E:D5:77:A8:93:21:DB:2E:B4:2E:E0:10:BA:22:89:A7:6C
X509v3 Authority Key Identifier:
keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5b:f5:0f:b7:5a:e5:4f:bd:c9:07:72:cc:df:7d:26:a3:d0:
f5:cf:5c:f2:53:3b:66:b7:23:c4:4f:57:b2:4b:2f:00:03:e0:
79:6b:db:51:6f:df:8e:33:a8:0c:7d:1e:18:26:4c:4a:80:8d:
64:d4:2a:14:86:93:09:56:87:aa:99:b3:9b:7f:93:b4:5c:41:
ab:cb:87:99:d7:db:9d:d8:f4:05:c2:80:81:97:f0:15:55:39:
82:10:ba:0d:f2:6a:f2:76:a6:23:12:80:7e:be:3c:62:81:c3:
3c:1f:3f:e5:e0:1b:c1:4d:7a:72:07:15:85:92:26:8d:fe:99:
dc:06:13:03:b2:28:92:a3:c7:d0:a2:0c:b2:78:e7:d5:57:10:
3b:a7:a9:bb:c7:15:09:c6:38:fc:91:86:38:19:57:21:67:10:
be:ff:a6:56:5b:18:c1:08:04:79:b6:22:c0:34:80:f7:be:5e:
94:ea:2b:fe:1e:16:9a:10:60:7e:54:9c:d2:8f:bc:22:05:2d:
2e:d2:aa:e0:18:21:cf:c3:8d:d5:84:86:d3:03:96:e3:94:c8:
97:26:f0:5f:25:18:be:93:c8:ec:54:23:08:6f:0b:cf:73:83:
2b:48:f6:a8:27:05:d1:b3:5a:af:30:32:50:3e:3d:d3:e3:df:
32:b8:dd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:50:11 2026 by rpki-client