Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
File: HC03VaNQG5yw1euqSZ5eoUm88Is.mft (raw, json)
Hash identifier: 9pQHwdd7fvdaHTsLNJ4uOwFB3gXBdzL/ExuEdfrttd0=
Subject key identifier: 38:21:CC:62:10:B5:F5:31:92:89:37:74:AF:CD:8C:69:20:02:61:E5
Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
Certificate issuer: /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Certificate serial: 019FAD8877415C67D870EC6801ADB34C3294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
Manifest number: 0AB3
Signing time: Wed 29 Jul 2026 11:00:29 +0000
Manifest this update: Wed 29 Jul 2026 11:00:29 +0000
Manifest next update: Thu 30 Jul 2026 11:00:29 +0000
Files and hashes: 1: HC03VaNQG5yw1euqSZ5eoUm88Is.crl (hash: C4kQg8uZTGyNowmfVPSl5EU327RzGDWHXSmmLGP1HOs=)
2: Lp1vmXiAHAmwk2iCgx7RB0tjwmg.roa (hash: SGv7A6ro4T2ZdRrPed862yoKpwBaCmoUOMJ9b5UxA+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:77:41:5c:67:d8:70:ec:68:01:ad:b3:4c:32:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Validity
Not Before: Jul 29 11:00:29 2026 GMT
Not After : Jul 30 11:00:29 2026 GMT
Subject: CN=3821cc6210b5f53192893774afcd8c69200261e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:06:b8:22:d3:a9:9b:01:35:9b:45:9b:14:dc:
d7:a5:6f:37:09:87:62:82:ed:49:29:04:cc:33:0a:
aa:90:6a:88:dc:f3:7c:88:4c:75:cd:c0:d2:59:9a:
94:4e:f7:bf:4b:9a:f8:7c:90:a9:e8:25:0a:f8:2d:
21:07:9f:ee:38:64:a6:97:e2:9b:68:03:63:83:20:
f8:26:cf:18:77:f1:bf:9e:84:fd:23:8b:36:01:a3:
17:c9:9e:6f:a0:1e:e3:75:b6:93:2c:c5:9d:f8:56:
7c:a3:14:71:1c:ec:6e:ba:89:50:72:9d:c0:33:a0:
e8:1f:c5:c1:48:8e:4b:ff:d5:75:28:dd:50:03:91:
37:7c:cd:54:82:f2:b6:85:99:07:31:cc:c2:95:82:
04:b1:66:e3:6d:8a:d0:6c:8b:72:6c:3b:43:0f:aa:
2d:73:a4:98:e8:b1:08:72:80:8b:b7:e8:2e:c1:95:
6b:ef:55:0a:dd:0d:c2:91:fa:01:39:eb:63:fd:38:
50:60:fb:18:33:f7:97:fd:6c:e3:b9:4f:95:61:e9:
08:fb:13:1f:69:96:5a:ce:61:92:c3:47:86:da:8a:
79:5e:37:c3:3f:d8:2a:e3:a2:ee:f1:bd:3a:f8:f8:
71:15:18:78:38:cc:82:01:40:03:25:98:00:63:6b:
47:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:21:CC:62:10:B5:F5:31:92:89:37:74:AF:CD:8C:69:20:02:61:E5
X509v3 Authority Key Identifier:
keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:50:d8:8f:40:3b:21:bc:21:bc:f3:53:bf:f9:1d:fd:43:2d:
b0:a0:30:dd:3f:f0:2b:c7:53:d4:16:f6:00:93:01:9d:cf:e5:
e1:5a:c8:0c:26:6e:cf:5c:eb:fa:76:55:e0:ca:13:e1:63:05:
b9:b2:1b:38:90:90:0f:85:a3:0a:06:bf:27:1a:a7:1f:27:72:
38:26:ac:4b:a2:13:e7:79:1e:b4:97:c9:a2:42:2b:c9:45:91:
26:ce:90:ac:02:f9:2d:f3:13:6c:8d:94:3b:8d:ba:1b:79:1f:
b9:0e:31:83:79:f0:51:1a:7e:a8:30:b2:a0:9a:a7:4e:1d:6e:
7c:ad:51:f1:d6:18:b8:6f:44:35:5b:a5:aa:b9:92:d4:aa:ea:
5d:ae:e8:7f:ff:e4:34:7d:1f:74:a9:89:e1:36:30:61:5b:32:
39:a2:93:ba:d3:8d:db:92:d2:3a:10:4d:fa:6e:f9:c3:26:14:
ee:27:b9:33:ac:af:c7:98:3d:b0:50:dd:c5:ca:44:dc:82:2d:
dc:01:92:d8:fd:75:59:3a:60:5d:18:e2:3e:f8:81:d1:da:a8:
bf:c2:6c:91:52:1c:24:18:93:f4:86:96:1b:8d:e1:c7:f4:fa:
7d:b5:67:0f:d3:b6:cb:73:fe:3c:66:78:be:ed:be:e5:01:c7:
45:fb:28:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tiHdBXGfYcOxoAa2zTDKUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMmQzNzU1YTM1MDFiOWNiMGQ1ZWJhYTQ5OWU1ZWExNDli
Y2YwOGIwHhcNMjYwNzI5MTEwMDI5WhcNMjYwNzMwMTEwMDI5WjAzMTEwLwYDVQQD
EygzODIxY2M2MjEwYjVmNTMxOTI4OTM3NzRhZmNkOGM2OTIwMDI2MWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wa4ItOpmwE1m0WbFNzXpW83CYdi
gu1JKQTMMwqqkGqI3PN8iEx1zcDSWZqUTve/S5r4fJCp6CUK+C0hB5/uOGSml+Kb
aANjgyD4Js8Yd/G/noT9I4s2AaMXyZ5voB7jdbaTLMWd+FZ8oxRxHOxuuolQcp3A
M6DoH8XBSI5L/9V1KN1QA5E3fM1UgvK2hZkHMczClYIEsWbjbYrQbItybDtDD6ot
c6SY6LEIcoCLt+guwZVr71UK3Q3CkfoBOetj/ThQYPsYM/eX/WzjuU+VYekI+xMf
aZZazmGSw0eG2op5XjfDP9gq46Lu8b06+PhxFRh4OMyCAUADJZgAY2tHGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDghzGIQtfUxkok3dK/NjGkgAmHlMB8GA1UdIwQY
MBaAFBwtN1WjUBucsNXrqkmeXqFJvPCLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEMwM1ZhTlFHNXl3MWV1cVNaNWVvVW04OElzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC82N2M2MDUtMDEwZi00NTkyLWE5MTkt
OWVjZTBiMjU2NThlLzEvSEMwM1ZhTlFHNXl3MWV1cVNaNWVvVW04OElzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC82N2M2MDUtMDEwZi00NTkyLWE5MTktOWVjZTBiMjU2NThl
LzEvSEMwM1ZhTlFHNXl3MWV1cVNaNWVvVW04OElzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1DYj0A7
IbwhvPNTv/kd/UMtsKAw3T/wK8dT1Bb2AJMBnc/l4VrIDCZuz1zr+nZV4MoT4WMF
ubIbOJCQD4WjCga/JxqnHydyOCasS6IT53ketJfJokIryUWRJs6QrAL5LfMTbI2U
O426G3kfuQ4xg3nwURp+qDCyoJqnTh1ufK1R8dYYuG9ENVulqrmS1KrqXa7of//k
NH0fdKmJ4TYwYVsyOaKTutON25LSOhBN+m75wyYU7ie5M6yvx5g9sFDdxcpE3IIt
3AGS2P11WTpgXRjiPviB0dqov8JskVIcJBiT9IaWG43hx/T6fbVnD9O2y3P+PGZ4
vu2+5QHHRfsoPA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 16:33:25 2026 by rpki-client