Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
File: HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft (raw, json)
Hash identifier: aW7QgOyJHHDHWZ1Uyf+6r+KH/N6zmx5Q0YS2GT5vvqc=
Subject key identifier: 47:F0:85:47:23:10:F0:CD:3C:30:DA:E2:82:6D:6C:4D:A4:E1:4D:FA
Authority key identifier: 1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
Certificate issuer: /CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Certificate serial: 019CAC1048A4857F9847C3B6B8D710D3C5AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
Manifest number: 0EE7
Signing time: Mon 02 Mar 2026 01:01:14 +0000
Manifest this update: Mon 02 Mar 2026 01:01:14 +0000
Manifest next update: Tue 03 Mar 2026 01:01:14 +0000
Files and hashes: 1: HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl (hash: 3iEQMyMcFYHosiO4xEbOsRAziDKoVtea4IOzel5Dc/I=)
2: JtB-_mP0CPyoUgsFyVWDrEIlud8.roa (hash: egfxT7xeT/hTTg3h54ZByaWRlZbXWQEqw5+/1nELFjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:48:a4:85:7f:98:47:c3:b6:b8:d7:10:d3:c5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Validity
Not Before: Mar 2 01:01:14 2026 GMT
Not After : Mar 3 01:01:14 2026 GMT
Subject: CN=47f085472310f0cd3c30dae2826d6c4da4e14dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:00:1d:ce:ef:d6:fc:d2:6b:a3:93:fb:01:99:
bd:19:d1:ab:1a:45:ba:c3:ae:02:a4:79:ea:2c:b4:
56:21:51:26:29:b5:0a:0d:41:8d:4e:78:ad:95:10:
68:35:04:8c:aa:c3:d9:8e:11:6e:04:a9:7b:51:08:
28:73:8f:bb:bb:9f:07:e2:69:e3:95:8e:85:96:4e:
96:cb:cd:cc:e9:0d:ae:1e:73:81:3b:c0:c3:89:1f:
d5:27:23:30:49:71:4b:77:a3:aa:8b:78:e8:16:27:
2a:76:c0:b7:81:c8:2e:14:81:24:1f:87:cf:e3:45:
74:b6:36:1b:c2:f4:c1:55:53:67:79:3c:0c:21:7e:
45:ed:02:85:95:d2:cf:9f:d6:f5:94:bd:69:0e:d9:
1b:94:0c:8b:33:bc:4b:66:d0:a4:75:b6:c3:12:60:
aa:f2:29:4d:22:71:3b:f7:57:80:68:c5:16:da:b9:
2b:8d:52:81:56:f5:6f:36:28:78:82:1e:70:70:c3:
08:70:6b:b7:ea:8e:58:f9:23:4b:dd:3d:1b:74:e0:
d7:84:71:8e:43:ca:94:58:96:bd:8a:e3:bb:e2:0c:
66:8c:23:6b:94:58:b1:88:f7:65:bc:26:2d:e3:a1:
11:e9:1d:b7:46:e5:24:79:81:9d:bd:58:61:41:bc:
e3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F0:85:47:23:10:F0:CD:3C:30:DA:E2:82:6D:6C:4D:A4:E1:4D:FA
X509v3 Authority Key Identifier:
keyid:1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:66:25:0e:ce:9f:b3:40:2a:9f:5a:32:ba:10:6a:e4:df:21:
a9:d4:a0:61:e9:cc:79:70:b9:4a:63:2d:2b:83:34:48:05:82:
36:db:52:91:62:c8:d2:d4:27:db:4b:6a:b4:9a:3c:84:e9:aa:
0d:94:1f:36:e1:36:c2:d8:c9:0a:17:62:b7:61:a2:6b:ff:a0:
b1:55:8e:64:b6:09:74:2f:a4:8a:44:4c:7e:4b:9a:71:ad:ef:
b3:32:ad:f7:e7:1a:3a:e7:1a:89:18:72:fa:9f:0e:75:47:f4:
36:15:8a:c9:a8:77:af:82:76:7e:a3:b9:c2:68:59:95:20:ad:
a2:0c:d3:cb:8a:ce:40:17:56:4c:01:4d:e4:c1:e2:57:8a:e0:
7a:fc:04:9d:a2:c9:51:80:05:91:bc:4f:9c:32:11:15:ae:cc:
8b:5e:b7:5d:97:2e:e2:d3:ab:ae:95:23:ab:62:16:30:51:7b:
78:b6:5b:76:e6:b5:e4:0f:97:7a:1c:c7:c6:4f:67:04:ae:d4:
97:ad:79:ae:09:90:8f:8d:b7:3c:62:af:f3:4b:9e:56:31:a8:
f5:a0:e3:75:93:08:05:3b:1f:fc:d1:a8:59:b2:38:95:39:bf:
41:db:2a:fb:98:6c:04:06:5a:61:e6:48:48:e4:48:f2:d2:f5:
49:df:44:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:41 2026 by rpki-client