Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.mft
File: HVceK9tBEuxdazpkuxe_CygP5uE.mft (raw, json)
Hash identifier: wmjUdheuu8hx6TxvYfNUH9gBfWpZZ09c+lpsgLbcpWk=
Subject key identifier: 03:7C:A6:20:62:02:9B:F9:93:0A:35:D9:C3:4F:77:BB:09:78:E3:2C
Authority key identifier: 1D:57:1E:2B:DB:41:12:EC:5D:6B:3A:64:BB:17:BF:0B:28:0F:E6:E1
Certificate issuer: /CN=1d571e2bdb4112ec5d6b3a64bb17bf0b280fe6e1
Certificate serial: 019D9AE2E4288AE26379110FCAB6CB555EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVceK9tBEuxdazpkuxe_CygP5uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.mft
Manifest number: 1048
Signing time: Fri 17 Apr 2026 10:00:53 +0000
Manifest this update: Fri 17 Apr 2026 10:00:53 +0000
Manifest next update: Sat 18 Apr 2026 10:00:53 +0000
Files and hashes: 1: HVceK9tBEuxdazpkuxe_CygP5uE.crl (hash: Gzc8yLQ5BYVx3mSjYs5AWJHyE1DGEWvJBg7cwDt4G18=)
2: WgW7_1NWoWpm4jNdRh3wAV6b-iQ.roa (hash: VRgHLs3EnvMZ31H9FL0qZ2OCVPVRz1uxVc4Bjt1PMc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVceK9tBEuxdazpkuxe_CygP5uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:e4:28:8a:e2:63:79:11:0f:ca:b6:cb:55:5e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d571e2bdb4112ec5d6b3a64bb17bf0b280fe6e1
Validity
Not Before: Apr 17 10:00:53 2026 GMT
Not After : Apr 18 10:00:53 2026 GMT
Subject: CN=037ca62062029bf9930a35d9c34f77bb0978e32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b6:b4:4b:1b:7e:1e:38:c1:99:02:30:07:38:
d4:66:4e:df:5b:ce:2c:93:e0:c2:fc:d4:94:cf:e9:
a4:bb:11:38:2e:55:a3:a6:25:dc:95:1a:ed:7d:d1:
a4:a2:94:fe:10:15:b4:02:0f:26:19:df:7d:5f:c0:
12:33:37:e5:59:68:a3:21:d8:16:6f:8e:29:2f:33:
57:90:a1:ec:de:df:c6:2b:4b:18:b4:09:0f:e1:a7:
a9:d5:3e:8f:fa:a0:10:24:60:52:c9:29:4e:a9:4b:
a9:d5:7e:48:ce:2a:3a:3f:24:22:0d:f3:20:1c:bc:
5e:db:2b:52:04:42:04:25:3c:00:ba:90:63:69:4b:
80:60:c9:f4:c8:5c:8e:6f:41:af:00:55:1f:95:f3:
4e:5a:9e:85:a6:5a:a2:2a:02:72:dd:d5:a2:b9:3e:
0c:bc:63:dc:38:0e:af:98:14:ba:45:f4:3d:6e:fc:
6a:88:fe:70:3a:05:88:26:8f:d4:bf:55:18:3e:5c:
7c:4f:3a:b1:14:0e:bd:01:b0:23:ec:63:a2:34:b0:
e3:62:33:c9:6d:d5:70:36:99:de:ad:a7:a1:12:6a:
02:d0:bc:db:c5:6d:dc:37:af:b1:88:88:db:8b:88:
a9:cb:03:92:83:d6:e1:9e:d0:dc:7d:f4:7e:0b:6d:
70:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7C:A6:20:62:02:9B:F9:93:0A:35:D9:C3:4F:77:BB:09:78:E3:2C
X509v3 Authority Key Identifier:
keyid:1D:57:1E:2B:DB:41:12:EC:5D:6B:3A:64:BB:17:BF:0B:28:0F:E6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVceK9tBEuxdazpkuxe_CygP5uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:12:f9:a3:1e:aa:9a:d2:b2:82:eb:0e:7a:94:33:b7:14:95:
95:1a:6a:04:46:54:b6:b7:95:45:b6:1e:3c:7d:de:38:79:d9:
a6:f1:18:e6:be:82:36:44:5e:9d:c2:ac:da:5d:04:92:6a:b0:
2e:32:5d:5c:87:d7:97:65:87:df:75:4f:dd:c3:eb:35:39:c8:
c9:ef:71:72:82:3f:f6:ed:27:44:78:df:b4:1a:05:1f:c1:f8:
c6:cb:2b:99:51:32:70:88:49:42:08:19:16:69:96:ea:ea:61:
34:39:3c:37:fc:d4:e9:4c:b8:2b:88:9d:dc:70:8b:20:96:36:
51:13:b8:69:76:48:55:da:34:44:e7:91:3b:86:c6:d2:c6:f2:
7d:29:b5:24:20:dd:04:d4:6f:b6:7c:b0:d1:e2:50:8e:60:82:
c0:a7:3a:27:aa:2c:28:ff:96:55:ac:22:2f:33:86:69:ed:54:
82:76:77:ac:60:0e:70:ad:70:a4:b5:08:e0:c4:49:e6:9c:96:
0e:5d:75:d4:1d:ab:2a:10:58:4c:02:a2:dd:5a:bf:ec:1f:d7:
ae:92:54:65:3a:64:dd:ad:fa:a2:17:4d:02:29:63:e7:1a:37:
31:6d:1a:4f:ab:e5:b1:36:87:57:f9:34:c8:0d:e6:6a:f4:46:
aa:e3:d1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:30:18 2026 by rpki-client