Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
File: HCiwfBV6XcYTySZNr4nnyGDjPmM.mft (raw, json)
Hash identifier: E8Mbo+ZjufEytBGgIJikIsgPXhQN6Xpx7xyDRKQPSGw=
Subject key identifier: 0C:D7:07:E3:AA:18:6C:7A:0F:DA:7F:F8:68:43:E9:34:18:74:FC:A3
Authority key identifier: 1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
Certificate issuer: /CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Certificate serial: 019D9A3DEF5450225BDABC022F89954F0C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
Manifest number: 18CE
Signing time: Fri 17 Apr 2026 07:00:43 +0000
Manifest this update: Fri 17 Apr 2026 07:00:43 +0000
Manifest next update: Sat 18 Apr 2026 07:00:43 +0000
Files and hashes: 1: HCiwfBV6XcYTySZNr4nnyGDjPmM.crl (hash: gF6+3rX9fSMyKGGBMJCeUd7yo6G4BFkjgjcOLz31fkQ=)
2: iRVjihfwRYJETXspv6JRTsIrfXI.roa (hash: 3nsOjJGMe27V8EM8Am0pLzNkNlpRhB+GO1fG/bewBbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:ef:54:50:22:5b:da:bc:02:2f:89:95:4f:0c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Validity
Not Before: Apr 17 07:00:43 2026 GMT
Not After : Apr 18 07:00:43 2026 GMT
Subject: CN=0cd707e3aa186c7a0fda7ff86843e9341874fca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ef:c4:04:06:01:99:6d:18:1d:87:9f:ac:a6:
48:c6:88:7e:47:d3:31:6c:2f:8c:6d:82:fc:97:5f:
4d:ba:28:a1:f5:d7:86:9d:97:a7:5e:66:30:99:10:
62:5f:bf:3d:51:e6:66:86:0b:71:a6:8c:dd:fc:79:
48:c0:a5:67:50:f6:32:8a:db:43:85:92:25:dc:89:
b9:65:d3:e9:4b:c3:ac:1e:97:7f:6c:a0:c7:ae:ff:
1f:01:47:e9:cd:20:3e:74:64:83:25:59:07:9f:36:
94:7c:87:92:bb:d3:cd:dd:56:3f:ab:40:0c:eb:23:
16:fa:1a:15:2e:35:12:11:ff:92:b5:3a:d8:97:4d:
4d:3c:3c:17:2e:df:c8:b6:3d:ec:49:59:a4:39:06:
b4:eb:35:70:2f:54:38:e0:67:1b:2f:8b:5a:44:33:
5f:78:86:13:93:03:65:8d:c1:3c:84:05:dd:38:49:
1f:a3:cc:1d:79:a3:a3:cd:1b:7d:cc:9e:78:d3:87:
af:2d:e0:3a:a5:df:68:45:65:22:85:97:94:6f:b8:
6b:01:3f:54:9f:4b:80:6c:d8:35:86:59:88:3f:5a:
8e:57:93:dc:ae:8d:52:bf:68:5d:3c:f6:96:15:66:
17:9f:b4:80:1b:cb:5a:f2:0a:9e:45:73:3f:9e:d5:
cd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D7:07:E3:AA:18:6C:7A:0F:DA:7F:F8:68:43:E9:34:18:74:FC:A3
X509v3 Authority Key Identifier:
keyid:1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1a:39:ed:8b:15:39:60:21:2b:ec:18:e7:e9:13:9d:bc:f5:
bf:f1:74:5a:02:f8:36:30:a7:09:c8:1a:f0:91:99:31:b1:50:
ae:01:fb:78:09:fb:3c:fb:a5:85:cd:d0:9a:ef:00:3f:fe:55:
30:78:cd:d5:72:79:1f:e7:34:fb:42:65:53:8a:8e:f6:d9:ea:
fe:df:4a:c0:97:00:16:40:b4:25:ca:b0:3a:e6:2d:34:24:61:
2f:05:5b:77:fd:02:19:39:7c:64:1c:ed:2a:1d:17:cf:d6:f0:
b9:44:5d:f0:9c:53:9b:76:16:a5:56:9d:3d:47:ce:f3:5f:1f:
1a:74:5f:67:e6:f9:67:29:d8:02:e3:19:84:86:c1:a6:54:5c:
8e:90:8f:79:c7:cd:57:42:02:c8:7d:d1:70:10:a6:75:bb:49:
4b:60:82:33:89:8e:9e:8e:f1:25:4d:38:bd:6e:6e:5c:27:7b:
26:3b:6c:da:bf:64:86:8d:d9:38:34:b0:63:50:fc:b1:ee:d0:
24:6a:49:b9:57:5f:90:58:c9:43:00:c9:e4:58:5e:e4:94:24:
9a:0d:bc:d3:77:53:4d:a6:47:77:3b:1e:82:56:91:00:f0:5a:
af:01:c6:e8:bf:d2:30:51:8c:3c:99:7e:be:38:42:73:9c:4b:
33:85:53:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:52:32 2026 by rpki-client