Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
File: hc-RCpREnqI6rGxAmgWEm-2l4ko.mft (raw, json)
Hash identifier: +SQNQhF4i0C1uKdizBecx/w5nkhBVmF3bnvGJAXAW5c=
Subject key identifier: 94:ED:D7:CE:5A:67:EC:A8:B0:A2:FD:DB:55:F3:56:59:76:C1:62:54
Authority key identifier: 85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A
Certificate issuer: /CN=85cf910a94449ea23aac6c409a05849beda5e24a
Certificate serial: 019CAD594F6AF6C1289EAF3DB3FCBCA308C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 07:00:37 +0000
Manifest this update: Mon 02 Mar 2026 07:00:37 +0000
Manifest next update: Tue 03 Mar 2026 07:00:37 +0000
Files and hashes: 1: hc-RCpREnqI6rGxAmgWEm-2l4ko.crl (hash: sQ1t5s4r8XOCDQNFUPn+FRcEHZSXVNyBY9z0RTIKMY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:4f:6a:f6:c1:28:9e:af:3d:b3:fc:bc:a3:08:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85cf910a94449ea23aac6c409a05849beda5e24a
Validity
Not Before: Mar 2 07:00:37 2026 GMT
Not After : Mar 3 07:00:37 2026 GMT
Subject: CN=94edd7ce5a67eca8b0a2fddb55f3565976c16254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:34:c2:7f:38:cc:9b:10:a8:57:89:2c:f0:
7d:a0:b9:05:f4:a5:4c:0e:18:5f:d4:39:5f:47:01:
57:c5:c9:6d:51:44:d6:8a:6a:82:78:64:ee:78:3c:
ec:c1:dd:9a:b7:ff:6d:85:a2:5d:50:bc:af:07:53:
28:66:dd:0a:26:f7:cd:ed:ba:41:c8:cf:a7:45:c4:
6d:68:4a:ef:d8:5b:50:fa:09:f3:a6:31:79:a9:64:
90:45:fe:92:89:4e:a4:55:2f:f4:85:03:27:ae:09:
e1:a2:89:60:54:42:da:7f:c9:59:9c:6d:e3:6f:e7:
70:7a:05:16:02:4e:73:e1:fa:bd:b2:93:3f:5c:7b:
7a:49:68:2c:79:3a:62:f2:74:ea:0c:47:eb:bc:53:
c2:34:69:38:fb:b2:77:02:33:1b:eb:57:2a:80:b1:
ed:14:3d:2f:2c:2d:d0:5c:1d:66:bb:a3:dd:19:94:
af:f8:3a:32:54:0c:b4:c1:cf:a0:03:20:50:d9:67:
66:cf:e2:77:c6:75:a9:0d:d8:73:09:8f:e9:c8:73:
65:49:f1:32:b8:48:f5:65:4f:83:bd:a0:cc:50:81:
1c:91:31:ca:4f:e8:40:b9:74:36:fc:18:63:1a:67:
4a:e2:14:8e:4d:79:fb:50:f5:86:95:7b:03:b4:fd:
d6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:ED:D7:CE:5A:67:EC:A8:B0:A2:FD:DB:55:F3:56:59:76:C1:62:54
X509v3 Authority Key Identifier:
keyid:85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:87:a5:51:bd:46:75:e2:15:5a:07:1b:e7:4d:47:5f:a2:ab:
be:98:73:46:73:0b:71:d8:ec:92:3a:be:d6:14:0e:4c:65:54:
4f:e9:a3:de:ab:5b:95:15:05:b1:6b:85:cd:46:a8:a7:fa:d8:
51:28:8c:d8:24:ca:74:e2:8f:2b:d4:e5:f5:35:da:f9:75:c3:
53:3e:cd:6e:7b:9e:c3:1b:8f:3d:1f:ca:84:f9:09:9c:76:42:
88:22:3f:e4:c5:cf:50:d0:6b:ca:c5:6e:bc:7e:61:fb:0b:7b:
39:b6:e5:ca:44:2b:98:91:a8:aa:fc:71:04:44:d2:1b:5a:05:
6c:24:46:81:ed:3a:fd:1d:9e:ce:bd:f6:a4:42:1d:b3:a6:86:
54:41:4a:a0:86:bf:2e:33:59:4a:d4:a6:8d:60:19:12:dc:23:
b0:a6:84:88:cf:d4:46:08:e9:d2:70:ac:3e:36:98:53:cd:61:
11:ed:fa:09:8c:51:23:f1:37:c1:94:55:fa:b0:94:af:94:80:
7a:c6:01:bd:5f:9f:a2:65:30:13:96:d4:e7:4d:37:d6:dd:14:
5d:3f:ce:65:9d:55:2d:e8:05:c3:28:e1:91:f2:94:3a:30:90:
c1:70:ff:db:b1:e8:7a:db:15:f9:32:86:b8:fb:b8:e5:2e:2b:
67:80:f5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:00:25 2026 by rpki-client