Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
File: HKy3fiC3gUfUf4OUKU8Re1yE714.mft (raw, json)
Hash identifier: 55Pcbvc0Z5KOxeJloOdnUP9WmtDGWD2HLMPS28b2tso=
Subject key identifier: 9E:7E:7F:4F:47:AE:5F:73:E2:4B:75:A8:F4:F5:4B:D8:EF:20:F6:AF
Authority key identifier: 1C:AC:B7:7E:20:B7:81:47:D4:7F:83:94:29:4F:11:7B:5C:84:EF:5E
Certificate issuer: /CN=1cacb77e20b78147d47f8394294f117b5c84ef5e
Certificate serial: 019D98F4BA5D7F5D1B20152DA53A309EE2D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
Manifest number: 1374
Signing time: Fri 17 Apr 2026 01:01:08 +0000
Manifest this update: Fri 17 Apr 2026 01:01:08 +0000
Manifest next update: Sat 18 Apr 2026 01:01:08 +0000
Files and hashes: 1: HKy3fiC3gUfUf4OUKU8Re1yE714.crl (hash: Y/LLN8Xy2eIxaHNJglujws2Fgg75gYEPgsMBMqK6rck=)
2: dAblp8vp-pMAwa1_Vthxc2gt8k8.roa (hash: wEmjefANEUzkZ5hvuYtJ5mos9QLC+6Qw68fr7kd+5go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:ba:5d:7f:5d:1b:20:15:2d:a5:3a:30:9e:e2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cacb77e20b78147d47f8394294f117b5c84ef5e
Validity
Not Before: Apr 17 01:01:08 2026 GMT
Not After : Apr 18 01:01:08 2026 GMT
Subject: CN=9e7e7f4f47ae5f73e24b75a8f4f54bd8ef20f6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b6:36:e8:44:29:8d:1e:e0:b0:d2:ba:22:a0:
2c:23:23:f6:86:f0:8a:0a:41:78:54:3a:ee:27:11:
20:0e:df:a5:3d:52:e0:e5:39:54:8b:11:65:ab:5b:
84:75:d9:b1:27:36:4b:91:77:1d:96:42:48:fa:1f:
63:24:5d:d1:71:2e:f3:0e:47:02:8b:a5:46:b0:c8:
72:0f:02:87:06:79:64:df:61:ad:bd:8f:6a:4a:9b:
ba:80:72:ec:1a:28:55:85:3d:97:d9:cc:84:aa:d3:
cb:f8:80:28:52:f4:2d:a9:ee:6a:bb:03:d9:a8:d1:
f2:27:48:54:3f:78:f1:99:72:d2:37:c0:ca:fc:55:
6f:d0:ef:6e:31:6d:80:6a:b9:21:5b:5a:a0:1e:e6:
2b:83:b2:2c:75:79:a8:17:13:27:bb:95:fc:4a:59:
1d:d3:ef:96:97:c2:54:03:47:8f:93:bd:8c:bf:e4:
48:bf:49:96:4a:79:e6:25:b0:73:9f:c1:7d:68:bc:
e9:04:2d:80:3c:b5:da:48:ae:30:72:0c:91:38:e3:
20:5c:05:9c:b3:fb:93:e5:f8:b8:30:02:bf:03:41:
87:85:e3:15:89:54:e3:22:87:8d:2c:f4:e9:4f:a1:
4c:c6:13:f1:15:53:c1:56:f3:72:e6:23:23:14:97:
04:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7E:7F:4F:47:AE:5F:73:E2:4B:75:A8:F4:F5:4B:D8:EF:20:F6:AF
X509v3 Authority Key Identifier:
keyid:1C:AC:B7:7E:20:B7:81:47:D4:7F:83:94:29:4F:11:7B:5C:84:EF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:6a:a4:d6:6d:35:40:13:42:60:e8:56:8e:db:23:46:a7:f6:
94:34:bb:60:24:6e:83:66:82:24:b1:7f:cd:1f:f6:6d:ba:81:
c3:97:80:dd:d9:b1:84:c2:3f:ac:23:f0:3f:0b:e0:1a:44:b6:
ba:8e:b5:3b:d0:67:0c:27:f0:18:c6:5c:ee:1f:bf:ff:49:cd:
04:da:97:d8:de:4b:de:ee:77:61:36:44:9e:e6:2d:44:cf:bb:
23:f8:62:59:c2:a8:29:08:af:da:f5:3b:53:af:a3:91:63:b4:
68:3c:e5:74:c0:94:78:44:ce:e3:cb:bf:df:7c:22:98:97:77:
ab:e2:23:ad:24:e0:85:ce:d8:17:95:05:9f:c6:1f:64:f2:50:
03:aa:10:67:8d:8a:4e:80:7a:92:65:0b:df:8c:77:bd:ca:c4:
28:40:e5:e4:fd:10:3d:b2:d2:1c:0e:53:c1:d1:90:b2:ad:a8:
11:29:ee:9a:35:9a:a3:03:93:d4:5d:30:ae:4d:1c:e8:f5:16:
35:a2:85:c1:6e:67:08:af:d2:70:56:63:07:4f:42:39:34:16:
35:87:f2:62:36:72:87:95:6c:8d:3b:2e:8c:1b:7f:09:95:a6:
60:31:1f:74:3f:03:1d:fd:d6:87:ac:8a:10:ad:f0:4e:34:7b:
ba:d7:cd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:45 2026 by rpki-client