Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
File: HKy3fiC3gUfUf4OUKU8Re1yE714.mft (raw, json)
Hash identifier: eU737Sio15JYYarQlkg+okQgFWjedDpyqZHygYGCB0s=
Subject key identifier: E4:4A:E8:DE:4C:ED:A6:82:4C:46:67:2E:36:F5:7A:00:64:1C:6F:F9
Authority key identifier: 1C:AC:B7:7E:20:B7:81:47:D4:7F:83:94:29:4F:11:7B:5C:84:EF:5E
Certificate issuer: /CN=1cacb77e20b78147d47f8394294f117b5c84ef5e
Certificate serial: 019CAB6B472C995763D76D85892C965D0F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
Manifest number: 12F9
Signing time: Sun 01 Mar 2026 22:01:00 +0000
Manifest this update: Sun 01 Mar 2026 22:01:00 +0000
Manifest next update: Mon 02 Mar 2026 22:01:00 +0000
Files and hashes: 1: HKy3fiC3gUfUf4OUKU8Re1yE714.crl (hash: DUOMwEfmYK6dQDupcMPHWnMpbCJIzpy6AznbMxfXfTc=)
2: dAblp8vp-pMAwa1_Vthxc2gt8k8.roa (hash: wEmjefANEUzkZ5hvuYtJ5mos9QLC+6Qw68fr7kd+5go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:47:2c:99:57:63:d7:6d:85:89:2c:96:5d:0f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cacb77e20b78147d47f8394294f117b5c84ef5e
Validity
Not Before: Mar 1 22:01:00 2026 GMT
Not After : Mar 2 22:01:00 2026 GMT
Subject: CN=e44ae8de4ceda6824c46672e36f57a00641c6ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e4:1d:f9:90:73:65:85:70:15:d8:3b:4d:58:
68:4b:32:15:14:f5:b3:17:59:0d:2c:7e:cd:86:91:
a4:08:91:b7:28:35:52:c5:06:0e:b7:67:ff:8c:89:
34:45:f6:da:17:c3:13:0c:f5:a6:95:a2:01:e4:f0:
4f:69:82:4c:7d:f6:46:84:32:56:02:c3:d9:16:30:
75:3a:17:45:18:fc:14:33:d9:d1:23:fd:bd:89:c6:
31:8d:0d:90:eb:61:51:82:e4:e9:8d:97:52:9a:c9:
60:47:c2:83:34:2e:ed:45:aa:2f:fb:24:ae:44:2a:
7c:b8:cb:98:9a:3d:dd:8b:77:31:1c:2f:02:11:f1:
2a:98:98:16:f5:e2:ba:fd:3e:8e:f5:eb:22:7f:89:
e2:7e:6d:71:cd:ba:1e:9a:f1:66:95:05:12:d3:ff:
17:e2:68:34:e4:7e:a7:cc:9d:56:cd:f2:e9:24:d2:
26:c9:4b:81:e2:16:de:ac:e1:a1:69:ee:ab:38:00:
85:6f:1e:bd:95:24:72:64:0f:d0:dc:0e:13:74:d6:
ed:92:ba:82:ba:ce:13:24:9a:45:6d:60:4a:7a:12:
bc:5d:fd:88:ef:f4:74:d2:8b:0f:11:43:19:47:2c:
4f:e0:08:f9:a4:e5:0a:2f:2b:46:eb:ca:8a:c2:e6:
43:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4A:E8:DE:4C:ED:A6:82:4C:46:67:2E:36:F5:7A:00:64:1C:6F:F9
X509v3 Authority Key Identifier:
keyid:1C:AC:B7:7E:20:B7:81:47:D4:7F:83:94:29:4F:11:7B:5C:84:EF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:32:43:5b:0a:1b:37:59:13:1f:54:b1:9b:b7:f0:aa:e9:01:
04:fd:cb:9d:b8:2a:1d:0c:78:7c:a0:88:d4:9d:2d:eb:d0:3b:
fb:8e:15:96:86:c9:09:f0:fe:f2:74:53:9b:ca:79:15:92:82:
f2:30:27:91:a6:35:dd:c2:98:ab:c5:f7:4b:8c:4a:b7:35:c7:
84:5d:f1:a6:bd:2a:d3:81:1a:23:63:a8:ff:36:c5:e3:46:6f:
79:0a:6d:74:dd:de:f3:9e:0f:61:d3:25:3f:e7:1b:88:8f:f8:
ac:1d:df:87:49:bf:0e:eb:66:61:88:ca:9b:38:45:35:f0:14:
0e:ea:03:2a:7b:05:ac:7f:9f:a6:f2:cf:09:ee:fe:11:c3:88:
76:c6:7b:eb:26:22:53:69:28:e7:1a:ef:8c:25:9b:11:d1:91:
d4:ee:1b:43:84:3b:94:39:24:bc:2a:90:fd:69:6d:bf:88:cf:
81:75:15:67:8a:db:24:ad:1b:cd:dd:1f:7a:ef:4e:44:fb:be:
46:63:e1:2d:7b:ee:86:c0:43:24:6a:73:48:64:1e:16:df:5e:
77:33:8b:cf:b4:14:c5:02:e6:12:34:6f:89:15:c2:ea:1b:ce:
fb:74:41:ba:60:bf:83:e5:e3:aa:25:f0:16:b8:cf:57:ed:8a:
34:d7:01:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:13:01 2026 by rpki-client