Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
File: HcHvY3SZioToDl4w2gmmn0_-qJI.mft (raw, json)
Hash identifier: S7WfKcjFB+W2g8H0uVkE/E1+BdjUJitTlTMAoZviWa8=
Subject key identifier: 5B:D4:8F:10:4E:90:4B:68:E5:D2:B8:D7:02:DA:2F:E8:E9:7F:AB:3C
Authority key identifier: 1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92
Certificate issuer: /CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892
Certificate serial: 019D9A3E4151A5E25C4607D4EECF65705F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
Manifest number: 017A
Signing time: Fri 17 Apr 2026 07:01:04 +0000
Manifest this update: Fri 17 Apr 2026 07:01:04 +0000
Manifest next update: Sat 18 Apr 2026 07:01:04 +0000
Files and hashes: 1: HcHvY3SZioToDl4w2gmmn0_-qJI.crl (hash: 4iCAd7YZr53CE3eZYxGkImgdsQOprjhQem0jvDpwYyA=)
2: eydd9b9yJG4u8PDoXh8HYchwXcQ.asa (hash: XLJ8T9Pn5PjpqOyDdfyyg17qfr7NWdf6Z89qNT5NgvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:41:51:a5:e2:5c:46:07:d4:ee:cf:65:70:5f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892
Validity
Not Before: Apr 17 07:01:04 2026 GMT
Not After : Apr 18 07:01:04 2026 GMT
Subject: CN=5bd48f104e904b68e5d2b8d702da2fe8e97fab3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:bb:93:2c:ea:93:25:af:ae:c3:f9:09:ae:
63:54:8b:73:b9:79:d9:b1:e4:4f:93:23:e7:85:8d:
a4:33:06:cf:41:10:79:51:83:68:fc:d4:6f:54:7c:
51:54:e4:b4:65:31:ce:e7:c9:22:5c:2c:ea:43:c9:
5a:77:61:66:62:43:1f:ac:1b:95:e3:be:f5:fa:88:
fb:8f:eb:97:77:eb:db:81:68:78:35:76:92:15:cf:
75:0c:85:2f:06:1d:30:aa:b6:55:b9:1a:92:5e:46:
83:82:1f:de:f8:6c:b1:c7:3c:dd:01:a5:1a:a2:45:
b2:eb:4d:d3:71:e4:6f:46:63:5d:8f:bf:37:f5:96:
cc:4a:c1:7f:86:d2:c6:be:2d:63:db:44:f6:8a:76:
b2:bf:7e:bc:58:fa:a0:27:3c:39:8f:34:bf:aa:68:
f1:35:14:74:24:20:23:44:77:26:bc:63:54:3a:f1:
29:57:1b:ae:44:28:25:49:06:ef:7a:c2:a0:21:0e:
e9:72:af:23:a7:fc:c3:a1:eb:e8:cf:bd:fc:60:99:
88:77:3a:78:77:2e:c5:da:1b:e7:44:39:4b:c4:d0:
8b:da:2e:e0:bf:6d:76:fc:a1:37:2c:e2:d2:81:af:
91:68:52:e3:91:15:64:37:4c:02:3c:32:ec:3b:4a:
dc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D4:8F:10:4E:90:4B:68:E5:D2:B8:D7:02:DA:2F:E8:E9:7F:AB:3C
X509v3 Authority Key Identifier:
keyid:1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:25:95:f7:63:0f:be:78:8a:c5:76:ec:28:fb:db:b4:b3:4f:
32:76:58:47:63:d1:8f:9a:17:e2:1d:13:86:33:bb:77:e7:d5:
2a:0b:33:50:c6:5f:fc:c9:f8:4f:7a:95:b0:3f:c1:24:9b:9e:
17:75:13:d2:4f:5d:68:94:fa:c6:68:ef:a8:e0:fc:9c:70:68:
00:90:d8:98:3e:09:3a:43:dc:19:04:f9:21:67:6d:f0:06:90:
7a:1b:11:ea:d8:ce:49:5c:9d:11:bb:45:50:c9:98:49:25:2a:
59:8d:87:6d:2a:be:4e:ba:65:32:36:71:91:9d:0a:6d:0a:43:
d1:be:66:d9:d4:15:f7:9d:03:78:4b:37:0d:84:0c:e0:51:fe:
62:7c:7e:29:9b:8a:ff:44:c2:73:8e:5f:b7:5c:be:34:91:a3:
fc:c3:7b:b0:82:d2:bf:77:bd:48:8a:6d:b1:bb:24:4c:c9:97:
f4:e4:b0:f1:e1:e9:3b:25:25:f1:0c:87:d6:c7:d4:d1:4b:2d:
1d:3f:4a:19:f6:02:93:23:14:17:97:24:15:28:ee:83:ef:94:
c9:f1:c1:c0:fb:90:b1:2e:6b:af:dc:7a:da:79:d2:51:64:a6:
80:c5:05:d7:26:74:c5:5c:fe:a6:0c:e8:6e:70:67:b5:69:f4:
08:23:d3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:49:50 2026 by rpki-client