Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
File: HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json)
Hash identifier: WS8kh1PywwByfNhMsjhMNh2OkWDw58XplUemZdaiTys=
Subject key identifier: C2:B1:5B:D7:AA:C4:14:E0:B1:A8:26:71:2A:40:9D:EF:AF:E4:1C:40
Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
Certificate issuer: /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Certificate serial: 019CAAFD400F07B15BDBCF672351CF7C50F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
Manifest number: 07B7
Signing time: Sun 01 Mar 2026 20:00:49 +0000
Manifest this update: Sun 01 Mar 2026 20:00:49 +0000
Manifest next update: Mon 02 Mar 2026 20:00:49 +0000
Files and hashes: 1: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: sYMcExQPPbc9wBFBsi7+mshTwoAtKr9QBN4IYRa6rLI=)
2: Kl7ksgdkf5mddCaAPgAWOeKhVvg.roa (hash: rOa18GJtuQqpcGIrwGnhcp3m4z08/3Ol4xsmgiWc0ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:40:0f:07:b1:5b:db:cf:67:23:51:cf:7c:50:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Validity
Not Before: Mar 1 20:00:49 2026 GMT
Not After : Mar 2 20:00:49 2026 GMT
Subject: CN=c2b15bd7aac414e0b1a826712a409defafe41c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5c:1f:37:43:eb:e6:da:f1:6e:02:1e:70:7b:
d7:9d:cc:f7:51:f4:a7:c5:4c:71:91:4b:12:8e:62:
d0:3e:60:1c:19:18:c1:32:cf:05:85:ec:62:19:9f:
72:c1:61:dc:92:5e:5a:1f:fb:84:43:d7:bd:53:91:
42:66:30:e1:d6:85:8c:f2:82:eb:ed:98:a3:ef:2f:
e7:18:f4:4d:c8:1c:cf:c5:d0:15:7e:ae:35:47:9c:
ab:dd:88:de:3b:63:16:14:60:25:c4:b2:e9:d7:b1:
d8:5f:b0:b5:4d:70:4c:a8:11:20:0a:c3:7d:4e:a1:
ab:c4:40:86:36:c8:db:89:18:0e:4b:cc:7a:a2:64:
86:c5:09:fa:6b:3d:7b:df:46:9f:db:e6:bc:0d:e5:
94:c7:0d:77:d4:ef:e7:fa:61:ff:47:c4:c7:4c:30:
67:55:6e:bf:1c:bf:fe:5f:a5:58:09:8d:69:71:f3:
d5:b0:62:72:b8:42:39:92:8d:0f:f9:28:89:63:ea:
49:20:e5:61:39:8a:6f:5a:4b:8a:58:9f:77:12:3d:
63:d8:fd:b1:3d:8f:8d:ba:c3:ec:c0:5c:8a:e6:b6:
d9:84:af:b3:2f:79:a5:89:bf:ef:3f:73:9d:20:fd:
a4:a2:7e:74:a8:ab:77:dc:c0:81:93:93:cd:7e:e5:
84:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B1:5B:D7:AA:C4:14:E0:B1:A8:26:71:2A:40:9D:EF:AF:E4:1C:40
X509v3 Authority Key Identifier:
keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:79:11:d2:2d:85:54:6f:3f:a9:05:e0:38:42:0d:f0:6a:ee:
97:ce:b2:8f:97:4b:15:36:bb:8e:a2:43:7e:11:61:d4:e7:2e:
1f:dd:0d:23:f2:4d:f4:0d:e4:50:56:8f:07:2d:61:0e:00:17:
bd:a2:0a:05:51:1d:33:7a:84:de:db:e7:ab:2c:81:33:3e:cd:
d9:3f:a2:65:df:17:72:8a:4a:70:c7:c8:ef:a1:c4:4e:4b:cd:
31:0b:10:82:96:cd:b7:e2:d4:76:ad:62:e4:33:2d:18:90:e6:
4f:9d:99:d8:2b:6b:ee:50:dc:ae:c6:1d:25:6c:33:8d:ec:09:
d1:5b:e7:dc:58:84:4a:fd:d1:de:8f:b3:2b:76:5d:63:c1:e5:
ef:c2:44:62:04:f5:e2:41:5a:f2:ed:26:57:d1:22:30:6e:35:
8f:f5:06:14:3c:5f:35:5d:1d:e6:b8:ea:64:fd:ba:39:11:7c:
96:a2:17:fb:c3:25:a6:6e:d4:2c:c1:b2:fd:07:7c:6a:9d:59:
e6:29:dd:e2:a6:73:78:1b:66:35:f0:1b:48:79:ff:0b:b9:f4:
1d:84:42:0e:2d:04:3d:89:d9:38:39:52:24:69:37:d1:8f:ef:
eb:ec:7f:f1:32:6b:b3:6d:7e:17:5d:e3:6f:2e:bb:60:f8:97:
3e:54:c6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:07:47 2026 by rpki-client