Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
File: HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json)
Hash identifier: WtiF7nbXJ8MNQCV/XkYy3DPwC900uhQATx475TdCaQQ=
Subject key identifier: 18:B0:7C:DC:04:CD:0D:5F:C2:8E:96:B3:73:1B:2C:45:52:8E:68:21
Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
Certificate issuer: /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Certificate serial: 01A0DCBB436AA972940216B9ED7E315D0943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
Manifest number: 09E3
Signing time: Sat 26 Sep 2026 08:00:54 +0000
Manifest this update: Sat 26 Sep 2026 08:00:54 +0000
Manifest next update: Sun 27 Sep 2026 08:00:54 +0000
Files and hashes: 1: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: 3BF6pfnFbrcCSlbij48TGTZHPCzXvpUna5919FTgfc0=)
2: Kl7ksgdkf5mddCaAPgAWOeKhVvg.roa (hash: rOa18GJtuQqpcGIrwGnhcp3m4z08/3Ol4xsmgiWc0ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:43:6a:a9:72:94:02:16:b9:ed:7e:31:5d:09:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Validity
Not Before: Sep 26 08:00:54 2026 GMT
Not After : Sep 27 08:00:54 2026 GMT
Subject: CN=18b07cdc04cd0d5fc28e96b3731b2c45528e6821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:98:46:71:3c:91:81:00:4d:95:0c:ac:80:79:
19:eb:9f:83:1a:19:2f:9a:33:fd:71:fd:37:ea:8f:
cc:5c:55:da:be:7e:1e:8a:71:0e:7d:13:73:84:c6:
51:01:b9:6e:d2:06:8a:2e:88:88:04:74:53:57:84:
dd:e6:ec:9a:76:d6:eb:3d:0c:8c:d9:91:41:5a:21:
04:4a:c6:6c:e4:65:b5:21:da:a7:fc:63:0c:00:39:
4e:c9:57:d7:e7:c6:be:02:90:ec:e7:e2:fd:63:27:
2f:23:ab:25:20:e8:51:a1:fd:86:2b:9e:d4:12:fd:
9f:de:43:0f:97:f1:cf:bf:ba:ab:c0:76:4a:53:e0:
b6:ca:19:5e:3e:21:d4:a1:85:33:6b:b0:10:a6:e4:
a6:08:d4:70:50:0f:e0:cc:5a:ef:c2:eb:a2:de:f4:
a8:23:4c:71:fd:d5:5f:25:c3:f6:31:00:0c:ba:9f:
d5:20:46:e7:50:1c:27:b2:3e:c8:83:82:3b:93:9c:
eb:12:5c:f8:63:cb:b1:6e:08:26:f1:f8:c6:96:d3:
97:a3:9b:0d:35:77:c8:78:11:b2:5f:5a:d1:4c:44:
6d:44:ea:0a:7b:81:93:3c:b6:1a:7d:b0:a7:25:db:
00:84:a1:25:f6:b4:33:1f:d9:86:55:61:6c:cf:11:
3c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B0:7C:DC:04:CD:0D:5F:C2:8E:96:B3:73:1B:2C:45:52:8E:68:21
X509v3 Authority Key Identifier:
keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:af:31:82:d9:b9:71:89:5e:c0:24:cf:d4:87:96:ea:94:f1:
46:b6:b6:45:09:1c:ff:9c:bb:42:b4:55:95:17:fa:c2:1c:24:
d7:a0:a4:65:c4:a5:e8:bc:01:0e:7a:29:5e:b5:ee:b4:32:22:
e8:ec:1c:38:f6:c3:4c:ef:44:0e:ed:8a:71:8b:f4:74:d0:21:
2d:fd:e7:76:48:96:fa:14:e7:4c:80:b8:a8:c2:c8:22:2c:bd:
c1:46:85:3f:b1:95:64:32:de:b6:05:21:4d:48:bd:07:e2:45:
8d:1f:b0:33:c2:61:ef:22:1a:47:0e:2d:16:7b:d5:ab:ca:ce:
d0:0e:93:c2:8f:05:44:f6:29:e2:22:ce:98:6f:8d:03:35:14:
30:0d:df:2e:0a:26:7a:5f:8b:fa:d0:2d:f2:eb:2e:7d:8b:8d:
53:5c:f8:cc:18:96:e7:04:47:ed:73:dc:61:6e:75:82:cc:08:
18:61:7c:4a:f0:0f:05:5f:5d:39:96:5f:7f:88:3f:39:a3:25:
cb:a6:b7:a1:5e:2c:64:2b:c1:be:8d:7b:ca:ce:02:fc:0d:bd:
f9:6e:f6:b4:4e:88:4d:78:c1:b7:d7:8b:96:cb:60:95:01:41:
9a:89:83:40:b9:00:13:1f:ee:d1:b3:b3:ed:0e:bb:a4:73:04:
66:ce:6d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:27:24 2026 by rpki-client