Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
File: HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json)
Hash identifier: gi560I/tgG8tlACqJMmjSz5fGeAvNeZDNJdbTf01p7E=
Subject key identifier: DB:EB:FB:86:75:71:05:0D:9D:D3:E5:54:D1:E9:F4:9A:8E:13:EC:32
Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
Certificate issuer: /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Certificate serial: 019D98866C6243526BBB2ACD9E18FBC5CE5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
Manifest number: 0832
Signing time: Thu 16 Apr 2026 23:00:39 +0000
Manifest this update: Thu 16 Apr 2026 23:00:39 +0000
Manifest next update: Fri 17 Apr 2026 23:00:39 +0000
Files and hashes: 1: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: qagAM73mJRQKyklnvFSQWvcOM+1HavoENC3QSAfBJI8=)
2: Kl7ksgdkf5mddCaAPgAWOeKhVvg.roa (hash: rOa18GJtuQqpcGIrwGnhcp3m4z08/3Ol4xsmgiWc0ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:6c:62:43:52:6b:bb:2a:cd:9e:18:fb:c5:ce:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Validity
Not Before: Apr 16 23:00:39 2026 GMT
Not After : Apr 17 23:00:39 2026 GMT
Subject: CN=dbebfb867571050d9dd3e554d1e9f49a8e13ec32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b6:00:71:40:d5:d0:2a:ea:2f:49:4a:b0:67:
98:c8:f9:f7:18:04:68:37:4f:12:e4:b2:84:46:30:
49:3f:62:a6:13:8e:6f:ca:15:b8:31:da:af:9a:5e:
7e:f1:9c:5e:58:c7:93:9a:f7:12:7d:2b:3f:54:dc:
61:d0:ee:60:31:85:e5:db:46:11:27:5f:f4:83:2a:
9f:af:cc:70:ad:10:a4:07:ba:4a:5b:5f:8c:55:b0:
91:b7:e1:0e:7d:a1:c3:b0:c7:23:0e:ea:76:f2:7c:
38:08:52:8c:df:5a:01:95:ab:25:f1:35:fe:58:c9:
82:12:41:7f:ca:67:d1:1f:7e:4b:6f:a8:17:6e:5d:
e5:fc:c1:22:42:60:62:cb:02:8c:01:95:9b:2f:35:
87:07:2d:f2:fc:df:74:05:16:8c:7b:a3:bf:2e:1a:
e5:2a:25:39:5c:cd:d8:81:12:b2:26:8b:cb:f5:08:
9c:d4:35:2a:b6:e6:21:5d:b7:8e:f8:fa:5c:03:25:
08:08:25:84:c1:f0:a9:4b:74:89:9a:bf:3e:84:1c:
85:88:54:96:a9:11:97:9e:a9:22:63:ae:0e:35:a7:
b8:19:06:a2:8b:88:3a:11:f0:40:2d:d6:44:2f:91:
1c:94:02:f1:ed:ad:5e:52:33:ef:f7:cf:2f:f6:3a:
0d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EB:FB:86:75:71:05:0D:9D:D3:E5:54:D1:E9:F4:9A:8E:13:EC:32
X509v3 Authority Key Identifier:
keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1e:25:cc:b3:f1:af:d7:6a:5c:82:99:20:a5:2a:cf:a5:4d:
81:4e:96:da:c8:ca:96:c4:41:09:28:8a:57:b7:b2:e6:a2:54:
e4:c2:43:31:c8:36:ee:5b:6d:7b:b6:4b:68:a9:dd:26:82:2c:
26:ba:94:19:02:eb:c0:80:a9:da:ca:38:60:0d:ff:0a:85:60:
50:7c:5c:82:7a:de:7d:81:fd:71:4e:43:d1:4f:86:5b:96:02:
92:1f:11:40:0c:4f:41:f1:91:5a:a3:e2:e1:e5:b0:f7:08:28:
3d:ff:06:b2:c6:20:b7:0b:d8:fc:53:d3:df:99:49:72:ed:7e:
86:0e:1a:28:6a:82:aa:fa:46:32:57:ad:62:af:6c:ff:83:53:
9c:db:95:c1:33:69:db:9c:1f:87:7e:ef:2b:63:86:e0:34:ef:
c0:bb:16:ac:8b:24:cf:5b:96:7a:e1:fd:7f:e1:4a:36:22:db:
19:24:3f:56:a0:03:3f:0e:65:e3:b4:5c:7a:c8:ef:a4:79:a6:
f1:e6:c9:5b:b0:5e:cf:a8:8f:96:c0:75:77:dd:35:c8:4d:c0:
5f:5c:7e:30:20:24:71:cb:97:e6:70:24:9d:d2:3c:c8:e3:13:
69:a0:d8:f0:0a:d4:26:ad:c3:cb:01:6f:5e:b1:e4:7b:3d:28:
b4:f4:f7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:40:48 2026 by rpki-client