Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
File: HCM-7mJMGSxsfa2hQy3gueeLCbo.mft (raw, json)
Hash identifier: 3PQcGj6xPLdyt9siahCKQaFYlswsIUaOgweUg9GCxJI=
Subject key identifier: 02:72:82:34:14:5B:0F:0E:48:26:A2:92:06:09:2E:9C:7E:35:AC:C3
Authority key identifier: 1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA
Certificate issuer: /CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
Certificate serial: 019CA9EA7DF7F9CB95B7330F6EE6980AF5BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
Manifest number: 184B
Signing time: Sun 01 Mar 2026 15:00:43 +0000
Manifest this update: Sun 01 Mar 2026 15:00:43 +0000
Manifest next update: Mon 02 Mar 2026 15:00:43 +0000
Files and hashes: 1: HCM-7mJMGSxsfa2hQy3gueeLCbo.crl (hash: LDpPdKUmB7uJcxz/EKFiW7PesSgNh+/SQyryoTyZg+k=)
2: khbk2O6uaJwQ02xod7VfRqroSH8.roa (hash: JHGyb709uPLZ2YerR1cXSu892JXCz6N62IZ5FMhPQdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:7d:f7:f9:cb:95:b7:33:0f:6e:e6:98:0a:f5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
Validity
Not Before: Mar 1 15:00:43 2026 GMT
Not After : Mar 2 15:00:43 2026 GMT
Subject: CN=02728234145b0f0e4826a29206092e9c7e35acc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2d:c6:fc:51:69:11:d2:08:cf:fc:47:58:93:
98:e1:cf:7c:f4:d3:d0:eb:fc:4f:b1:ed:91:3c:17:
42:0a:88:d8:88:20:93:91:e7:91:8c:25:f8:95:76:
d4:c5:3e:50:41:06:32:bf:82:27:54:93:1c:30:f8:
2e:9b:ae:b0:8e:2d:1e:f1:59:90:e4:90:53:f8:5c:
a4:26:e9:ae:a5:27:da:da:f1:67:e9:86:26:8f:4e:
d5:69:d9:9e:f8:fe:17:ab:ba:11:7a:fe:bb:a1:23:
55:c9:90:c9:a4:e7:7b:ad:00:14:4a:f7:83:63:52:
6f:3f:a2:70:31:a3:b8:07:a3:cf:e2:a1:1d:b4:f8:
e2:f4:c9:ff:07:81:61:0f:18:38:5b:60:1f:89:ba:
f7:ed:f0:4d:b3:30:5c:78:a4:f1:ee:e4:aa:a9:3d:
88:14:22:59:0f:28:83:44:13:0f:b3:69:cc:e3:45:
e2:4d:ef:89:4d:c4:5f:76:49:97:64:b0:52:0c:f5:
27:6c:b9:79:c2:d8:b5:c6:0b:f7:ce:3a:6a:52:22:
52:83:da:37:04:55:a3:31:a2:a8:b7:5f:61:27:8b:
bb:98:e9:8d:ec:92:44:70:ee:fb:fd:9a:28:88:1e:
03:49:99:0c:f4:b7:85:ce:f8:60:32:83:8b:da:b9:
e0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:72:82:34:14:5B:0F:0E:48:26:A2:92:06:09:2E:9C:7E:35:AC:C3
X509v3 Authority Key Identifier:
keyid:1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:71:c4:06:82:1b:cc:36:f6:c2:02:1f:aa:4a:c0:b0:39:52:
f0:1e:38:23:91:28:be:11:5f:5a:8f:fa:58:04:e2:fc:bf:f0:
6f:d2:85:34:f0:ab:ae:37:e9:42:89:4e:d2:75:52:ab:a4:1d:
37:07:33:8d:ce:d7:3f:26:6a:35:6a:2a:e4:2a:83:69:54:f5:
5d:3d:24:51:5f:a2:40:3e:6f:4d:82:75:3c:92:ec:4d:9f:82:
0d:4d:9e:00:6a:6a:59:e0:f9:5b:ef:8f:99:c6:73:5d:db:39:
20:fe:bc:09:01:d5:5b:e4:f7:5c:7f:24:c5:a6:19:b9:2a:91:
e1:9b:a7:85:e3:e9:ab:19:a4:8d:27:66:53:b7:7d:08:a0:d0:
8f:af:71:01:76:f9:ff:88:03:8e:f8:df:a5:7b:cb:d7:80:9b:
11:3d:99:8a:27:05:ed:a6:b3:46:ae:26:98:3f:0b:90:fe:24:
bd:2a:99:35:7a:ce:f8:4e:2e:80:27:f8:06:9b:14:59:b2:4b:
da:e5:2b:6d:10:cd:54:b4:9c:8f:90:9e:86:16:99:a0:65:76:
81:40:24:bc:53:31:36:3b:b8:65:80:9c:09:42:8a:dc:8f:5e:
46:1b:a9:8e:bb:ca:a1:20:1f:b6:8b:24:3c:80:07:67:c5:ba:
52:c7:1f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:51 2026 by rpki-client