Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
File: HCN7aINpeRKVf40zc3AryQbSZEU.mft (raw, json)
Hash identifier: slG9vmcUY2ZETPywHbM5BkQGqiga1nIzWy/yDymlFy0=
Subject key identifier: 7D:35:F1:53:C2:86:96:44:F3:02:4F:DB:87:D6:4E:99:E7:A4:CF:18
Authority key identifier: 1C:23:7B:68:83:69:79:12:95:7F:8D:33:73:70:2B:C9:06:D2:64:45
Certificate issuer: /CN=1c237b6883697912957f8d3373702bc906d26445
Certificate serial: 019FA86239D27C1805201FA462C31B1656E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
Manifest number: 15EA
Signing time: Tue 28 Jul 2026 11:00:37 +0000
Manifest this update: Tue 28 Jul 2026 11:00:37 +0000
Manifest next update: Wed 29 Jul 2026 11:00:37 +0000
Files and hashes: 1: FMHMs5u6nqIr6z09yDsjzYxfks8.roa (hash: cXOK9Ev2UNFSti3Tqnxxgi2cL3wHqDi6S1Qe8D5ON6A=)
2: HCN7aINpeRKVf40zc3AryQbSZEU.crl (hash: NbZGuhVrO7Asm+G973lzg9UCkKaRrwW6d5Tdq+Ux5iQ=)
3: SgzTZO7h0qw0lQtLCLQDxdwtTHc.asa (hash: YpjRapR2fvquPrVNxyf5Ct4ddLeyNJ16sV02TNO6WCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:39:d2:7c:18:05:20:1f:a4:62:c3:1b:16:56:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c237b6883697912957f8d3373702bc906d26445
Validity
Not Before: Jul 28 11:00:37 2026 GMT
Not After : Jul 29 11:00:37 2026 GMT
Subject: CN=7d35f153c2869644f3024fdb87d64e99e7a4cf18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0b:d0:49:7d:9a:fd:09:b1:5c:af:63:8a:95:
6f:6c:5b:60:74:3a:52:8f:ae:87:af:cf:77:92:62:
7d:ee:b3:f7:c3:df:cf:93:bc:0b:83:be:2d:2a:a9:
3c:ac:4f:88:95:65:8b:2a:fe:f3:07:8b:a2:0d:31:
0b:23:26:1a:cf:26:82:0e:21:ac:41:40:53:eb:7d:
65:61:f5:86:03:6a:4c:b5:83:c5:4b:df:de:ad:7b:
d0:db:47:9c:82:de:b6:a1:0e:16:fe:d0:6f:92:2e:
65:c9:62:04:cd:a9:62:db:0e:59:f9:4a:55:87:5d:
37:9e:e4:54:82:fe:c3:ad:40:22:c4:fd:8b:16:c9:
0a:56:32:c1:54:f5:34:87:db:22:62:b2:5b:96:7c:
7d:64:e2:3f:d5:ca:8b:21:96:37:84:31:19:15:ef:
67:ef:d7:26:1b:eb:2b:34:d2:7a:90:2d:66:0c:b6:
36:44:0e:49:e8:ef:fa:b9:9a:07:98:15:52:07:bc:
b1:e1:ac:86:50:8c:44:fe:61:9f:25:ac:6c:01:44:
11:3c:5b:df:81:2a:a8:7b:35:a2:15:9b:31:83:2c:
90:a3:db:4d:e5:19:29:d4:56:f5:b7:5c:53:35:cb:
c6:19:5e:97:64:51:12:93:30:64:0f:5c:4a:a9:56:
c5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:35:F1:53:C2:86:96:44:F3:02:4F:DB:87:D6:4E:99:E7:A4:CF:18
X509v3 Authority Key Identifier:
keyid:1C:23:7B:68:83:69:79:12:95:7F:8D:33:73:70:2B:C9:06:D2:64:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5a:df:e0:62:3b:39:3f:89:07:92:30:89:78:9d:a6:77:31:
e2:3b:8b:31:36:7b:c1:84:44:3c:11:f8:a5:b2:37:59:ee:cf:
08:12:d9:19:7a:38:89:ea:d0:2f:de:9d:df:6d:25:fc:be:3f:
0b:0d:0b:fd:07:32:85:84:a5:4c:99:77:9f:f7:f2:f4:94:82:
f7:27:b0:28:80:b2:15:ab:01:f6:1a:57:21:5e:d4:5a:b6:ee:
57:cd:cd:46:df:93:75:4b:19:7c:c4:73:d5:5f:ff:fc:af:aa:
0b:6a:34:78:44:c5:a8:55:a5:7d:25:c5:cd:14:f3:69:a8:31:
8f:ec:6a:9b:e0:3f:b8:9b:52:94:5b:e0:e6:83:32:a7:42:c1:
2b:e5:b8:ab:f5:f6:f3:64:51:b7:70:39:4e:2a:7e:0e:ae:f1:
6a:b6:3b:05:3a:ff:20:88:69:52:97:9c:4f:26:73:f1:f0:83:
11:bf:eb:ac:1f:ed:0f:e9:2d:9d:99:dd:75:3b:ab:ae:f6:18:
28:48:d1:69:85:2f:8a:14:2b:06:e4:dc:e0:44:d2:ba:3a:88:
d5:d1:42:02:22:bc:94:29:44:66:d6:d6:83:cb:99:7b:f2:91:
71:5f:94:db:77:07:1f:0a:9e:b6:14:53:50:21:35:a3:e6:48:
95:99:b9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:24:06 2026 by rpki-client