Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
File: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft (raw, json)
Hash identifier: 1ZyJ/5f0mFu8w2nGbAJdIKGuFi4sxWTmkBIPbSj9Ogs=
Subject key identifier: 7F:7B:77:1D:CC:CB:5E:8A:90:E0:07:A4:A9:4A:71:FD:1E:11:3A:E8
Authority key identifier: 1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
Certificate issuer: /CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Certificate serial: 019D9C62EDC25FE1D593273EF4A746D3AEF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
Manifest number: 1230
Signing time: Fri 17 Apr 2026 17:00:22 +0000
Manifest this update: Fri 17 Apr 2026 17:00:22 +0000
Manifest next update: Sat 18 Apr 2026 17:00:22 +0000
Files and hashes: 1: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl (hash: 9eGcrQV6Yt9bgSStUaUhfjYy2FxUXf+vDQjQiTG3r7E=)
2: TQDW0DxTU7CzvSKr8TtyPhHtPTc.roa (hash: 1+s5vjQlLwZnrQX0hqnsI0i09wdeDnUbTWGOuKMahfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:62:ed:c2:5f:e1:d5:93:27:3e:f4:a7:46:d3:ae:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Validity
Not Before: Apr 17 17:00:22 2026 GMT
Not After : Apr 18 17:00:22 2026 GMT
Subject: CN=7f7b771dcccb5e8a90e007a4a94a71fd1e113ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fb:a1:ad:cd:36:72:13:d2:12:0c:5b:79:c3:
42:75:bb:17:6b:33:92:27:25:3e:06:1c:ad:b3:9a:
58:c9:87:4f:5d:c4:23:2b:43:0e:3b:e3:ee:99:72:
ec:a6:14:ee:fd:9a:9f:66:84:36:c2:4d:15:68:d7:
51:33:9e:71:d8:79:18:ff:02:40:79:39:d8:5f:db:
f9:1b:0c:92:27:0d:a2:98:f7:72:46:6d:44:87:ae:
0b:97:0c:fb:78:4b:56:da:1c:3c:a5:7a:14:c2:4c:
c7:39:d5:8a:23:44:22:41:1f:6e:90:6b:f9:22:33:
2a:48:da:88:63:88:f8:49:df:43:5f:ad:f0:48:0d:
37:1f:29:3f:c8:28:5e:14:a6:6c:36:25:bc:50:d1:
b7:87:88:f4:6b:da:2f:6c:22:04:ec:10:5e:6f:ac:
0d:f5:0a:a3:6f:1c:17:ac:83:8f:5d:d1:56:12:cf:
39:1f:88:d9:26:c1:f8:d8:0b:e2:53:53:22:c1:c1:
f3:6d:4b:f0:ff:b7:f9:5f:3e:b1:4b:a1:de:9e:9f:
5c:7f:29:2b:85:29:1d:ec:1c:19:01:37:6f:7a:f7:
f2:14:c7:e8:a4:01:5c:f1:fb:b7:ac:d2:01:43:05:
fd:87:a4:3f:ef:76:85:0c:e9:1b:3d:12:6e:80:a4:
1d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7B:77:1D:CC:CB:5E:8A:90:E0:07:A4:A9:4A:71:FD:1E:11:3A:E8
X509v3 Authority Key Identifier:
keyid:1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:89:76:57:38:73:11:37:4e:5e:1f:23:84:ef:80:8c:fd:4a:
5f:15:88:d0:70:f2:ee:3a:bd:51:c8:00:9b:6f:a7:e3:ca:8c:
f8:83:8a:df:b5:57:59:5a:7e:03:51:0b:d2:f2:0f:47:6c:85:
d6:e2:3f:26:a5:42:17:b7:bb:58:f7:d0:65:3f:d8:03:39:60:
62:f1:46:af:36:4d:98:57:df:01:07:be:a0:72:ff:ce:a3:cb:
67:e7:4e:21:10:5c:f2:68:ef:a3:4a:c4:5c:32:e0:6f:d6:f3:
3a:16:0a:bd:56:a8:3b:4d:f2:93:e8:17:42:37:d2:64:9d:f3:
0d:80:a4:85:97:7e:a6:53:8c:6b:0e:50:65:08:ca:a6:16:f8:
47:1d:14:3d:0b:3d:5c:fc:d5:1b:5d:ea:7e:39:80:1b:b4:bd:
ac:ac:06:64:70:6d:20:3e:96:c8:65:61:b3:d0:57:4e:a7:54:
34:ce:24:e4:e0:ac:6a:65:de:b1:a0:91:93:f8:70:d0:ba:d4:
41:b0:06:65:c9:9c:bf:e9:39:5e:00:e3:95:14:41:17:24:f4:
43:25:e3:54:b0:7c:67:ea:7d:83:5d:01:6d:93:e7:f4:6e:71:
04:7a:33:6d:c1:46:e0:17:94:ef:c1:c9:b0:d9:0e:30:03:c1:
78:25:43:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:18:43 2026 by rpki-client