Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
File: HCQvLpRcanLuKPjIDoDUiEM-N6M.mft (raw, json)
Hash identifier: 9GT9nDM0+o7TcGPzGbpRGlfOM2PYIZ6M64zy2mZr/I0=
Subject key identifier: 72:E7:A5:4C:4C:87:71:C8:0C:E2:D7:8B:86:92:B4:93:3F:CF:03:C1
Authority key identifier: 1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
Certificate issuer: /CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Certificate serial: 019D37521B1EBF0A5D2F8667FF497D6B6400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
Manifest number: 0BD2
Signing time: Sun 29 Mar 2026 02:00:20 +0000
Manifest this update: Sun 29 Mar 2026 02:00:20 +0000
Manifest next update: Mon 30 Mar 2026 02:00:20 +0000
Files and hashes: 1: 4lgY0W_OGeoIOrzJmbXnEdo5-pc.roa (hash: l5wy/qIfUulCmH/VGEZK2Kox3s/Htye0nx0GKzhDkHw=)
2: HCQvLpRcanLuKPjIDoDUiEM-N6M.crl (hash: WFREwMhM8C2r/ZqL8cadQnov4HsunlhHnn7Y8P+aKYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:1b:1e:bf:0a:5d:2f:86:67:ff:49:7d:6b:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Validity
Not Before: Mar 29 02:00:20 2026 GMT
Not After : Mar 30 02:00:20 2026 GMT
Subject: CN=72e7a54c4c8771c80ce2d78b8692b4933fcf03c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:d0:00:3e:d4:81:bb:f1:90:88:70:e4:55:
f3:92:8a:c0:4d:e4:af:df:78:e7:c1:40:f8:75:e9:
ab:f2:03:29:20:29:f1:a8:af:ab:77:bc:13:61:c9:
48:f4:4c:46:66:b2:f5:82:1a:3f:56:2a:13:a9:48:
8a:8b:a5:f9:eb:21:58:4a:4f:95:90:89:57:47:c0:
77:2b:45:b8:c8:e0:f9:cb:74:59:2b:53:75:d5:7e:
64:2e:1d:0f:83:03:18:55:59:83:31:f5:b9:4c:93:
ca:6a:a2:3e:0d:0b:1a:5e:31:2b:f2:99:5d:ed:e4:
c5:47:12:b8:37:9c:55:13:2e:72:cf:01:83:5b:bc:
d5:de:41:bc:28:8a:aa:ce:c1:7e:1f:29:de:5b:06:
f1:0c:23:8b:a7:06:aa:83:3a:de:b5:bf:7b:d1:bf:
59:d2:60:c8:d8:73:b3:5c:db:11:b3:8c:28:78:9c:
8c:71:78:54:06:77:f7:b7:88:21:93:8d:b6:8b:e1:
9b:79:2e:f4:89:8a:d8:00:6e:ee:c4:ce:f2:3f:47:
bf:6f:e7:3b:da:8a:e9:6a:19:81:a0:29:c0:f2:03:
55:5e:7a:16:95:ed:ed:df:b3:aa:fa:4b:03:0d:bc:
1a:01:2a:ef:bf:ce:97:bc:90:8d:aa:f2:a5:74:8f:
9d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E7:A5:4C:4C:87:71:C8:0C:E2:D7:8B:86:92:B4:93:3F:CF:03:C1
X509v3 Authority Key Identifier:
keyid:1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:91:75:f7:98:9a:89:6c:f2:03:92:8e:c4:94:e2:5a:24:e0:
b9:5f:c9:62:61:04:ba:a9:6a:77:92:9a:e5:3e:db:de:7d:b8:
29:42:7b:77:4d:d6:d0:10:82:16:01:ba:63:f8:7d:fe:40:98:
64:b2:85:0a:f7:18:2e:f0:cc:e8:d8:e1:b9:7f:40:fb:62:98:
81:57:75:9d:73:65:2b:45:8b:fb:19:96:2c:d2:b0:78:0c:b1:
f4:38:44:64:bd:e4:37:ab:dd:a5:d9:c7:e6:b8:02:68:28:15:
a2:06:e2:b8:b4:1d:e8:21:a8:c8:81:13:4a:f4:65:5b:3e:31:
dd:8b:04:c8:af:4b:ce:6f:0b:6d:1a:3c:86:22:b7:48:84:a3:
ff:30:dd:50:10:7b:e9:af:9a:d6:44:37:37:cb:88:0f:27:89:
fc:0b:21:56:42:55:8e:8b:e7:3e:67:6a:1c:e9:6f:ed:0f:f5:
96:72:8f:c5:72:64:4a:14:32:a1:fc:82:bf:ff:c1:1a:0e:3f:
4f:c3:0a:31:6e:d0:d6:45:93:a2:eb:b1:78:5f:53:01:4a:14:
79:05:89:4d:da:74:48:d8:7e:39:9d:24:a2:25:b2:a0:dd:d0:
7a:9c:f0:60:29:9e:18:7b:c4:2d:05:ef:8a:25:20:f3:d8:34:
ff:be:4d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:45 2026 by rpki-client