Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
File: HC03VaNQG5yw1euqSZ5eoUm88Is.mft (raw, json)
Hash identifier: 8NEPjZ4nDSXeNWlpPiIiPBh2uTrN4WXvBp2MGNSdtbg=
Subject key identifier: D5:B8:6E:78:DA:9E:EC:F1:FA:CD:77:01:63:D9:29:94:1B:CA:3F:A8
Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
Certificate issuer: /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Certificate serial: 019D37F707A8543C989220273E39F6AAF0E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
Manifest number: 096D
Signing time: Sun 29 Mar 2026 05:00:29 +0000
Manifest this update: Sun 29 Mar 2026 05:00:29 +0000
Manifest next update: Mon 30 Mar 2026 05:00:29 +0000
Files and hashes: 1: HC03VaNQG5yw1euqSZ5eoUm88Is.crl (hash: 1/5VxU4P/02FbbjAMRQK3ve4Ir2Ngf4DMCXGDrJhbJk=)
2: Lp1vmXiAHAmwk2iCgx7RB0tjwmg.roa (hash: SGv7A6ro4T2ZdRrPed862yoKpwBaCmoUOMJ9b5UxA+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:07:a8:54:3c:98:92:20:27:3e:39:f6:aa:f0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Validity
Not Before: Mar 29 05:00:29 2026 GMT
Not After : Mar 30 05:00:29 2026 GMT
Subject: CN=d5b86e78da9eecf1facd770163d929941bca3fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:c9:35:bd:98:90:5c:26:d3:36:79:cc:cd:
82:98:87:b2:14:b6:e4:fa:35:f4:52:ab:69:c8:ef:
87:6a:20:93:c7:0d:a2:99:68:e0:b5:00:69:18:e9:
c5:69:9a:59:67:2a:b4:6c:4d:dd:30:a5:2c:bf:00:
f6:ab:09:b1:10:60:e1:d9:cd:69:4a:d7:8a:08:86:
c6:dc:e1:3a:03:52:77:33:24:6c:4a:2c:15:78:e9:
26:45:55:02:90:67:ca:f8:80:99:50:dd:16:03:43:
95:92:3f:32:58:5d:07:ad:3a:1c:82:da:ed:a1:69:
51:a9:d5:a1:80:e2:56:14:1c:6d:86:05:3e:1a:ed:
c4:a5:c3:75:1e:77:54:da:ae:cd:3f:2b:e3:d6:54:
98:29:e3:01:b5:ec:dc:a5:e8:a5:79:04:59:1f:39:
e4:e2:57:5b:16:fc:c0:d0:af:07:2b:e4:6f:d6:e1:
23:78:f9:bc:5d:20:48:ed:91:75:e4:cf:82:e9:c7:
2b:36:7f:b0:cd:58:45:01:29:0a:bb:61:27:07:45:
a4:06:ce:c0:6f:d9:e6:c4:c5:b0:18:0c:9c:ed:ae:
24:a7:92:a4:97:4c:6c:8f:28:80:a8:76:ad:17:16:
9b:99:dc:64:f8:25:f6:9e:ee:29:a5:9c:e9:8f:43:
4d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B8:6E:78:DA:9E:EC:F1:FA:CD:77:01:63:D9:29:94:1B:CA:3F:A8
X509v3 Authority Key Identifier:
keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3e:57:93:df:08:d5:f1:50:c6:ed:50:e8:f6:5f:d7:92:59:
eb:85:16:05:28:49:4c:b5:e3:92:6c:c4:79:68:57:6c:51:3f:
d9:35:7d:4a:87:86:66:d4:df:56:ea:0a:72:e4:b5:fe:42:12:
7a:09:4c:34:6c:72:08:28:26:b8:23:3f:f3:03:50:7d:54:ce:
5b:21:00:1b:37:f0:f3:b6:e9:f7:04:a8:bb:bf:21:03:c6:67:
80:19:55:ae:98:6f:ca:41:4b:ad:f8:9e:e7:29:e2:b6:73:75:
90:1b:a7:e5:a8:6d:24:be:dd:ee:04:b9:ae:06:5a:d6:19:20:
ea:0e:e0:43:48:59:8d:17:39:95:d2:6a:e3:54:1c:0f:9e:83:
a5:08:a4:e1:b8:d3:46:f3:76:15:97:60:1c:54:89:05:53:40:
5f:99:07:18:33:91:c3:22:25:e9:cd:3e:00:ff:d9:b0:fc:06:
5b:e9:c1:b1:c4:95:a4:a1:fa:c2:78:d7:09:c7:53:e8:cf:f5:
09:bc:d6:3e:d0:e2:7a:44:79:0f:7e:b4:1f:bf:5d:a5:04:90:
e2:72:45:c2:04:eb:a5:73:7b:70:f0:7d:77:12:31:7a:0f:72:
20:14:4f:f6:0c:4d:fa:9e:ce:2c:f3:bb:88:ee:6d:c3:c6:83:
09:a3:bd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:53 2026 by rpki-client