Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
File: HC03VaNQG5yw1euqSZ5eoUm88Is.mft (raw, json)
Hash identifier: G6yHHzU5HMHMlrqE8zWTm0VLuFHOnx7okqpvkJpC5VU=
Subject key identifier: F1:E4:C2:DB:E7:DE:35:95:69:54:36:E6:90:40:04:58:AE:8B:72:87
Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
Certificate issuer: /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Certificate serial: 019E33062C4E18CEAE630FA32A7EAA254DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
Manifest number: 09EF
Signing time: Sat 16 May 2026 23:01:42 +0000
Manifest this update: Sat 16 May 2026 23:01:42 +0000
Manifest next update: Sun 17 May 2026 23:01:42 +0000
Files and hashes: 1: HC03VaNQG5yw1euqSZ5eoUm88Is.crl (hash: rheYjafCwMeb7z8y+VHa+Kn0Nryji9gFFyXezPVOqkE=)
2: Lp1vmXiAHAmwk2iCgx7RB0tjwmg.roa (hash: SGv7A6ro4T2ZdRrPed862yoKpwBaCmoUOMJ9b5UxA+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:33:06:2c:4e:18:ce:ae:63:0f:a3:2a:7e:aa:25:4d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Validity
Not Before: May 16 23:01:42 2026 GMT
Not After : May 17 23:01:42 2026 GMT
Subject: CN=f1e4c2dbe7de3595695436e690400458ae8b7287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c0:f0:eb:d1:80:fe:57:5e:3a:b2:9f:76:54:
a0:ee:62:75:d9:80:3d:69:81:d7:79:8e:25:37:14:
0b:ae:23:57:14:b5:cf:fa:72:00:15:e6:cb:1a:f1:
46:7f:57:cc:5e:ed:7d:05:9b:b2:fa:bc:43:21:f9:
78:8a:3b:c4:8d:ec:1f:d1:86:39:ec:e0:b5:69:b6:
2a:b8:e7:4a:40:59:50:92:7d:a6:4d:6f:67:6f:73:
2d:d7:41:63:ff:2c:40:75:47:cb:06:c9:a8:d2:93:
86:9a:9c:f1:b5:02:33:74:21:e8:e5:cc:19:8a:cd:
6c:3a:fd:ac:11:a0:58:8a:b4:eb:5f:5c:c8:a6:4b:
5b:d5:39:de:b3:1b:77:08:ee:42:76:08:64:2e:86:
eb:f5:84:9f:5b:17:32:da:ef:90:0f:8c:18:36:0b:
30:0a:15:02:dc:0b:ac:95:e8:02:d0:ef:b8:13:5a:
14:7b:fb:9c:ab:22:af:cf:58:34:37:9f:5f:ab:41:
62:75:c4:97:f4:1e:ec:ba:1d:00:b7:16:52:7c:a9:
f1:89:a7:68:63:ee:6b:34:4a:f9:af:9c:6a:96:ca:
f1:18:ff:47:0f:16:40:98:06:21:13:59:3d:1a:70:
03:68:52:da:df:3a:6d:26:4e:b4:aa:96:ef:60:70:
20:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E4:C2:DB:E7:DE:35:95:69:54:36:E6:90:40:04:58:AE:8B:72:87
X509v3 Authority Key Identifier:
keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3c:41:20:a5:2f:3e:bf:fd:3d:1f:ee:3b:07:c5:ed:43:b1:
be:59:72:26:8f:65:28:74:e0:a3:b1:ca:26:02:f8:34:7c:aa:
19:ad:88:3c:53:c5:e8:55:78:4a:2a:b4:be:fd:ca:3d:ba:2f:
69:c3:2b:ef:d6:5b:ac:2c:43:57:9b:f7:72:51:20:1a:94:8d:
3b:83:3a:43:1f:09:ed:68:ef:fe:30:54:db:20:76:a4:c5:c4:
b9:46:dc:3f:71:ac:ba:8b:11:ea:c4:fd:b1:16:3c:b3:67:35:
7b:b8:e5:67:96:b2:e6:23:b1:1c:55:89:0c:eb:51:d0:5f:53:
8f:45:eb:7c:7c:e7:07:17:a9:32:f3:1c:17:0e:c6:d4:21:55:
b4:d1:9a:44:a5:f7:53:81:27:1b:66:59:f4:a9:42:1f:e6:3d:
aa:af:cf:ca:94:59:2d:6e:c1:c9:d4:ff:f4:f5:f1:ab:5d:b3:
82:37:24:7e:e3:c8:59:6d:93:a6:76:0d:a0:c7:51:60:ac:f5:
9f:c2:d0:e1:1e:55:3e:5e:d1:05:48:29:7a:bc:91:67:85:6b:
7b:fc:9c:b0:2d:66:75:16:d7:86:15:86:60:01:95:ff:60:9e:
18:4b:d1:56:67:bf:2a:0b:9d:36:e3:cb:32:b3:5b:a5:42:33:
f7:8c:b3:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4zBixOGM6uYw+jKn6qJU3qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMmQzNzU1YTM1MDFiOWNiMGQ1ZWJhYTQ5OWU1ZWExNDli
Y2YwOGIwHhcNMjYwNTE2MjMwMTQyWhcNMjYwNTE3MjMwMTQyWjAzMTEwLwYDVQQD
EyhmMWU0YzJkYmU3ZGUzNTk1Njk1NDM2ZTY5MDQwMDQ1OGFlOGI3Mjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sDw69GA/ldeOrKfdlSg7mJ12YA9
aYHXeY4lNxQLriNXFLXP+nIAFebLGvFGf1fMXu19BZuy+rxDIfl4ijvEjewf0YY5
7OC1abYquOdKQFlQkn2mTW9nb3Mt10Fj/yxAdUfLBsmo0pOGmpzxtQIzdCHo5cwZ
is1sOv2sEaBYirTrX1zIpktb1Tnesxt3CO5CdghkLobr9YSfWxcy2u+QD4wYNgsw
ChUC3AuslegC0O+4E1oUe/ucqyKvz1g0N59fq0FidcSX9B7suh0AtxZSfKnxiado
Y+5rNEr5r5xqlsrxGP9HDxZAmAYhE1k9GnADaFLa3zptJk60qpbvYHAggwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHkwtvn3jWVaVQ25pBABFiui3KHMB8GA1UdIwQY
MBaAFBwtN1WjUBucsNXrqkmeXqFJvPCLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEMwM1ZhTlFHNXl3MWV1cVNaNWVvVW04OElzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC82N2M2MDUtMDEwZi00NTkyLWE5MTkt
OWVjZTBiMjU2NThlLzEvSEMwM1ZhTlFHNXl3MWV1cVNaNWVvVW04OElzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC82N2M2MDUtMDEwZi00NTkyLWE5MTktOWVjZTBiMjU2NThl
LzEvSEMwM1ZhTlFHNXl3MWV1cVNaNWVvVW04OElzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTxBIKUv
Pr/9PR/uOwfF7UOxvllyJo9lKHTgo7HKJgL4NHyqGa2IPFPF6FV4Siq0vv3KPbov
acMr79ZbrCxDV5v3clEgGpSNO4M6Qx8J7Wjv/jBU2yB2pMXEuUbcP3GsuosR6sT9
sRY8s2c1e7jlZ5ay5iOxHFWJDOtR0F9Tj0XrfHznBxepMvMcFw7G1CFVtNGaRKX3
U4EnG2ZZ9KlCH+Y9qq/PypRZLW7BydT/9PXxq12zgjckfuPIWW2TpnYNoMdRYKz1
n8LQ4R5VPl7RBUgperyRZ4Vre/ycsC1mdRbXhhWGYAGV/2CeGEvRVme/KgudNuPL
MrNbpUIz94yz3Q==
-----END CERTIFICATE-----
Generated at Sun May 17 04:16:46 2026 by rpki-client