Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
File: HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft (raw, json)
Hash identifier: SBT6SYwYurUSCkmryO4keoUgOUssK3KEK6/kYiwZsFE=
Subject key identifier: 34:29:71:F8:D7:75:37:10:BA:2A:A7:68:61:63:CA:B6:8B:53:80:12
Authority key identifier: 1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
Certificate issuer: /CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Certificate serial: 019DD19AC3DCE36081370E6C81DF32BD7B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
Manifest number: 0F7F
Signing time: Tue 28 Apr 2026 01:01:13 +0000
Manifest this update: Tue 28 Apr 2026 01:01:13 +0000
Manifest next update: Wed 29 Apr 2026 01:01:13 +0000
Files and hashes: 1: HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl (hash: igSPusiUaC5RZAkt9Y4edf45e14i7ZxfkJQYcXW2c9k=)
2: JtB-_mP0CPyoUgsFyVWDrEIlud8.roa (hash: egfxT7xeT/hTTg3h54ZByaWRlZbXWQEqw5+/1nELFjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:9a:c3:dc:e3:60:81:37:0e:6c:81:df:32:bd:7b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Validity
Not Before: Apr 28 01:01:13 2026 GMT
Not After : Apr 29 01:01:13 2026 GMT
Subject: CN=342971f8d7753710ba2aa7686163cab68b538012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:92:4f:eb:2a:d2:89:8b:c5:23:55:94:5d:df:
74:d3:c9:62:c7:3e:ac:c3:1e:fd:7b:94:78:d1:07:
6e:ac:37:e9:83:72:6e:9e:80:ff:f7:f9:d3:0b:61:
4d:56:5c:32:3c:7d:c1:62:9e:79:4c:21:29:27:86:
b5:50:91:49:8d:ff:76:0f:28:ad:f1:48:07:b6:1b:
d9:bd:02:2e:25:79:de:1b:27:30:fd:14:5c:52:4a:
3d:17:78:f7:21:a2:96:00:03:e1:0c:ee:72:37:c3:
59:42:ca:52:08:f6:b1:eb:c1:13:b9:a3:cd:11:70:
45:4b:42:cd:ce:c7:f0:bd:0d:3f:d2:92:6b:50:fd:
6a:66:ac:18:da:1f:ac:39:62:90:2c:a0:e5:68:8e:
9a:c1:66:08:fd:1f:1c:5a:34:59:05:16:23:55:72:
4b:6b:33:15:83:d3:d7:b1:d3:b1:b7:3f:25:8b:c6:
dc:1d:a8:68:f1:05:62:ae:db:df:1d:f9:fc:3f:ea:
1f:98:b9:72:7c:a7:f8:b7:a7:d7:9c:e7:46:96:34:
42:02:f4:d6:4b:a1:d8:b6:32:6a:01:db:c7:10:4f:
48:1a:78:86:13:96:81:13:70:30:d2:b0:96:3f:d9:
45:b6:9a:a9:09:a8:1d:cd:6c:80:8c:36:0e:9c:fb:
cd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:29:71:F8:D7:75:37:10:BA:2A:A7:68:61:63:CA:B6:8B:53:80:12
X509v3 Authority Key Identifier:
keyid:1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8e:31:a6:ee:4c:5d:53:54:80:f0:92:92:5f:3c:bc:d7:32:
d2:37:94:a6:d1:83:40:a6:95:3c:54:4d:5a:c8:ce:f4:87:69:
90:81:15:57:dc:d2:8a:37:3c:40:3c:c1:0c:80:bd:2c:94:24:
d5:9a:3a:73:d6:43:f4:ba:61:3f:f8:93:e8:25:07:c3:28:f2:
22:5f:47:11:bd:4e:5b:b7:34:85:2d:d5:a1:50:06:b6:3b:74:
4c:e3:cf:2c:71:d6:f5:91:01:fc:0b:74:d7:f7:99:d2:97:21:
93:26:69:55:a8:01:84:ea:97:09:2e:bf:bb:ba:ec:4b:64:5e:
6e:25:6c:c4:c5:31:e0:23:1f:87:cf:11:7e:16:89:bc:14:62:
cf:d3:f3:89:16:5c:09:ed:38:a9:eb:04:45:47:66:37:02:48:
2a:e8:10:c3:14:96:ce:cf:b7:e2:44:74:e6:2e:21:11:81:01:
46:47:fa:6f:8b:0c:af:f5:52:59:d5:bb:e8:9d:a7:02:82:0a:
22:99:11:e3:bb:8a:69:9e:04:5e:f1:23:12:d5:2e:d6:be:88:
a3:81:52:13:63:11:e7:f7:42:24:3a:f1:7f:b5:ca:81:a0:d3:
cc:19:d3:2e:d1:65:b2:02:3c:ef:20:7b:2f:31:62:7d:e2:25:
93:17:d1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:04:07 2026 by rpki-client