Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
File: HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft (raw, json)
Hash identifier: dMZT+mfQ4uZHXGb07kwPzC/2kDBbdXH7uJMulHPkJtI=
Subject key identifier: 4A:7D:13:25:80:93:DC:EC:E7:E8:06:A6:ED:52:11:52:DA:A4:C2:DB
Authority key identifier: 1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
Certificate issuer: /CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Certificate serial: 019D389C381E51E13F17F558FCD32402583F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
Manifest number: 17EA
Signing time: Sun 29 Mar 2026 08:00:55 +0000
Manifest this update: Sun 29 Mar 2026 08:00:55 +0000
Manifest next update: Mon 30 Mar 2026 08:00:55 +0000
Files and hashes: 1: 0UjAR0lwkfGnKW_I34st30o5zcY.roa (hash: SaYOr18FPTLyjkppn6MTCghoM1FqQpX991KVnAvsKI4=)
2: HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl (hash: rDuAIYp2J1JMv/vvRTjyMVtQdRKO0PCU/T09DoogfRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:38:1e:51:e1:3f:17:f5:58:fc:d3:24:02:58:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Validity
Not Before: Mar 29 08:00:55 2026 GMT
Not After : Mar 30 08:00:55 2026 GMT
Subject: CN=4a7d13258093dcece7e806a6ed521152daa4c2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:b1:3d:6d:31:0d:5e:06:66:07:4f:6a:72:
6b:39:b7:3d:79:4e:5a:8d:a1:94:f5:52:91:09:69:
1f:fc:78:91:47:c0:0b:97:0a:3b:9e:45:30:bf:77:
f1:75:d8:7f:1c:b2:03:da:02:79:11:9a:e7:1a:3b:
b4:68:e4:3a:9e:dd:5a:64:85:cd:24:9c:4f:36:fe:
db:6c:03:8b:cb:f8:4a:01:7c:ac:17:b1:3d:dd:e3:
5b:28:8a:26:83:63:8a:9c:03:f7:d7:55:7b:fe:d7:
16:c1:84:ff:b9:32:cb:a1:58:38:e8:9f:12:17:ec:
4b:fe:f9:93:ab:39:25:5d:03:3e:fe:eb:5c:69:27:
3b:b7:fc:e5:7b:0d:28:a6:86:1d:d4:8d:24:97:4c:
00:3e:d1:f2:0d:83:e5:03:90:a5:e6:5d:4d:c1:a5:
60:49:8f:7c:92:19:18:1f:fc:d8:e7:4a:4f:ea:be:
6b:53:4c:38:37:9c:c1:49:a4:9a:a1:74:e4:ca:5a:
21:d1:5a:b1:3b:3e:43:2c:94:76:2e:7d:b5:cb:8b:
52:0e:98:3f:19:6c:d7:1c:32:5e:6d:2f:a8:3b:68:
09:a3:54:b3:7e:df:d3:59:05:bc:4b:46:32:d1:7f:
29:26:93:ff:35:71:a4:00:49:f0:e4:5a:89:f0:5f:
db:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7D:13:25:80:93:DC:EC:E7:E8:06:A6:ED:52:11:52:DA:A4:C2:DB
X509v3 Authority Key Identifier:
keyid:1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:fc:03:1c:b8:9f:cc:76:f1:3c:01:87:78:fd:b0:43:d6:67:
04:44:99:3d:9d:48:2a:dc:69:5d:8b:f3:ea:3c:8a:b8:ce:50:
df:37:73:e6:3f:37:43:77:74:a3:01:46:45:bc:47:5c:74:1d:
45:20:14:a6:89:0a:1c:0d:02:a5:a2:56:84:c8:1b:b4:6f:48:
51:01:ae:6b:66:fe:18:23:fe:b8:27:70:f9:5b:7a:57:99:45:
25:c1:46:7e:b0:94:21:87:f4:a1:7e:44:9f:6f:b0:63:7e:73:
51:34:90:7b:f6:4c:f4:8e:26:8a:8b:d8:13:97:ad:9d:f5:e9:
cd:b5:b2:75:a1:c2:30:03:d0:72:18:00:3b:3f:b2:ee:3d:58:
c0:ca:6a:a0:62:c7:fa:72:70:4c:07:3f:99:4d:53:41:f4:fc:
97:46:ce:91:5a:6c:07:67:80:24:60:8d:44:8e:83:64:b5:6a:
7c:51:1f:33:bd:39:f3:2f:3a:94:07:b9:0b:34:de:f6:43:e3:
87:da:95:58:3f:1a:34:6a:95:2f:4f:1a:fc:99:e8:5c:02:8f:
48:34:84:09:9f:0f:18:c2:52:c2:c5:4e:46:fb:7c:e5:15:2b:
35:eb:ec:a0:2e:d4:37:95:10:80:41:13:17:19:46:ee:14:45:
0f:23:bc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:45 2026 by rpki-client