Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
File: HK37nPzahCYhLdfYhztf5ItBLyo.mft (raw, json)
Hash identifier: LTIamZs8uOpkzjxXZKEfwvIlXX9HUHfSsEvSeuYfksA=
Subject key identifier: C3:EA:BD:91:D9:DE:FD:DB:B2:78:03:99:78:DA:4E:0D:C9:13:72:82
Authority key identifier: 1C:AD:FB:9C:FC:DA:84:26:21:2D:D7:D8:87:3B:5F:E4:8B:41:2F:2A
Certificate issuer: /CN=1cadfb9cfcda8426212dd7d8873b5fe48b412f2a
Certificate serial: 019FA0725662469D2A1B3AFCF143976D32D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
Manifest number: 14CE
Signing time: Sun 26 Jul 2026 22:01:15 +0000
Manifest this update: Sun 26 Jul 2026 22:01:15 +0000
Manifest next update: Mon 27 Jul 2026 22:01:15 +0000
Files and hashes: 1: HK37nPzahCYhLdfYhztf5ItBLyo.crl (hash: Qmb1qpUCfe+TkAXsZ6TW3N3z51o5fVfoIr4vNcKej60=)
2: XKQN9GdCDnkkYw875rkSfXAvJBg.roa (hash: fV6EdFaVajqg4dj/k6xrLoqomy/vlK7OlhjNnf6pmQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:72:56:62:46:9d:2a:1b:3a:fc:f1:43:97:6d:32:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cadfb9cfcda8426212dd7d8873b5fe48b412f2a
Validity
Not Before: Jul 26 22:01:15 2026 GMT
Not After : Jul 27 22:01:15 2026 GMT
Subject: CN=c3eabd91d9defddbb278039978da4e0dc9137282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:1d:7a:d0:aa:02:49:0b:cd:ca:01:8e:b0:
f5:4c:79:d6:f6:fd:ab:0f:52:50:cb:c1:1f:95:72:
b0:3f:cb:eb:c9:04:c9:bf:c7:95:c5:84:b2:01:85:
71:a1:f2:81:85:fe:5e:79:33:08:15:d9:f6:ba:e2:
e1:14:0c:e2:e8:25:1e:04:04:8d:68:91:d0:95:99:
33:36:30:06:18:d7:24:ca:ef:84:d8:78:c2:22:c9:
fe:9c:5c:a0:f7:a1:5c:e3:2a:ea:25:da:1c:05:84:
58:d2:ca:19:81:d4:69:a8:bb:6c:d9:cd:f3:50:d5:
d8:4c:ce:d8:be:30:1d:94:b2:25:ea:57:79:ac:1b:
e6:9e:fb:24:f8:fa:b7:01:a6:e1:ba:47:ac:b5:73:
69:26:d1:e2:04:28:3a:1b:02:28:0c:a2:8f:ba:e2:
b3:6e:e5:b1:a0:e9:8c:32:cb:4a:36:a8:05:16:cc:
8c:a1:22:31:d3:70:ed:69:c6:32:b6:9a:8f:eb:6c:
61:4b:c2:c4:59:0f:9f:df:c0:e0:a9:20:0b:90:f8:
74:e9:59:f5:ef:28:e5:f7:fb:5c:cb:0c:67:a7:1e:
a1:4f:54:ca:18:d5:84:15:1f:ba:f3:51:85:d3:3a:
76:83:ea:5d:22:8d:bb:75:b2:5c:3d:2f:35:c8:55:
62:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EA:BD:91:D9:DE:FD:DB:B2:78:03:99:78:DA:4E:0D:C9:13:72:82
X509v3 Authority Key Identifier:
keyid:1C:AD:FB:9C:FC:DA:84:26:21:2D:D7:D8:87:3B:5F:E4:8B:41:2F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d9:b3:f2:83:fe:05:a2:11:c7:8e:0b:89:93:0d:87:93:80:
16:28:e3:50:2e:b7:d9:a8:c1:ae:6f:5e:87:a0:b6:f2:c3:8c:
12:8d:44:78:fc:d0:41:3d:a1:de:43:e2:c1:f8:b4:89:46:88:
3e:ec:5c:ca:3e:df:ea:6b:a1:04:27:19:4c:db:c9:e5:e6:89:
2a:d4:d0:fe:52:c9:87:50:44:57:b8:49:78:46:65:49:f6:03:
7f:2e:04:e6:8a:74:8b:31:ac:6d:e4:ef:5f:82:38:87:0d:37:
60:30:96:bf:68:99:00:66:64:e8:80:f2:21:72:8f:59:6f:ab:
ed:3c:9a:25:55:18:3e:2a:c1:7b:fe:93:ff:b0:2f:cf:ed:ee:
8f:84:b9:04:b9:7a:3c:b4:7a:92:4f:5b:bf:81:bf:29:39:90:
e6:c7:af:78:14:9a:1f:22:7c:7d:ba:24:f5:e4:d8:dc:09:59:
59:3d:ed:29:38:33:a3:23:ab:d5:ee:6a:da:b1:ee:87:ce:14:
f7:a4:fa:5d:0d:85:1e:63:6a:89:b4:4e:b9:71:a5:49:13:f4:
00:d1:f4:99:31:27:70:ba:b4:75:88:50:dd:98:d4:52:17:be:
b1:63:0f:bf:e3:26:e0:54:20:6b:bd:28:95:3c:86:27:6a:86:
ee:27:4a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:05:55 2026 by rpki-client