Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
File: hc-RCpREnqI6rGxAmgWEm-2l4ko.mft (raw, json)
Hash identifier: sb4ZbFKEDNioUQs+Oc4G06lwfa0gP422kyEJGmJQe2g=
Subject key identifier: 47:EF:1C:4F:E0:4D:4E:62:B5:BE:81:1A:D1:7B:8D:4D:EB:10:E4:10
Authority key identifier: 85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A
Certificate issuer: /CN=85cf910a94449ea23aac6c409a05849beda5e24a
Certificate serial: 019D3865534CDA75614E1866BD670E2402EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:00:57 +0000
Manifest this update: Sun 29 Mar 2026 07:00:57 +0000
Manifest next update: Mon 30 Mar 2026 07:00:57 +0000
Files and hashes: 1: hc-RCpREnqI6rGxAmgWEm-2l4ko.crl (hash: A8cKtEGahTyullMCD84w3d5cOJK+f3kkwp3NV931vjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:53:4c:da:75:61:4e:18:66:bd:67:0e:24:02:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85cf910a94449ea23aac6c409a05849beda5e24a
Validity
Not Before: Mar 29 07:00:57 2026 GMT
Not After : Mar 30 07:00:57 2026 GMT
Subject: CN=47ef1c4fe04d4e62b5be811ad17b8d4deb10e410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b3:bf:ff:da:84:78:d7:c6:29:d8:08:d2:83:
b2:c4:0b:d5:45:b9:6c:87:b7:b0:fb:7d:0d:b2:8a:
29:e7:df:0b:c2:28:9f:fa:86:23:2b:8d:73:69:05:
1c:41:bb:db:3e:d2:8d:b9:3a:d1:2e:b3:d5:ca:79:
cf:0f:89:ef:ed:b8:e5:9e:f9:4c:4c:3c:e7:bf:00:
12:0d:67:60:30:89:e5:1a:bf:12:4f:c9:9d:df:7f:
ef:65:19:08:65:3d:cf:7f:ad:f6:fe:1b:c5:c1:4c:
02:2b:98:5b:fe:0b:b6:af:16:bf:f6:2f:75:c2:8e:
b4:a6:70:c3:dd:ea:38:fd:00:d4:0d:16:d6:84:de:
6a:79:7a:a7:5b:16:8e:0a:4f:09:06:74:4f:6b:78:
cf:8c:20:36:9d:2c:9a:48:c4:46:3f:bf:2a:ed:47:
5c:18:9d:17:0f:54:5f:45:c4:60:0c:71:0d:bb:7f:
76:68:ac:4b:48:46:8d:71:26:3d:5a:df:0b:e1:e5:
00:4e:2f:94:b3:ee:d7:0a:0e:62:03:a7:55:a2:78:
da:6c:81:16:2e:88:f7:ac:55:e9:0c:15:66:c6:9c:
5e:7f:5b:b4:cd:53:43:36:11:c4:83:b2:08:28:64:
36:d7:f5:8f:7f:a9:42:f3:34:0c:a8:71:af:ca:b2:
40:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EF:1C:4F:E0:4D:4E:62:B5:BE:81:1A:D1:7B:8D:4D:EB:10:E4:10
X509v3 Authority Key Identifier:
keyid:85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e9:38:04:38:76:f5:7d:61:19:23:8e:7f:c2:bd:a7:5f:ae:
18:8e:3e:8e:76:f1:a4:76:05:5f:26:e4:d6:8f:a8:8a:57:ad:
0a:67:1d:00:04:bd:1f:39:d8:f0:bc:d3:46:cf:7d:64:5a:89:
37:6b:18:ea:c2:fd:16:88:05:ee:64:6e:b4:1e:48:01:af:14:
6c:98:94:33:53:16:57:23:81:7d:04:5c:36:36:b4:1f:8b:8b:
d4:9f:e8:e7:eb:d1:ab:88:be:5c:ed:10:8c:c3:28:9a:0f:bd:
be:7f:c1:3d:da:ea:23:02:ea:55:64:0d:6b:bf:cf:98:a0:76:
d8:09:c3:8a:8d:0b:e3:5f:de:f5:1b:4e:da:79:51:73:50:e2:
45:5c:ed:f3:37:4e:c3:0b:c8:d6:56:ee:98:b9:44:30:7b:df:
9f:6f:ac:14:fd:8a:f0:93:cc:ac:3a:bb:26:2e:c5:9b:f3:e6:
4c:3f:22:00:27:67:05:9f:3f:18:68:98:97:2c:8d:d8:4c:25:
b9:38:09:40:28:46:d9:86:07:20:cf:14:62:e1:60:c7:cd:2c:
d4:aa:64:dc:ee:94:b5:47:51:17:d3:91:17:d7:2e:f8:6f:b5:
76:2a:43:68:4e:77:1d:32:0a:01:aa:4c:3d:e4:45:f9:dc:8b:
f4:ae:db:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:34 2026 by rpki-client