Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
File: HcdSIyHCPRae0zL_SYeczCRRcts.mft (raw, json)
Hash identifier: BYTd8d1MNLrqlCGcBMxulmx6pTKQScPxVt5Bi13eLfg=
Subject key identifier: 8D:D6:F3:FD:57:C0:76:39:62:F9:CE:E7:29:04:C6:C1:19:94:74:C5
Authority key identifier: 1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
Certificate issuer: /CN=1dc7522321c23d169ed332ff49879ccc245172db
Certificate serial: 019D3A53DE51A157DEDE5546D18BD2AB4642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 16:01:08 +0000
Manifest this update: Sun 29 Mar 2026 16:01:08 +0000
Manifest next update: Mon 30 Mar 2026 16:01:08 +0000
Files and hashes: 1: D_OxhAnuuRTNuSYfLLf4qxnyedg.roa (hash: eNsD4mdPPE5SYBQqb9AhlfA7vpj4V7d04UlZGKNIFFQ=)
2: HcdSIyHCPRae0zL_SYeczCRRcts.crl (hash: 8++E2z/cbLu02nLfeC054CZrRsCSzAThqMQ9JmVK6Ug=)
3: byBcOBbLOBCidh1QOz7GfJT3FZU.roa (hash: D1e95NHiiiSAaPtZ17YAiZRde48f5w4oz0Jxp2kjKZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:de:51:a1:57:de:de:55:46:d1:8b:d2:ab:46:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc7522321c23d169ed332ff49879ccc245172db
Validity
Not Before: Mar 29 16:01:08 2026 GMT
Not After : Mar 30 16:01:08 2026 GMT
Subject: CN=8dd6f3fd57c0763962f9cee72904c6c1199474c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:66:e2:28:fc:aa:9b:90:0b:b6:d5:20:63:4a:
55:f8:3e:2d:99:57:c1:56:3d:b5:05:c0:09:d5:05:
9e:d4:fc:a8:36:30:8d:56:2a:bd:b3:55:51:52:c2:
13:4f:bb:7b:9e:3b:fa:cd:25:70:58:b6:ac:80:df:
66:5d:3e:24:3b:13:bb:a2:b8:66:0d:64:0f:8c:90:
b9:52:66:0a:c6:2d:c2:47:60:06:44:2c:72:7a:57:
de:c0:67:f4:3e:6d:b3:c1:45:2f:f9:09:73:14:88:
18:98:9a:73:20:97:04:fb:6f:2b:f4:43:ea:aa:c8:
47:3a:99:e5:05:31:02:c1:09:e4:71:6e:53:f0:06:
85:65:d6:ce:35:34:43:f5:18:d2:8a:76:dc:a7:36:
7c:b0:cd:3f:f9:b3:d4:f4:95:e7:65:91:c3:09:f0:
58:54:a0:ca:88:42:1e:eb:22:14:b5:3b:7d:d6:48:
6e:95:a1:42:14:da:29:72:c5:c4:b2:88:25:27:fc:
73:f6:d3:0f:d7:48:8f:9e:b7:dd:5f:1c:d1:8a:87:
1b:e9:ef:06:4b:ff:2d:d2:7e:1d:08:0e:8f:dd:84:
44:b4:4b:f2:68:3e:b8:6c:7f:ed:55:4f:22:f3:c9:
6e:7d:33:a8:3e:4d:6c:ef:8f:1b:26:05:0d:a3:66:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D6:F3:FD:57:C0:76:39:62:F9:CE:E7:29:04:C6:C1:19:94:74:C5
X509v3 Authority Key Identifier:
keyid:1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:23:27:1f:d0:ae:6c:10:d3:36:0e:0a:2d:4b:66:af:04:f8:
c2:19:90:1b:87:ec:ce:c6:b3:07:f8:46:93:9c:42:03:05:7b:
51:a4:34:a2:1c:a2:e1:0b:b1:27:95:a5:e0:4f:de:b5:01:85:
7a:e0:70:2a:79:52:b8:07:47:29:10:2e:5f:06:e4:7a:ad:fe:
86:a6:96:24:b5:a8:f8:88:46:36:3d:54:94:58:ce:ba:ed:98:
83:10:a5:c6:9f:14:1b:3d:ec:39:d0:68:cf:6b:d4:3b:e6:68:
78:ca:df:44:3b:a7:99:7a:6b:1b:d1:01:ac:4c:78:12:4b:c4:
1e:eb:78:65:ed:e5:01:f8:59:cf:4a:c1:b9:c0:39:ad:19:36:
b8:5e:29:cd:7b:59:35:4d:a7:6d:cc:a7:85:be:24:5f:9b:cd:
d8:61:0f:29:85:75:8c:a5:73:74:0e:db:85:04:90:55:02:75:
1a:d8:55:12:08:ac:b8:c6:00:df:83:70:d4:52:d3:77:1b:12:
1a:40:a8:0c:c3:04:31:95:91:4f:5c:5e:b1:63:5f:9a:63:ff:
fc:60:55:ac:ca:de:cb:7f:6a:97:12:5d:79:66:19:d5:8e:22:
fe:0c:2a:8b:2a:b9:ff:1d:d6:12:97:0e:c2:eb:34:b0:cb:aa:
ef:cd:8d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:49:14 2026 by rpki-client