Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
File: HcdSIyHCPRae0zL_SYeczCRRcts.mft (raw, json)
Hash identifier: 6ppDMwPxU95+E6+JY4LCxdUj3bUsdEv0mTmMGVsgU2M=
Subject key identifier: 8D:F9:9A:01:E2:36:CB:2F:0C:83:35:63:88:2D:B2:28:BC:D6:C3:0C
Authority key identifier: 1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
Certificate issuer: /CN=1dc7522321c23d169ed332ff49879ccc245172db
Certificate serial: 01A17996040CA58B71E0A948EF4FA901045C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
Manifest number: 1AC5
Signing time: Mon 26 Oct 2026 19:00:36 +0000
Manifest this update: Mon 26 Oct 2026 19:00:36 +0000
Manifest next update: Tue 27 Oct 2026 19:00:36 +0000
Files and hashes: 1: D_OxhAnuuRTNuSYfLLf4qxnyedg.roa (hash: eNsD4mdPPE5SYBQqb9AhlfA7vpj4V7d04UlZGKNIFFQ=)
2: HcdSIyHCPRae0zL_SYeczCRRcts.crl (hash: lUHmVeuR/UEyGy0ccvnpfPXCheOCtd+6brH37HwowPw=)
3: byBcOBbLOBCidh1QOz7GfJT3FZU.roa (hash: D1e95NHiiiSAaPtZ17YAiZRde48f5w4oz0Jxp2kjKZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:96:04:0c:a5:8b:71:e0:a9:48:ef:4f:a9:01:04:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc7522321c23d169ed332ff49879ccc245172db
Validity
Not Before: Oct 26 19:00:36 2026 GMT
Not After : Oct 27 19:00:36 2026 GMT
Subject: CN=8df99a01e236cb2f0c833563882db228bcd6c30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fb:2f:62:2a:b0:76:42:1d:c7:6d:cd:64:0e:
79:52:68:1e:1b:e3:c7:79:f0:bb:8d:0c:09:dc:23:
1f:e1:6a:9d:16:24:93:f5:f6:c4:83:92:b9:b8:e8:
00:4d:01:13:b1:ce:cc:a6:ae:5a:e4:dc:67:63:f4:
7e:d8:3b:fa:75:f4:ea:09:c9:5c:8b:d4:a3:b3:b2:
54:32:e7:53:cb:bb:fb:df:73:ce:cf:b0:fc:b9:8d:
1a:2c:b9:65:ce:07:31:77:86:9d:22:cb:fe:fa:0a:
12:f3:ab:f4:2e:7b:23:21:1e:1c:ab:59:67:8a:8c:
83:da:50:c8:b2:b7:ee:d7:c1:91:1c:06:e9:0c:fa:
9b:f0:76:5d:96:d4:4b:12:2a:0a:ab:ef:48:5a:b1:
2d:19:13:57:08:eb:18:c5:81:b4:58:de:61:df:ec:
d1:94:8c:95:16:ad:e3:38:d2:bc:34:81:6a:d5:f4:
9c:e0:1d:37:9d:57:db:cb:af:f6:72:17:7c:a7:dc:
5c:17:1b:74:80:0d:e8:11:0b:47:10:c8:01:5d:96:
d3:29:ec:a1:d8:2e:22:8a:f0:23:d2:ec:a5:fc:52:
5f:70:91:f4:45:e4:9f:53:b4:37:72:2b:34:a5:03:
38:62:0c:fd:93:52:85:fd:78:f2:a7:e8:e9:bd:cc:
ed:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F9:9A:01:E2:36:CB:2F:0C:83:35:63:88:2D:B2:28:BC:D6:C3:0C
X509v3 Authority Key Identifier:
keyid:1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:35:dd:11:38:b8:df:9c:21:83:51:84:fb:71:3d:1d:e6:d4:
53:9f:45:f2:b3:c4:65:d0:42:ba:fc:d6:8a:1b:79:c9:4a:2a:
2b:65:1b:51:a7:1a:6c:47:7e:7f:4c:e8:29:0f:dd:49:82:dd:
e3:2b:94:a2:f3:8a:b7:dc:7b:2b:a1:99:c5:dd:da:d5:6e:73:
05:62:9a:8c:ff:ae:83:51:60:88:d4:02:9e:6b:e7:2b:97:d1:
0b:37:35:bf:6d:bc:9e:45:9f:1c:23:cc:30:42:e5:d5:0f:7c:
38:4b:ad:4b:f0:2c:93:29:a2:67:c7:f7:8b:68:9e:8c:55:a1:
aa:a1:27:21:f6:38:9f:48:66:c8:9a:bf:20:7b:3a:7c:9c:5d:
59:ed:01:02:f1:98:b5:d5:16:52:29:a1:74:76:a3:ef:67:d3:
39:f8:a8:79:53:55:9b:fd:fd:b1:33:ec:f8:a9:66:67:f1:62:
21:a8:37:73:c8:5e:48:c5:a7:f1:98:ae:84:bf:1f:a7:ca:4e:
39:03:dd:f1:ab:31:75:1b:9b:c4:53:71:42:67:f8:56:11:ff:
52:d0:d7:6c:c2:5b:00:ec:89:51:55:93:3b:cd:4d:b8:0a:b4:
6b:15:38:88:65:99:26:4c:5a:73:73:06:1b:51:3e:82:8b:5c:
87:64:48:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:59:19 2026 by rpki-client