Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
File: HcdSIyHCPRae0zL_SYeczCRRcts.mft (raw, json)
Hash identifier: pMbrRgeewSnpn8yHcrtvBRGbCpc9GUPj5pHyBwDUV0I=
Subject key identifier: 3C:63:E1:47:02:00:29:ED:EF:AD:14:E8:8F:4E:BF:7A:6F:4B:AB:56
Authority key identifier: 1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
Certificate issuer: /CN=1dc7522321c23d169ed332ff49879ccc245172db
Certificate serial: 019FA071BE7623460D8B45B686C04C7D0CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
Manifest number: 19D0
Signing time: Sun 26 Jul 2026 22:00:36 +0000
Manifest this update: Sun 26 Jul 2026 22:00:36 +0000
Manifest next update: Mon 27 Jul 2026 22:00:36 +0000
Files and hashes: 1: D_OxhAnuuRTNuSYfLLf4qxnyedg.roa (hash: eNsD4mdPPE5SYBQqb9AhlfA7vpj4V7d04UlZGKNIFFQ=)
2: HcdSIyHCPRae0zL_SYeczCRRcts.crl (hash: KurrGik6/cXdc0iXpdA4RqAd1m+glCeOppdLyd+uSSk=)
3: byBcOBbLOBCidh1QOz7GfJT3FZU.roa (hash: D1e95NHiiiSAaPtZ17YAiZRde48f5w4oz0Jxp2kjKZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:be:76:23:46:0d:8b:45:b6:86:c0:4c:7d:0c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc7522321c23d169ed332ff49879ccc245172db
Validity
Not Before: Jul 26 22:00:36 2026 GMT
Not After : Jul 27 22:00:36 2026 GMT
Subject: CN=3c63e147020029edefad14e88f4ebf7a6f4bab56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3d:5f:79:79:fe:8b:a8:42:30:56:cf:96:0a:
24:28:c2:96:99:1d:3a:01:ef:1a:b7:52:e9:5a:3b:
c5:7b:37:05:9f:f9:69:76:97:f9:ad:6b:75:73:84:
4d:6c:32:44:aa:51:f3:19:ee:d5:5b:04:bc:e0:65:
21:03:26:9f:30:32:2d:e4:7f:bb:73:a7:45:94:5c:
86:bd:1b:fb:cb:c4:f2:d6:74:c0:1d:ac:28:a8:0b:
b0:06:b0:d3:47:6d:d6:6d:bb:9b:be:b1:1a:78:3c:
7b:dd:59:f9:21:8a:42:8d:b3:eb:04:9e:5f:08:7c:
3b:7f:1e:49:06:a7:80:04:40:0d:2f:8c:9a:17:6b:
58:0d:61:3d:16:23:ee:63:f4:63:02:c7:6d:bf:be:
d0:30:b1:75:f1:61:3a:09:3a:02:67:ce:0e:6c:00:
ec:2c:72:a8:0e:a5:82:95:0d:76:74:c6:ab:8d:40:
6e:0d:9b:86:1d:90:ae:02:bf:07:5b:5c:08:9d:48:
97:bc:79:cb:3a:df:2e:53:75:74:f4:30:19:13:20:
43:5d:72:bd:f5:55:9e:fc:d9:a1:55:a9:6f:87:07:
6f:9d:df:6b:9b:a6:6c:01:64:b4:d3:15:76:e5:b1:
b2:2f:c5:5a:4d:4e:31:92:d5:45:61:b7:2d:67:6a:
08:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:63:E1:47:02:00:29:ED:EF:AD:14:E8:8F:4E:BF:7A:6F:4B:AB:56
X509v3 Authority Key Identifier:
keyid:1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:29:b0:13:84:dd:48:7b:14:b3:a3:57:35:85:25:28:1b:0a:
75:6c:37:15:a3:8c:a0:79:8b:18:06:0a:42:80:f2:11:7a:13:
6c:12:7c:4b:06:e8:8b:6d:2d:c3:a3:03:f8:0c:ba:e9:9f:7d:
66:49:95:8f:f3:67:37:98:6e:c8:be:ec:fa:7e:22:37:27:1d:
93:62:8d:b3:3e:85:f0:a0:b9:a6:53:25:7d:ee:c0:cd:a3:4e:
e8:a0:4e:f9:fe:aa:08:13:9b:3e:81:f3:3f:8a:ab:74:95:0e:
72:97:08:01:82:68:a5:6c:35:ed:bf:83:c3:13:a0:8c:00:eb:
c4:ec:55:94:84:67:c3:51:85:fd:96:1d:3b:b6:6d:af:05:48:
c8:bc:0c:de:25:90:93:a8:6e:48:bf:d8:d0:99:23:00:3e:f4:
ce:09:79:5a:8d:ee:e7:cb:c0:b5:ac:ee:7d:72:80:e6:18:b9:
2f:29:ad:92:ba:d2:79:c7:47:32:ae:09:b6:8e:4e:8f:43:4a:
37:14:89:ae:1a:68:dd:71:50:7f:f6:8c:a4:0c:c1:fa:83:b4:
a4:4a:10:28:2b:07:ab:55:2d:6b:07:e0:ae:ff:28:25:4d:ec:
64:3f:fd:80:ec:5a:74:03:f6:e6:1a:e1:8c:29:ba:5a:1d:46:
cf:29:c0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:21:54 2026 by rpki-client