Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
File: HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft (raw, json)
Hash identifier: fFCxBJkjL1NYD3T02L9pd1Q3b+zGJUH9Yx+bHyZ80zg=
Subject key identifier: CA:10:A7:8E:AA:81:7C:FA:27:2E:5D:66:AB:3B:8B:4E:09:1A:72:36
Authority key identifier: 1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D
Certificate issuer: /CN=1e40ab40e53860871250e9bac4e163339710595d
Certificate serial: 019D397811053582E11C64E06C1C217EC343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
Manifest number: 0F74
Signing time: Sun 29 Mar 2026 12:01:03 +0000
Manifest this update: Sun 29 Mar 2026 12:01:03 +0000
Manifest next update: Mon 30 Mar 2026 12:01:03 +0000
Files and hashes: 1: HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl (hash: zR7NRTljDbnXZBFGkYjIcHBrv6x03WOm89wv1LtJbFU=)
2: XWVE8tIi9ZecbOx1vcvWssJ0eCM.roa (hash: o/4/Wc/Ucw5SFFNzfxfWEkMf/RRNr7V23q3xkukethg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:11:05:35:82:e1:1c:64:e0:6c:1c:21:7e:c3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e40ab40e53860871250e9bac4e163339710595d
Validity
Not Before: Mar 29 12:01:03 2026 GMT
Not After : Mar 30 12:01:03 2026 GMT
Subject: CN=ca10a78eaa817cfa272e5d66ab3b8b4e091a7236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:22:81:67:67:ff:ab:15:84:af:4a:19:62:
6c:fc:82:fd:8b:6b:6f:6e:28:25:de:6b:7d:13:d8:
94:65:13:9e:6c:63:44:6b:57:40:19:2f:4a:3e:bb:
6d:53:ff:5b:05:74:7e:75:f1:7b:11:c9:c4:f5:03:
c6:b8:3e:79:a4:23:fa:38:38:d4:f4:86:6d:a7:d1:
e6:f8:af:c1:6a:d4:8d:1b:9d:16:48:38:99:c2:72:
1d:d6:a3:48:09:7f:f8:90:2e:61:70:f0:3b:91:60:
ec:16:4e:a2:48:df:b9:8f:d1:2c:6b:7e:25:2d:6a:
b0:74:63:08:0c:a2:d4:de:89:b7:5a:a5:df:37:34:
1c:6d:b0:c0:51:f2:cf:82:64:2c:9f:22:ed:75:75:
88:16:10:cd:cc:6d:cd:5f:3c:4c:a4:29:79:ee:78:
ef:ab:bb:09:fb:f1:56:6b:70:01:49:8d:af:0b:19:
91:21:72:1a:6f:2a:7a:e7:b8:1a:30:bf:15:f6:bc:
c2:9e:28:1d:a5:41:cc:50:8c:62:a4:02:96:b7:4f:
bb:5d:7c:03:c1:ba:3b:39:8b:2a:f1:7c:92:49:a6:
ca:79:61:dd:5b:ad:8e:8a:ea:ea:8b:c5:69:8f:4a:
5d:e9:5d:f2:96:77:30:68:e9:1c:24:23:3a:95:f9:
33:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:10:A7:8E:AA:81:7C:FA:27:2E:5D:66:AB:3B:8B:4E:09:1A:72:36
X509v3 Authority Key Identifier:
keyid:1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0a:2f:1e:77:69:18:71:6d:92:22:c2:d9:7b:7b:e1:85:12:
a6:e5:03:40:d7:b6:f9:7c:f3:e5:72:ec:ff:c9:a1:02:a2:d6:
ea:d7:bf:c8:29:e9:d1:15:05:5a:ef:bf:a8:82:1c:24:14:61:
e9:cf:5d:eb:8e:4f:f9:c9:de:16:51:72:f3:14:c4:3c:92:52:
a9:2f:4b:3d:bb:29:a5:3d:5c:a0:9b:e5:28:54:86:5b:19:4c:
cd:d5:77:70:f1:f9:d2:d8:66:a0:a3:32:43:1a:a3:84:1b:6d:
7a:92:61:3c:a2:38:d7:37:99:8c:8f:42:75:d9:a4:5b:f0:68:
29:da:e1:d3:0a:03:8b:dd:f9:97:c9:52:a7:a5:e5:e2:b3:ed:
df:57:fb:91:2a:76:66:b7:4c:78:cf:f1:b1:07:ab:1f:78:63:
f4:ff:5d:c8:ef:e6:06:08:2b:b9:de:e2:8a:35:84:ec:ff:f6:
7a:da:b8:bf:cb:43:6e:ca:e9:f8:17:c3:25:ec:41:14:43:e4:
7c:2f:2a:1d:cd:9c:00:06:b8:81:3f:13:cf:60:1a:d0:b5:9d:
5b:cf:c2:b4:8f:5c:de:6b:25:23:cb:c6:3c:5f:62:63:b0:c3:
c0:aa:42:77:a0:35:f3:d6:a8:cc:a8:62:cc:28:d3:38:ef:71:
9a:3d:a6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:33 2026 by rpki-client