Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
File: HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft (raw, json)
Hash identifier: 45b5etDLmlym72qaG8iMPebrQsNsvdVAblFz/5JYaCg=
Subject key identifier: DA:65:9F:0D:EC:40:E4:7F:E8:DD:26:F0:C8:FD:41:D9:72:D9:9B:10
Authority key identifier: 1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D
Certificate issuer: /CN=1e40ab40e53860871250e9bac4e163339710595d
Certificate serial: 019E9326A072D43A7CDDB67D4591AD186287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
Manifest number: 1027
Signing time: Thu 04 Jun 2026 15:00:42 +0000
Manifest this update: Thu 04 Jun 2026 15:00:42 +0000
Manifest next update: Fri 05 Jun 2026 15:00:42 +0000
Files and hashes: 1: HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl (hash: sCbGx7OnJaqBxu4AH2Zrn9nKBeeruw76xk0S3BfP090=)
2: XWVE8tIi9ZecbOx1vcvWssJ0eCM.roa (hash: o/4/Wc/Ucw5SFFNzfxfWEkMf/RRNr7V23q3xkukethg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:26:a0:72:d4:3a:7c:dd:b6:7d:45:91:ad:18:62:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e40ab40e53860871250e9bac4e163339710595d
Validity
Not Before: Jun 4 15:00:42 2026 GMT
Not After : Jun 5 15:00:42 2026 GMT
Subject: CN=da659f0dec40e47fe8dd26f0c8fd41d972d99b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a0:98:8e:29:80:33:74:1a:ab:5b:45:02:3a:
a2:2f:52:b2:91:bc:76:9d:1c:5a:b2:c5:69:d0:62:
71:86:fa:27:6a:c4:b4:44:70:ad:65:c2:6d:61:9c:
7e:67:64:4f:a5:bf:2b:77:58:93:3b:95:8f:d9:ec:
81:6f:93:31:84:6f:fa:05:3d:14:de:1b:cb:45:d0:
3b:0d:5d:9f:c5:81:e5:11:57:bc:f0:23:63:94:04:
d3:5d:90:de:83:39:a3:46:e2:fc:21:ed:50:ee:15:
bc:27:b9:83:d4:fb:60:7d:18:b4:db:6f:9d:7b:e6:
c8:96:f5:b0:07:18:23:7c:b0:df:58:e2:36:e6:14:
10:1d:57:80:f2:33:66:98:52:53:b4:70:84:c5:3e:
8e:c2:de:87:5b:e2:86:4c:9c:68:74:de:e9:80:be:
75:8b:d6:e9:ee:f7:00:8d:6a:c5:5e:a4:42:01:48:
10:dd:f5:44:59:0b:be:61:b3:11:f4:03:b6:fa:ab:
7f:62:e5:08:49:58:2b:7d:9e:a9:0d:73:e9:88:2b:
6e:dc:ea:4e:e1:7f:bf:20:94:0e:1d:4b:c4:9c:4b:
b2:1e:e4:f1:82:77:5b:a9:b5:a6:19:31:1d:9c:af:
00:77:0e:2d:7a:d0:17:8e:dc:53:e9:b8:8a:41:7a:
67:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:65:9F:0D:EC:40:E4:7F:E8:DD:26:F0:C8:FD:41:D9:72:D9:9B:10
X509v3 Authority Key Identifier:
keyid:1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e1:e9:e8:c0:34:fe:c5:f0:80:3d:ad:43:2d:dd:5a:d6:82:
7e:17:7e:3b:67:8c:a0:47:5d:0a:fd:45:f8:47:92:9a:99:62:
91:80:42:91:16:3d:0d:ed:26:3d:8c:53:db:7f:60:bd:b2:cd:
c9:3c:db:fa:7f:44:3f:2d:26:74:71:24:a9:1a:5b:c0:95:4d:
45:8c:04:a4:d5:0d:d2:b9:7f:47:97:03:83:74:9c:db:99:8c:
16:a3:d5:cf:a9:a3:4e:7e:79:b7:ac:97:eb:6e:fc:47:71:88:
96:b2:ff:be:11:98:59:02:6d:03:9d:b2:92:b4:16:78:91:e0:
f9:fe:3b:5a:f9:0f:11:26:8f:48:7e:42:dc:3a:f1:44:9d:10:
5c:03:e9:24:6c:74:8e:9b:55:ee:f5:80:62:f6:b9:a5:b5:68:
f4:8e:20:98:eb:48:07:78:a5:8e:03:77:1a:80:fb:23:0f:40:
ff:5a:78:32:a1:f9:24:69:5a:ac:a4:7a:a6:9b:a5:8e:d5:ce:
5e:17:81:06:f1:c4:e9:d9:66:33:9b:06:a1:f5:29:71:9e:71:
8d:a6:20:ff:8f:b7:af:9b:d8:a8:1e:98:d2:af:49:c7:05:85:
53:80:06:67:2f:40:cd:41:97:56:f9:2e:94:db:44:a2:f1:36:
ad:b9:cc:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6TJqBy1Dp83bZ9RZGtGGKHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNDBhYjQwZTUzODYwODcxMjUwZTliYWM0ZTE2MzMzOTcx
MDU5NWQwHhcNMjYwNjA0MTUwMDQyWhcNMjYwNjA1MTUwMDQyWjAzMTEwLwYDVQQD
EyhkYTY1OWYwZGVjNDBlNDdmZThkZDI2ZjBjOGZkNDFkOTcyZDk5YjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKCYjimAM3Qaq1tFAjqiL1Kykbx2
nRxassVp0GJxhvonasS0RHCtZcJtYZx+Z2RPpb8rd1iTO5WP2eyBb5MxhG/6BT0U
3hvLRdA7DV2fxYHlEVe88CNjlATTXZDegzmjRuL8Ie1Q7hW8J7mD1PtgfRi022+d
e+bIlvWwBxgjfLDfWOI25hQQHVeA8jNmmFJTtHCExT6Owt6HW+KGTJxodN7pgL51
i9bp7vcAjWrFXqRCAUgQ3fVEWQu+YbMR9AO2+qt/YuUISVgrfZ6pDXPpiCtu3OpO
4X+/IJQOHUvEnEuyHuTxgndbqbWmGTEdnK8Adw4tetAXjtxT6biKQXpnnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNplnw3sQOR/6N0m8Mj9Qdly2ZsQMB8GA1UdIwQY
MBaAFB5Aq0DlOGCHElDpusThYzOXEFldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGtDclFPVTRZSWNTVU9tNnhPRmpNNWNRV1YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81NTk0ZWQtN2ViOC00MzFlLTkzMGMt
N2Y4NjZkYWE1NDY0LzEvSGtDclFPVTRZSWNTVU9tNnhPRmpNNWNRV1YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81NTk0ZWQtN2ViOC00MzFlLTkzMGMtN2Y4NjZkYWE1NDY0
LzEvSGtDclFPVTRZSWNTVU9tNnhPRmpNNWNRV1YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt+Hp6MA0
/sXwgD2tQy3dWtaCfhd+O2eMoEddCv1F+EeSmplikYBCkRY9De0mPYxT239gvbLN
yTzb+n9EPy0mdHEkqRpbwJVNRYwEpNUN0rl/R5cDg3Sc25mMFqPVz6mjTn55t6yX
6278R3GIlrL/vhGYWQJtA52ykrQWeJHg+f47WvkPESaPSH5C3DrxRJ0QXAPpJGx0
jptV7vWAYva5pbVo9I4gmOtIB3iljgN3GoD7Iw9A/1p4MqH5JGlarKR6ppuljtXO
XheBBvHE6dlmM5sGofUpcZ5xjaYg/4+3r5vYqB6Y0q9JxwWFU4AGZy9AzUGXVvku
lNtEovE2rbnMlg==
-----END CERTIFICATE-----
Generated at Thu Jun 4 17:24:21 2026 by rpki-client