Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
File: HcHvY3SZioToDl4w2gmmn0_-qJI.mft (raw, json)
Hash identifier: 7nFtV6kSLehuGKVLo8WPk3w2SWTpzYayVpB+MduIuN4=
Subject key identifier: C8:6F:B8:C2:FA:FC:BE:D7:32:DF:6F:7F:F4:F4:41:9F:06:D9:E1:5D
Authority key identifier: 1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92
Certificate issuer: /CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892
Certificate serial: 019E2926C24AAC4F61D2784CC615E0776665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
Manifest number: 01C4
Signing time: Fri 15 May 2026 01:01:06 +0000
Manifest this update: Fri 15 May 2026 01:01:06 +0000
Manifest next update: Sat 16 May 2026 01:01:06 +0000
Files and hashes: 1: HcHvY3SZioToDl4w2gmmn0_-qJI.crl (hash: uq9s3PKGvru9kj2NYOP2nOJqtVq5zjKQeyRLVbX1MJU=)
2: eydd9b9yJG4u8PDoXh8HYchwXcQ.asa (hash: XLJ8T9Pn5PjpqOyDdfyyg17qfr7NWdf6Z89qNT5NgvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:26:c2:4a:ac:4f:61:d2:78:4c:c6:15:e0:77:66:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892
Validity
Not Before: May 15 01:01:06 2026 GMT
Not After : May 16 01:01:06 2026 GMT
Subject: CN=c86fb8c2fafcbed732df6f7ff4f4419f06d9e15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:51:f2:35:26:d7:56:d3:83:02:3f:54:70:8e:
4d:93:88:cc:b4:d8:96:91:66:c8:9e:0b:57:7f:0a:
bf:f5:58:ec:b5:9e:b2:3c:20:17:42:18:70:86:89:
e7:eb:a9:a7:f8:70:de:cc:82:0e:e1:1e:67:b4:14:
ed:71:62:2c:6c:9b:c1:58:1b:28:49:41:46:8e:09:
7b:6e:dd:df:9c:bd:10:47:b9:b8:d8:1b:e7:35:06:
cf:75:2d:3a:05:cb:f7:05:09:93:19:e8:a9:00:c8:
f1:2f:a6:cf:90:4a:e5:5a:0b:9b:51:e1:a7:6f:d3:
5b:8c:fe:39:fc:c8:58:bc:53:6e:6a:cf:bb:a7:db:
a1:3f:70:cf:c1:d2:3c:ec:c2:7f:b0:b1:97:46:d0:
1c:3b:a5:bc:db:78:51:6b:de:82:99:92:9b:ac:13:
94:0e:49:8e:45:c2:4a:0f:51:6d:b0:7b:62:d1:ad:
e9:61:6b:b4:16:b7:ce:c3:5e:10:f8:3c:8e:08:f7:
23:9a:89:1d:28:eb:e3:11:9c:22:8f:6f:66:ac:18:
9f:0d:80:9d:53:ea:90:c1:18:a7:a3:ae:1f:96:2c:
86:a0:00:3e:79:4b:29:7e:ed:5e:6d:bc:35:99:2d:
5c:71:10:6c:85:ef:3d:d3:73:ee:39:e5:84:4c:6b:
38:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6F:B8:C2:FA:FC:BE:D7:32:DF:6F:7F:F4:F4:41:9F:06:D9:E1:5D
X509v3 Authority Key Identifier:
keyid:1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f4:44:19:f7:92:cb:2d:a7:ea:d4:28:f8:93:b2:3a:80:a3:
ab:2c:01:b1:f6:bd:21:b3:b6:ce:20:27:67:85:b5:e2:e4:9e:
bb:f4:fd:2c:ab:e8:5c:93:8c:c0:eb:aa:91:cc:44:90:30:e4:
4b:de:83:1c:b6:48:18:eb:92:f6:3b:12:ce:2d:c9:4c:b4:6e:
c9:e9:7a:63:1b:73:87:7f:ca:64:c9:cf:a0:88:c3:35:1f:8e:
44:ae:3a:d0:26:b7:1b:01:d8:d3:3b:f7:5b:e1:6d:41:f7:1a:
8e:4d:da:77:a5:e7:24:99:3f:5f:7b:a7:9f:bf:70:9a:36:e0:
6c:ed:a8:ea:14:25:a4:8b:b9:79:9e:a5:ff:a7:ad:27:98:39:
e5:fe:69:36:be:91:d6:bf:e9:ef:7f:6d:2a:56:27:d2:4f:00:
8e:9e:50:17:93:4a:3d:8d:d6:18:a4:f8:f6:d2:79:01:0f:20:
49:50:b3:66:45:16:f0:60:e8:bb:e8:1a:e3:37:fc:90:46:3a:
ef:fd:76:03:1a:4a:7e:c5:00:a8:c5:14:2d:08:8c:7e:b3:02:
89:87:19:08:b4:18:83:bc:1a:b1:5c:5c:78:89:9f:b0:76:8a:
40:1f:0f:8b:96:2c:5f:2a:a0:8a:ae:63:f2:b3:9e:9d:83:77:
48:df:1f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:24 2026 by rpki-client