Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
File: HcHvY3SZioToDl4w2gmmn0_-qJI.mft (raw, json)
Hash identifier: JhLUXLXOGPNmK0YB2PoTB17Eb8mSni/rcWsuNo+m3Xw=
Subject key identifier: FE:81:5E:B4:B3:11:93:99:70:D4:9E:53:72:53:6C:CE:8F:D4:47:68
Authority key identifier: 1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92
Certificate issuer: /CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892
Certificate serial: 019F12D3C0D152CDFB7BCBD545E43172EB5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
Manifest number: 023D
Signing time: Mon 29 Jun 2026 10:01:35 +0000
Manifest this update: Mon 29 Jun 2026 10:01:35 +0000
Manifest next update: Tue 30 Jun 2026 10:01:35 +0000
Files and hashes: 1: HcHvY3SZioToDl4w2gmmn0_-qJI.crl (hash: xH3yd0WXMTqrH7sdIBrBlSNt8x8eD/Rt7CvQHbDbaaE=)
2: eydd9b9yJG4u8PDoXh8HYchwXcQ.asa (hash: XLJ8T9Pn5PjpqOyDdfyyg17qfr7NWdf6Z89qNT5NgvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:c0:d1:52:cd:fb:7b:cb:d5:45:e4:31:72:eb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892
Validity
Not Before: Jun 29 10:01:35 2026 GMT
Not After : Jun 30 10:01:35 2026 GMT
Subject: CN=fe815eb4b311939970d49e5372536cce8fd44768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9e:2a:e7:75:a6:f3:39:9a:9f:64:b5:74:ce:
ea:f2:e6:dc:b4:ed:9b:36:1c:fb:e7:35:1c:d3:40:
09:90:d9:01:0e:ba:27:1c:04:1f:47:3e:65:8a:87:
a1:eb:6a:c3:c5:d5:ce:97:46:7d:9c:33:b3:18:ce:
a3:af:ab:8b:95:23:f4:a5:b0:6c:f0:91:75:43:65:
f1:9c:6c:f6:10:71:7f:aa:ed:ca:4e:10:57:4b:7b:
02:05:0b:2f:78:88:02:07:d1:31:d5:aa:2d:eb:b6:
6f:90:0d:0c:dd:44:00:58:38:97:28:37:18:59:06:
11:c6:19:90:fc:11:ef:0d:d5:9e:72:10:8b:c8:b9:
2c:cd:b6:dc:1f:f1:51:7e:b6:ab:64:1a:fd:42:1c:
26:ee:a6:f1:67:93:ce:29:bf:fd:7e:45:62:5e:de:
c5:5f:72:dc:b7:79:a1:f1:e0:3e:19:7e:fd:c6:2d:
cc:6c:9f:49:23:d2:3c:9a:3c:da:20:22:66:44:bb:
dd:f6:ef:6e:f1:71:4f:be:e3:85:9b:3c:3a:76:9e:
13:78:ef:61:dc:f9:b8:ff:1b:d9:3d:06:b2:d9:cc:
83:4f:a0:df:30:90:29:5c:14:3b:30:ce:8c:6c:31:
cd:5a:ff:ea:fd:3c:ea:03:7b:d2:fa:16:b6:4a:eb:
d4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:81:5E:B4:B3:11:93:99:70:D4:9E:53:72:53:6C:CE:8F:D4:47:68
X509v3 Authority Key Identifier:
keyid:1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:96:0b:31:81:73:94:f6:b4:c8:9b:9a:51:2c:bc:85:f4:0f:
d9:15:0c:8f:08:96:b2:4b:13:91:1e:17:d6:e1:75:95:c2:37:
be:8e:e8:f0:43:e1:a7:a9:bc:6c:b7:d1:a4:3e:74:e0:3d:2a:
d9:77:8d:1f:f4:29:11:4a:ab:ae:17:00:c5:30:27:6a:eb:85:
f6:10:4d:8c:3a:dc:28:80:b6:cd:0a:58:5a:bc:26:54:f0:c6:
5f:21:31:55:81:1e:41:d0:d1:0e:2d:94:e5:3c:e7:0f:10:c6:
30:36:29:2b:4d:32:20:d5:dd:e2:48:f7:07:1f:1d:8f:b6:31:
d2:18:e4:bc:fe:5b:b8:c7:55:02:6f:58:87:29:56:db:f7:c7:
65:83:3f:69:27:27:32:9a:2e:20:d2:4e:df:ad:3d:99:a9:ef:
ad:08:b9:61:82:b9:88:7f:d0:d0:0c:c1:82:16:fb:93:51:17:
7b:2e:a8:04:5f:4e:b0:f5:f6:25:30:04:e4:0c:f7:12:f8:31:
64:dd:81:07:b8:b9:87:6e:8b:9b:ba:b2:ca:e8:40:06:1a:81:
21:c4:9a:b8:ce:5c:42:d1:11:e5:db:45:03:1a:79:a1:0d:b6:
40:c4:99:3d:1c:d6:7a:fa:fe:be:2e:d5:b6:9f:1e:ca:9a:08:
c1:89:3e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:40:31 2026 by rpki-client