Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
File: HCtQ2u86DL23KyPKPbvvwVc1g_k.mft (raw, json)
Hash identifier: Sp1HZsYaSIZ57vvPEnDrfQFzzQQQJ+98g/HT/pqIK+s=
Subject key identifier: 8D:C6:A8:9F:2B:8C:0A:6F:FD:64:8B:B4:C7:DE:C6:A8:A0:FE:0F:F3
Authority key identifier: 1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
Certificate issuer: /CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Certificate serial: 019D3865B30EE3AE2C53EDA9D24AA4D05A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
Manifest number: 0DB5
Signing time: Sun 29 Mar 2026 07:01:22 +0000
Manifest this update: Sun 29 Mar 2026 07:01:22 +0000
Manifest next update: Mon 30 Mar 2026 07:01:22 +0000
Files and hashes: 1: HCtQ2u86DL23KyPKPbvvwVc1g_k.crl (hash: Kz8oMWzf17BcPTPaMDlInt7cspUoIWvFfwU017hA03Y=)
2: Mk8DlpfeRRa1qg1nk0Mvu-YumPw.roa (hash: mUVvW47r5i0R+fZsLAsCtRCsk0x6xVLyquq+qyROV1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b3:0e:e3:ae:2c:53:ed:a9:d2:4a:a4:d0:5a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Validity
Not Before: Mar 29 07:01:22 2026 GMT
Not After : Mar 30 07:01:22 2026 GMT
Subject: CN=8dc6a89f2b8c0a6ffd648bb4c7dec6a8a0fe0ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:a5:8b:f7:7b:b0:25:72:c6:c0:3c:fd:4b:
3a:d9:e8:63:a5:11:e1:6a:35:1e:b1:3d:c7:c9:bb:
44:65:f4:13:8a:ef:a6:a6:04:54:22:24:94:25:c2:
2e:2b:9a:96:a1:15:4e:37:9c:39:a7:45:99:91:fe:
25:10:50:e0:ec:22:4a:74:3e:49:3b:63:e6:3a:e9:
60:22:7d:cc:13:60:82:72:41:ba:e3:9a:c9:ac:70:
52:36:06:4f:56:ca:75:ee:09:a0:95:33:4d:b0:2b:
d9:b2:0f:c4:8a:93:08:f1:40:6c:52:d0:19:28:01:
53:a5:63:96:72:79:52:b1:15:c0:68:bd:16:5b:dd:
35:27:0a:e6:02:e9:c0:5c:f7:d6:03:89:cd:05:ba:
66:d1:79:fb:bb:ab:01:e5:6e:b9:eb:8e:ac:a2:fe:
0f:8a:07:b0:7a:92:19:e8:d0:7b:66:a0:d9:b7:e3:
e2:0d:7d:bd:c4:71:a1:93:9c:de:de:44:02:a9:01:
95:eb:26:37:87:e1:7f:40:65:0b:ca:87:49:46:85:
4c:2c:ff:22:ac:d0:08:08:05:3e:43:15:45:05:67:
07:88:66:00:23:40:2d:5f:2b:c5:80:8e:5d:1d:a8:
89:a4:b0:af:ec:a4:1d:ae:95:7e:39:28:89:e4:6f:
0f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C6:A8:9F:2B:8C:0A:6F:FD:64:8B:B4:C7:DE:C6:A8:A0:FE:0F:F3
X509v3 Authority Key Identifier:
keyid:1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:13:48:f8:3b:96:2a:65:ef:2e:20:0a:68:7b:a2:10:b4:45:
79:e7:ad:24:91:8e:2c:08:15:13:41:48:6f:b8:fe:71:9c:d9:
c9:47:3e:7c:81:60:7c:db:79:c6:18:98:10:8a:c9:31:34:b5:
25:7a:27:ec:2b:20:a9:a7:0e:05:2a:5d:bf:5f:15:50:7c:7d:
d2:f7:8c:fe:ff:0d:07:65:c6:a3:59:50:ef:bd:92:29:c7:33:
13:30:a0:b1:19:f4:b2:4d:81:4e:6d:09:4f:6a:fc:55:07:87:
2e:f7:c9:ef:9b:9e:a1:ff:56:b7:bb:46:53:1b:5c:47:cf:7d:
ba:b4:18:23:80:5a:fd:32:16:a5:ec:6d:7e:37:eb:ef:7e:9a:
e7:41:8e:ba:30:f8:3b:d2:07:32:6a:ae:07:0c:31:cf:5e:67:
f7:da:dc:06:6a:b1:bf:93:90:09:b8:d2:72:3e:eb:7c:d1:75:
7f:9c:6f:7a:f8:1f:39:77:7c:74:8b:ed:61:66:56:b8:b5:01:
10:fe:2c:5a:d2:9f:4d:5e:80:75:36:51:21:f1:97:1b:00:ef:
05:56:c3:cf:89:55:3e:7b:3d:39:4c:5d:8b:64:e5:ca:9d:a5:
98:b2:a2:ee:e0:37:b4:7e:25:3d:2c:63:e4:7c:ab:30:f7:8a:
1d:39:d7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:34 2026 by rpki-client