Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
File: HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json)
Hash identifier: w0SpZIZ0p1P1vUeoRmwN8fAYXGWU49qaW7+/TMnQQBA=
Subject key identifier: D9:EB:BB:71:27:1B:2A:40:56:95:DD:B7:2B:D4:D7:B3:55:C0:DA:D8
Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
Certificate issuer: /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Certificate serial: 019E74AEB3FB8DEE58894240D08897BC9553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
Manifest number: 08A4
Signing time: Fri 29 May 2026 17:01:06 +0000
Manifest this update: Fri 29 May 2026 17:01:06 +0000
Manifest next update: Sat 30 May 2026 17:01:06 +0000
Files and hashes: 1: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: e5mO34eHVgXfM/MNneVRJw5HPkRHkn0kW6ymy3K8+2g=)
2: Kl7ksgdkf5mddCaAPgAWOeKhVvg.roa (hash: rOa18GJtuQqpcGIrwGnhcp3m4z08/3Ol4xsmgiWc0ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 30 May 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:74:ae:b3:fb:8d:ee:58:89:42:40:d0:88:97:bc:95:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Validity
Not Before: May 29 17:01:06 2026 GMT
Not After : May 30 17:01:06 2026 GMT
Subject: CN=d9ebbb71271b2a405695ddb72bd4d7b355c0dad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:55:f0:e3:c2:38:57:cd:c4:5c:9a:2c:92:
6b:e6:ec:fb:a0:dd:57:dd:e4:de:fa:80:41:bd:20:
35:74:7a:bb:1a:7c:e5:8a:f8:74:1f:c8:73:86:05:
7b:1a:e7:2f:f4:92:29:8c:df:d5:fe:d4:30:a1:2e:
7a:23:9f:46:a3:14:aa:63:cc:f5:0b:43:24:30:4a:
d8:59:eb:95:85:6c:a4:13:94:3b:86:4c:b3:e9:d9:
f6:09:86:b5:4a:a5:fe:96:d9:b9:a4:cf:c0:e1:33:
fa:ad:ae:16:1e:27:dc:0f:d9:be:98:62:62:b9:69:
12:cd:c8:30:fc:d3:8c:93:c8:47:7f:88:c8:eb:ff:
dd:3d:34:6d:90:5b:2b:90:3c:8a:ad:a6:ff:de:e8:
20:4f:ac:cb:3f:fe:9a:35:b7:55:42:dd:ef:3d:48:
e8:13:48:7b:68:82:2a:d0:2a:0d:63:61:af:ba:06:
58:97:d4:4b:21:01:63:25:00:29:c0:62:1a:52:e8:
4a:44:68:b7:56:1b:7d:1c:1e:2f:fc:37:25:ba:a5:
e6:a3:4a:69:d8:37:fd:35:2d:da:5d:e7:f7:5e:89:
f2:17:6b:68:69:f1:b9:cf:97:31:2b:99:13:f8:ea:
e5:71:72:7c:7e:7a:1a:2b:78:af:b8:0e:34:d7:f6:
6c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EB:BB:71:27:1B:2A:40:56:95:DD:B7:2B:D4:D7:B3:55:C0:DA:D8
X509v3 Authority Key Identifier:
keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7b:7f:71:91:71:99:2c:8b:cd:d3:57:69:ba:b3:cf:f1:32:
7d:cf:b9:08:ed:74:0b:e9:6f:ef:0a:f6:a9:bc:65:02:d1:5e:
c4:d3:9b:b4:88:fa:8f:7c:88:02:89:f7:61:28:34:ff:cc:d8:
48:20:5b:5f:27:c6:cd:1f:99:09:7d:34:5a:a7:1c:c8:88:38:
93:90:5f:1e:41:3e:9c:a1:24:80:e7:5c:8b:09:1d:ec:76:e4:
e1:86:75:19:12:aa:4e:c6:72:21:2c:8d:dd:a1:c4:cc:46:09:
35:da:03:43:10:76:63:e2:ce:72:28:f8:75:20:bc:10:b1:2b:
59:ae:7d:96:de:f7:97:21:39:cf:9d:6d:76:45:76:aa:b9:7c:
6e:ef:fd:3b:d6:df:50:69:73:39:73:36:8d:20:27:a9:b8:34:
2e:be:f6:97:35:98:b8:d9:44:a0:3e:70:8a:b2:aa:8a:09:0e:
56:d3:14:40:ab:a2:5a:3f:20:39:ea:56:10:30:a9:0d:a0:18:
47:07:0d:7f:46:f5:9a:78:ac:04:18:3c:68:2a:9d:36:cb:b5:
51:80:ff:64:f8:51:b8:46:75:97:f0:e1:f4:56:b3:70:c8:bb:
4d:44:0a:89:87:4f:11:74:b6:a9:22:8a:b1:f4:8e:47:0c:4d:
ec:89:e4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:15:50 2026 by rpki-client