Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
File: HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json)
Hash identifier: zLe5OCJ/RGWEqWHTkqPLXBAs4trSax4e3zDi6FWBQqw=
Subject key identifier: AF:D3:F1:5F:7F:E3:BE:42:7C:52:10:4F:18:4F:09:FE:87:C5:75:9C
Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
Certificate issuer: /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Certificate serial: 01A06EA71DC74FB053B5836C1F2A1CB35F5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
Manifest number: 09AA
Signing time: Fri 04 Sep 2026 23:00:40 +0000
Manifest this update: Fri 04 Sep 2026 23:00:40 +0000
Manifest next update: Sat 05 Sep 2026 23:00:40 +0000
Files and hashes: 1: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: OVDfKW27KGfIL30tNEVJcQ2Ta8f5G4Oyq/Eyu4+Eba0=)
2: Kl7ksgdkf5mddCaAPgAWOeKhVvg.roa (hash: rOa18GJtuQqpcGIrwGnhcp3m4z08/3Ol4xsmgiWc0ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:1d:c7:4f:b0:53:b5:83:6c:1f:2a:1c:b3:5f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Validity
Not Before: Sep 4 23:00:40 2026 GMT
Not After : Sep 5 23:00:40 2026 GMT
Subject: CN=afd3f15f7fe3be427c52104f184f09fe87c5759c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:e2:40:92:aa:44:db:2d:96:0e:57:b4:a2:
3c:b2:48:56:e7:80:2a:89:b9:9e:17:99:fe:cf:3c:
03:9d:8c:4c:0c:2d:a3:35:0b:33:49:26:78:f3:5a:
cc:ae:d5:df:95:cc:b5:33:55:c7:5a:21:d6:33:a5:
09:41:c5:b4:d8:97:6a:c6:30:18:14:ab:f7:58:6f:
0c:6c:25:3a:1d:f9:39:57:4b:43:75:1a:3d:25:9e:
26:97:99:1c:21:84:7f:9b:99:2d:f5:d6:07:2a:78:
fb:d6:2d:f5:b3:9c:75:e6:fa:55:5e:ed:91:ec:4c:
39:f1:1b:10:46:7b:a7:d0:8e:b4:35:ce:9e:72:3a:
d7:56:b8:8d:cd:3e:8b:95:af:40:3e:ad:d9:53:3a:
c2:c6:e6:28:f9:d7:19:74:d5:b8:01:f1:0a:2e:f1:
ba:ce:dd:ae:00:a9:a1:3e:c9:ed:45:f4:24:bf:f5:
e5:a3:e7:db:8c:fb:f9:14:c2:35:07:a1:74:cf:c7:
87:88:d3:22:3c:d0:a5:ae:91:89:c3:ce:24:27:ee:
2f:24:67:9d:85:20:c6:6e:0c:71:9f:57:32:4f:50:
ff:9f:14:ae:b3:73:ef:4f:f9:93:90:96:f2:ec:5b:
f6:db:29:d9:6b:73:80:01:5d:40:eb:bc:d0:5d:74:
10:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D3:F1:5F:7F:E3:BE:42:7C:52:10:4F:18:4F:09:FE:87:C5:75:9C
X509v3 Authority Key Identifier:
keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5e:48:79:f3:99:b1:c0:eb:0b:6c:81:cf:f0:d2:0c:ff:b5:
7e:e0:66:00:5f:b5:ee:22:c5:a4:57:0d:7a:ca:75:e5:11:a9:
86:0f:e4:96:3d:82:6e:4b:40:d2:bf:8c:79:41:96:d6:a9:ec:
12:24:4c:f2:a5:f7:ad:3f:e4:60:a0:a8:5d:36:5b:e7:fe:d5:
36:04:fb:16:81:58:f0:b0:1a:cc:4a:dc:59:9e:36:6f:c5:5c:
b8:e9:f0:94:36:c2:5f:03:f3:68:1d:2b:68:08:41:cc:1d:d7:
a2:ce:0e:ca:35:7e:70:30:33:a3:13:78:14:cd:ec:d0:cc:c1:
76:05:89:4b:c3:90:2f:c7:b1:5d:af:4c:de:1e:d6:df:5f:26:
6c:e4:e5:91:c1:ae:ff:2e:5a:66:db:c3:17:4f:6b:5c:3a:20:
7b:1b:28:c5:8c:1e:75:54:90:48:c5:5a:01:24:dc:19:88:35:
2a:f6:77:9a:64:4b:29:04:14:13:fd:3d:1d:38:d6:9c:7c:15:
c5:ea:27:d0:6e:59:cd:58:b4:65:fa:7b:be:f2:28:3c:46:f4:
84:2a:4d:eb:50:cb:c3:72:a6:78:40:85:ad:01:c3:ae:e7:a4:
2d:19:50:10:89:92:c4:d2:16:de:dc:5c:e2:57:2b:0d:4c:5c:
75:87:fa:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:05:55 2026 by rpki-client