Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
File: HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json)
Hash identifier: c74aBmOvD52f1j/cHgEh/ZA9wKHrTsGsn6xDLtn2XJA=
Subject key identifier: A8:E6:2C:51:CF:65:94:4D:D1:CF:C5:02:C5:27:79:0E:E9:D3:38:24
Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
Certificate issuer: /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Certificate serial: 019D39E5DA6781CEBB2C56AF1C7D18F420B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
Manifest number: 0801
Signing time: Sun 29 Mar 2026 14:00:58 +0000
Manifest this update: Sun 29 Mar 2026 14:00:58 +0000
Manifest next update: Mon 30 Mar 2026 14:00:58 +0000
Files and hashes: 1: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: we1FHW3HdxsWd6mWVtbnMPKar/f9N2g4KrHbIs7OwTg=)
2: Kl7ksgdkf5mddCaAPgAWOeKhVvg.roa (hash: rOa18GJtuQqpcGIrwGnhcp3m4z08/3Ol4xsmgiWc0ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:da:67:81:ce:bb:2c:56:af:1c:7d:18:f4:20:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Validity
Not Before: Mar 29 14:00:58 2026 GMT
Not After : Mar 30 14:00:58 2026 GMT
Subject: CN=a8e62c51cf65944dd1cfc502c527790ee9d33824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9a:c1:87:02:b7:98:1d:34:3b:5b:07:82:05:
3b:57:da:ac:80:ca:35:f5:87:cc:6d:e4:2f:13:c2:
c1:11:96:0e:4e:11:eb:67:04:09:6e:3f:d1:b8:65:
cf:66:41:46:f7:2e:d9:ba:3e:ff:be:2b:db:ce:2e:
61:4a:4e:f3:cd:a7:9b:84:8e:b1:e2:01:55:9d:69:
f4:db:80:8e:a2:73:e7:9f:d0:a5:72:39:4b:a0:2a:
91:11:56:6a:3b:36:af:09:fe:90:af:30:1e:80:c3:
96:64:53:11:1b:e8:f1:d6:eb:98:6d:28:48:d6:10:
d3:ff:82:85:83:d5:e7:2e:8e:41:a5:b2:86:57:2d:
01:0f:24:74:a0:96:f5:67:21:a0:2b:f7:de:8b:b7:
4e:16:92:30:25:14:ce:30:d2:2e:d0:45:b1:3a:c3:
75:f2:88:85:81:59:65:38:1b:8f:39:41:67:5e:a7:
db:4f:0c:40:01:6c:10:4f:74:35:2f:54:c1:00:4c:
c6:55:bb:d6:7b:c2:33:e0:00:09:33:c9:a8:d8:9c:
eb:14:09:47:de:35:d5:35:a6:e5:5e:65:8f:9a:72:
c4:61:1c:15:1e:3f:8c:84:31:a2:7d:a8:96:f5:2f:
36:fb:74:cc:2b:5b:1f:fc:27:b7:9e:6a:a1:af:25:
8b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E6:2C:51:CF:65:94:4D:D1:CF:C5:02:C5:27:79:0E:E9:D3:38:24
X509v3 Authority Key Identifier:
keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2d:3d:c6:5b:6b:0d:52:2d:32:93:96:bd:68:c4:c4:77:02:
fb:d6:71:cb:82:9c:e5:ca:a2:19:9b:23:cd:d7:b9:d1:e2:f5:
7c:6f:3b:d5:68:75:e8:bb:64:e6:b9:5f:19:cf:18:70:d0:f6:
b7:56:b2:e0:a9:6c:95:02:2c:b1:52:86:2f:a7:6e:df:31:9c:
3c:38:8d:f2:2e:d0:7d:37:84:54:5b:05:3f:8b:d1:e7:09:80:
d8:b1:3e:54:45:f9:33:8e:6f:9b:3b:71:be:b5:c0:d0:7e:a3:
f5:b0:1d:c4:89:27:0c:66:94:18:e2:dc:95:92:42:0f:f9:c0:
74:f8:f8:5f:27:e5:69:9c:ba:40:65:b6:f9:fb:c5:e2:90:d9:
d1:be:ee:07:94:e5:05:ce:6b:08:a0:d9:04:78:ac:5f:5a:68:
f4:c4:78:aa:2a:f2:c9:52:48:cc:71:c6:f8:6f:28:76:e3:bc:
b9:56:b3:d3:71:82:53:4b:ac:08:50:cc:9a:2b:21:1e:66:d0:
b1:c2:39:06:d4:48:29:d6:96:aa:fc:80:9e:c9:10:25:65:7c:
a2:8a:5d:bb:ae:de:a8:bd:fd:c9:46:cb:e1:a0:33:ed:dd:58:
84:94:1a:9f:1f:2f:fe:51:59:63:78:e7:46:4b:06:c2:fe:ff:
2a:05:18:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:58 2026 by rpki-client