Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
File: HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json)
Hash identifier: e6fMmrnDrGpsVPgaaOy0BgtkfrGOnbkw7KfRIS2XyDI=
Subject key identifier: A0:38:93:B0:AB:2F:5B:CF:8F:3A:4F:7C:E3:BD:9A:C8:2E:05:9D:56
Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
Certificate issuer: /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Certificate serial: 01A17D053C534586D2A977262D641D96DAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
Manifest number: 0A36
Signing time: Tue 27 Oct 2026 11:00:57 +0000
Manifest this update: Tue 27 Oct 2026 11:00:57 +0000
Manifest next update: Wed 28 Oct 2026 11:00:57 +0000
Files and hashes: 1: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: y2QdLqv17eNQZuP9iCW53lwZRUXMU/6ucL20YENUCHU=)
2: Kl7ksgdkf5mddCaAPgAWOeKhVvg.roa (hash: rOa18GJtuQqpcGIrwGnhcp3m4z08/3Ol4xsmgiWc0ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:3c:53:45:86:d2:a9:77:26:2d:64:1d:96:da:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Validity
Not Before: Oct 27 11:00:57 2026 GMT
Not After : Oct 28 11:00:57 2026 GMT
Subject: CN=a03893b0ab2f5bcf8f3a4f7ce3bd9ac82e059d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:98:e6:2c:12:59:65:3a:48:3b:e2:6c:fc:9e:
5b:87:6d:5b:1e:f3:82:0a:4c:21:1d:cf:be:70:e6:
dd:1e:02:5f:5b:3f:4f:b0:a5:fd:37:0d:3a:14:3f:
9a:78:ff:d7:29:a0:03:a1:83:c1:cb:61:aa:78:64:
74:1f:79:06:bf:48:ee:f3:96:f5:52:22:69:c0:c2:
e3:c5:3f:c8:1b:33:a4:8b:a8:49:36:5c:36:af:1f:
69:7f:9b:d7:47:bc:48:4d:c8:d7:16:63:49:88:8b:
0c:4e:ad:b2:52:f8:3e:d3:7c:f6:c1:52:77:1a:2b:
74:59:22:ec:f9:e2:ba:e0:03:06:cf:82:31:be:f0:
1a:a9:c9:3b:7e:0c:09:3d:7a:01:26:0e:1d:22:38:
f1:56:30:47:f5:0b:76:4c:7d:17:84:4a:15:f7:2b:
c5:7c:f1:c8:c4:8c:73:35:ad:9c:f2:f6:e1:d8:52:
d1:19:fc:14:b0:da:43:62:33:3c:a6:3d:be:73:40:
ef:13:34:a7:97:1f:17:33:41:f4:b8:d1:85:66:92:
58:0e:3d:97:08:76:57:17:19:45:3c:e0:09:4d:ff:
8c:b4:6b:9e:49:f0:f4:25:fd:88:51:c7:48:b0:e7:
5a:a1:ee:1c:ae:27:f4:18:95:7f:96:2d:e2:e8:fd:
d3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:38:93:B0:AB:2F:5B:CF:8F:3A:4F:7C:E3:BD:9A:C8:2E:05:9D:56
X509v3 Authority Key Identifier:
keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e5:94:5b:b7:34:0d:df:b3:56:cf:e9:31:80:c5:c2:6e:da:
73:bc:43:4d:a1:ce:08:10:77:87:c0:30:7a:9d:96:c5:74:df:
bd:38:db:08:ae:ab:84:5a:41:c0:6a:a3:ae:86:f0:2b:2a:68:
e5:09:aa:66:d8:92:1b:fd:75:7f:13:71:e6:83:ed:10:69:5e:
ee:8c:b2:ae:f1:ae:bf:f7:b1:5c:30:40:69:78:51:29:9d:95:
b5:f8:3d:17:04:fa:30:96:c4:d7:07:37:05:8d:8b:47:89:2a:
07:02:a1:b4:c8:4b:b2:12:67:69:23:50:08:4b:ef:99:95:a5:
2b:27:8a:ae:d2:47:a3:20:04:6c:b8:70:75:ea:1e:c3:a7:0b:
7c:3e:86:2e:7f:64:12:2b:a9:98:fb:c0:2d:6b:6c:c8:59:c8:
d3:a1:0c:21:0a:d7:f4:92:e7:1f:e7:9a:32:a5:54:71:08:7a:
85:fd:87:7b:36:51:85:d8:9a:3e:7c:9f:fb:51:de:2e:7f:88:
15:a6:f9:60:d3:ae:5a:d7:e7:65:17:65:04:7f:a6:11:50:2a:
27:6d:06:e2:a8:36:69:e6:7c:a9:c9:cc:c4:df:fa:29:02:ea:
a8:ed:0a:4f:77:d6:df:04:1d:9e:a5:c7:cd:97:f8:b1:d0:0e:
ae:c3:c2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:39:34 2026 by rpki-client