
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
File: HCM-7mJMGSxsfa2hQy3gueeLCbo.mft (raw, json)
Hash identifier: puhG/112Zt499cOxYwcDRGyqImoHQCBzxVD34/z+qmY=
Subject key identifier: 57:6D:E3:CB:89:DD:0A:B7:EB:ED:AF:3C:16:84:5D:F3:3A:AC:3E:55
Authority key identifier: 1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA
Certificate issuer: /CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
Certificate serial: 019D38D3036235E58B6C353B575F9339727B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 09:00:46 +0000
Manifest this update: Sun 29 Mar 2026 09:00:46 +0000
Manifest next update: Mon 30 Mar 2026 09:00:46 +0000
Files and hashes: 1: HCM-7mJMGSxsfa2hQy3gueeLCbo.crl (hash: qgesCh4885hex6AQf1BbmozP2JWs0Eve6js8d+SvDsw=)
2: khbk2O6uaJwQ02xod7VfRqroSH8.roa (hash: JHGyb709uPLZ2YerR1cXSu892JXCz6N62IZ5FMhPQdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:03:62:35:e5:8b:6c:35:3b:57:5f:93:39:72:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
Validity
Not Before: Mar 29 09:00:46 2026 GMT
Not After : Mar 30 09:00:46 2026 GMT
Subject: CN=576de3cb89dd0ab7ebedaf3c16845df33aac3e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:fa:06:10:38:55:e0:30:2d:07:31:1e:31:
01:8c:30:3a:02:8f:6c:f3:89:97:bf:da:7d:2c:1a:
9a:35:8e:ea:d4:7b:c0:19:7e:39:2f:60:41:8e:68:
c2:15:b5:93:56:30:1d:80:e5:0b:93:14:c5:a5:2e:
07:7c:90:d4:da:f0:9b:11:e1:6d:eb:c4:05:aa:0e:
2f:9e:90:f1:b2:6b:c5:f7:6f:2c:ae:fb:b8:78:e3:
90:f6:c8:f3:12:6b:98:fc:90:05:26:25:b5:ee:76:
d6:d5:7a:5a:13:44:c9:e1:0e:00:80:b2:fe:62:64:
ff:ab:74:0e:38:6e:f3:30:8a:9c:e0:7d:4f:ed:f1:
57:ca:60:65:51:46:2b:ad:29:8a:c1:5e:43:aa:4c:
96:51:8b:76:76:2a:1d:57:a2:0e:28:fd:9a:b7:65:
bb:cf:de:08:ef:36:4f:1b:f8:ac:57:84:74:ad:6a:
7f:76:bf:f1:1b:ff:41:cd:80:89:ee:e2:7a:45:6f:
7f:e0:86:b0:99:ab:d8:d9:78:c0:3c:76:35:79:cc:
82:92:94:7f:6c:80:91:86:63:d8:ee:e4:03:73:54:
97:25:9a:45:7d:2f:6b:5a:bf:7d:8f:81:c5:89:c2:
eb:e5:1c:b4:45:c8:7d:7a:49:f4:5d:82:e4:a8:e7:
ee:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6D:E3:CB:89:DD:0A:B7:EB:ED:AF:3C:16:84:5D:F3:3A:AC:3E:55
X509v3 Authority Key Identifier:
keyid:1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:04:54:e5:39:58:55:24:fa:28:2c:d8:5c:c9:c8:34:7c:9d:
55:c0:a9:19:37:96:2c:7e:de:26:42:4d:b3:1a:45:03:37:e9:
27:10:35:95:33:a1:c6:20:51:9b:48:85:e1:33:d3:bb:b6:b1:
68:a4:84:11:44:e8:74:0a:5d:fc:33:05:86:82:dd:f0:57:3e:
0c:f8:a1:90:41:ef:f5:a3:1a:dc:7d:1d:9b:ee:86:73:91:98:
bc:36:a1:33:ae:76:b4:d7:1e:f4:c8:09:b2:06:d1:c0:47:da:
11:54:f6:c7:75:ed:59:2e:58:a9:37:66:c9:c9:66:1c:bd:8f:
ae:3e:f1:3d:5e:51:3a:44:75:d2:96:8a:cc:86:1f:2c:1f:b3:
e0:8a:5c:a3:73:02:61:1f:c9:4f:e9:5d:a1:63:11:69:96:4a:
6d:df:51:c2:65:3b:5a:37:8c:35:9b:f3:68:b3:cc:83:8f:49:
31:0e:8e:64:f9:27:1a:e0:15:9c:c5:8b:e1:64:9e:be:0c:83:
e0:da:88:de:43:ef:d9:6c:98:7a:31:0b:3a:87:d6:a9:22:5d:
ed:94:eb:0e:c7:d2:d7:ee:05:e7:f4:25:3c:c9:9b:b8:4a:a3:
ad:76:a1:64:86:38:49:51:3d:8e:e6:73:38:ed:aa:e0:1c:04:
40:71:18:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:53 2026 by rpki-client