Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
File: HCN7aINpeRKVf40zc3AryQbSZEU.mft (raw, json)
Hash identifier: 0OCzIEELFM38QhgT45CnDjNWil7x05WEWpm9KqOHN7k=
Subject key identifier: C5:19:C9:F1:8D:AB:AF:DB:F5:11:E6:FB:C4:92:7A:53:8C:76:E7:DE
Authority key identifier: 1C:23:7B:68:83:69:79:12:95:7F:8D:33:73:70:2B:C9:06:D2:64:45
Certificate issuer: /CN=1c237b6883697912957f8d3373702bc906d26445
Certificate serial: 019D389C19B2AE9512136C6235353D95A83E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
Manifest number: 14A7
Signing time: Sun 29 Mar 2026 08:00:47 +0000
Manifest this update: Sun 29 Mar 2026 08:00:47 +0000
Manifest next update: Mon 30 Mar 2026 08:00:47 +0000
Files and hashes: 1: FMHMs5u6nqIr6z09yDsjzYxfks8.roa (hash: cXOK9Ev2UNFSti3Tqnxxgi2cL3wHqDi6S1Qe8D5ON6A=)
2: HCN7aINpeRKVf40zc3AryQbSZEU.crl (hash: kcTBkZ3xnuR80AguJrwPgFZRXXjiMq9lbM2w10/76+E=)
3: SgzTZO7h0qw0lQtLCLQDxdwtTHc.asa (hash: YpjRapR2fvquPrVNxyf5Ct4ddLeyNJ16sV02TNO6WCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:19:b2:ae:95:12:13:6c:62:35:35:3d:95:a8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c237b6883697912957f8d3373702bc906d26445
Validity
Not Before: Mar 29 08:00:47 2026 GMT
Not After : Mar 30 08:00:47 2026 GMT
Subject: CN=c519c9f18dabafdbf511e6fbc4927a538c76e7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e5:69:08:aa:3d:0a:bf:a4:a8:d9:51:60:4b:
67:56:3b:f6:77:be:e7:f5:44:5d:5c:f7:d9:49:70:
ab:f3:94:de:a8:f3:21:0b:09:ff:ad:76:35:37:67:
b6:9e:3c:fe:16:a6:a2:56:fc:1e:67:4a:ef:aa:a1:
24:f0:64:f0:92:20:dc:c5:73:9b:f7:5e:64:6b:28:
28:fc:fe:f4:7a:b1:d9:eb:8e:16:ee:5f:1f:61:0e:
59:eb:5d:c0:9b:c5:a6:02:24:33:d6:31:f3:6a:a8:
e9:3a:95:c4:e7:38:85:32:d7:52:0f:00:63:3f:70:
3b:f3:95:3c:42:a8:a0:19:52:04:83:39:4a:30:70:
ce:49:3d:23:10:4c:c0:d1:02:a2:06:99:de:5f:b3:
a4:13:8a:83:e3:d7:b9:92:bd:c5:56:34:2e:1b:54:
c9:a2:88:bf:c2:91:df:c3:8b:2c:13:84:05:f9:09:
3b:89:b1:af:86:f0:6c:03:01:fb:a0:f8:5c:cf:3b:
42:09:d3:85:5a:42:33:a5:a1:02:03:3a:9a:37:07:
fc:8f:1c:4f:77:b3:d7:9b:6c:7b:24:4d:f7:de:55:
0b:64:25:3c:1b:20:4d:24:d7:66:f4:70:84:23:db:
35:71:c8:3a:93:17:bc:91:23:e5:c8:ea:2c:8d:e1:
3c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:19:C9:F1:8D:AB:AF:DB:F5:11:E6:FB:C4:92:7A:53:8C:76:E7:DE
X509v3 Authority Key Identifier:
keyid:1C:23:7B:68:83:69:79:12:95:7F:8D:33:73:70:2B:C9:06:D2:64:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a4:93:40:9a:75:42:05:3c:76:19:5f:74:1c:75:9f:dd:0e:
4b:fc:7f:d3:e7:6d:05:00:c4:a8:31:21:f0:ce:33:c0:c1:75:
cb:3c:67:a5:0a:62:b4:3d:00:e8:98:78:0c:00:9c:3c:f3:50:
9e:f0:50:b7:59:fa:4a:b2:ac:52:df:3b:c5:7b:5d:6d:96:5f:
26:92:d8:58:88:41:dc:2f:21:1c:07:11:25:24:51:10:c4:de:
2c:50:0a:7c:2e:fe:9d:b9:c2:91:9d:4d:fe:e3:fe:ae:12:30:
80:31:96:75:fa:1b:c7:32:87:45:c0:74:07:a9:eb:76:66:46:
c2:dd:a8:ed:d0:e1:88:cb:09:94:23:ea:eb:b2:7d:2f:a5:0b:
b8:f1:bd:73:d5:fd:c8:ae:e6:e1:12:c2:b1:3b:33:18:08:9f:
4a:5a:64:a8:ee:e7:e3:b0:0d:87:3d:2d:0a:a9:42:64:a8:3c:
f2:03:ac:81:ea:01:35:c8:43:2f:67:81:4c:53:e0:6b:d3:03:
9d:6a:4b:07:f9:5b:8e:9b:0c:c0:ee:d4:6b:7a:21:10:e7:a0:
8a:7a:26:f1:27:a2:75:44:09:85:0e:53:69:5b:90:ad:b1:e4:
26:d7:84:b7:41:67:1c:e2:73:82:3c:39:ed:7c:c8:2f:61:3e:
3a:b5:ad:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:08 2026 by rpki-client