Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
File: HCN7aINpeRKVf40zc3AryQbSZEU.mft (raw, json)
Hash identifier: mtGV081XBqpf8pYNB1pNTsdGGuswTv8V4IdMTA04pGo=
Subject key identifier: 39:91:89:93:9E:6E:B5:64:65:55:9F:26:21:A4:4E:5B:D2:AA:52:AC
Authority key identifier: 1C:23:7B:68:83:69:79:12:95:7F:8D:33:73:70:2B:C9:06:D2:64:45
Certificate issuer: /CN=1c237b6883697912957f8d3373702bc906d26445
Certificate serial: 019FF97EB83F733DE9AA873142C0678A994A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
Manifest number: 1614
Signing time: Thu 13 Aug 2026 05:00:59 +0000
Manifest this update: Thu 13 Aug 2026 05:00:59 +0000
Manifest next update: Fri 14 Aug 2026 05:00:59 +0000
Files and hashes: 1: FMHMs5u6nqIr6z09yDsjzYxfks8.roa (hash: cXOK9Ev2UNFSti3Tqnxxgi2cL3wHqDi6S1Qe8D5ON6A=)
2: HCN7aINpeRKVf40zc3AryQbSZEU.crl (hash: xm3/3BVsidAqpnIcuZJQ5EpJ+G+9Q3uDhfUz+bjPjVQ=)
3: SgzTZO7h0qw0lQtLCLQDxdwtTHc.asa (hash: YpjRapR2fvquPrVNxyf5Ct4ddLeyNJ16sV02TNO6WCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:7e:b8:3f:73:3d:e9:aa:87:31:42:c0:67:8a:99:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c237b6883697912957f8d3373702bc906d26445
Validity
Not Before: Aug 13 05:00:59 2026 GMT
Not After : Aug 14 05:00:59 2026 GMT
Subject: CN=399189939e6eb56465559f2621a44e5bd2aa52ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:71:20:71:83:c2:a8:bd:06:6d:49:67:76:12:
65:5d:9c:9e:0b:e2:fd:eb:93:08:fb:71:56:7a:0e:
49:17:5b:2a:24:e2:05:ef:6b:b9:c6:ae:ff:0c:f8:
e8:15:17:8c:6b:21:f7:70:16:4f:eb:92:46:9f:5f:
37:15:6c:9e:6f:22:ef:d2:00:5a:a9:f7:a9:0e:91:
61:10:b7:63:83:db:bb:e3:db:c2:bd:14:b7:4b:b7:
b7:e9:31:86:8f:bd:7b:8c:b9:45:46:e8:e9:b9:ee:
30:2f:37:2f:52:3d:9a:ee:a2:d0:8e:c4:51:82:65:
a1:ce:fd:0e:11:d5:ef:96:c3:fb:fc:c5:a1:90:d4:
a0:dc:86:a1:4f:94:29:db:80:1f:79:22:72:09:9c:
e7:83:c1:7e:36:b5:55:be:4a:24:45:6b:7c:25:a4:
e5:a5:85:88:6f:cc:fc:19:9c:f4:5b:6b:a5:8f:8a:
11:7c:70:ce:be:13:3a:aa:e1:ca:8c:d3:ca:19:38:
2a:b6:da:9c:e2:fb:d7:2c:f7:a9:a1:18:b8:be:4e:
61:c1:9f:96:f1:fd:75:27:17:ee:fd:f4:28:6d:7c:
b4:85:7e:f1:3d:06:a2:d1:0c:b3:e7:e7:bf:53:ef:
e0:b6:29:d9:ce:d3:1f:a1:40:16:ac:b1:59:0c:0c:
09:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:91:89:93:9E:6E:B5:64:65:55:9F:26:21:A4:4E:5B:D2:AA:52:AC
X509v3 Authority Key Identifier:
keyid:1C:23:7B:68:83:69:79:12:95:7F:8D:33:73:70:2B:C9:06:D2:64:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2d:2c:43:6b:2b:51:21:7f:1f:00:25:e0:fc:60:84:dd:d2:
90:a8:c8:29:22:6a:03:cd:76:52:e2:2c:cf:6a:40:6d:97:66:
e1:3c:64:54:57:8f:6c:ee:ee:94:db:97:96:a7:bd:9d:38:97:
98:2b:7f:42:b2:6d:b5:e8:fe:73:dc:1a:86:2f:c9:29:ab:ed:
1d:71:59:e6:e8:08:db:b8:cb:c5:a4:fc:15:64:2d:9f:22:90:
d8:cf:fc:46:50:c6:83:d2:71:45:cf:e9:7b:4d:8c:ec:3f:a2:
d8:c4:3d:74:6f:f8:c2:6c:02:ae:0d:b6:6b:28:80:5f:eb:85:
5f:a1:b7:c7:42:38:e7:c3:6f:01:df:09:bc:10:c8:3d:f7:a8:
71:a3:47:f1:7d:94:9c:48:ae:73:ee:a5:b9:77:43:c5:44:73:
14:4c:cb:45:fd:e4:42:45:04:d5:aa:e7:5a:79:32:df:3d:c3:
f1:ad:23:13:cd:4a:9f:39:f2:58:5d:0d:32:f3:2d:67:f5:90:
48:a0:36:34:fe:a2:53:69:bc:ff:50:ef:f8:b0:5e:1b:0c:74:
7e:4b:4d:a5:f7:9f:46:c3:24:76:3f:6d:53:84:08:d7:4f:1c:
3e:33:a7:14:d8:7a:9a:7c:cc:1d:a6:0d:5a:e5:31:1b:81:3a:
81:c5:64:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:58:57 2026 by rpki-client