Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
File: HCQvLpRcanLuKPjIDoDUiEM-N6M.mft (raw, json)
Hash identifier: Dq9Txk0EIBVY/G3Jjceh1LtqTsCAgiqaC+9hxvhpkuA=
Subject key identifier: 47:6F:28:24:97:F2:C7:3F:30:BE:31:DE:A0:75:F8:4F:E8:63:94:27
Authority key identifier: 1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
Certificate issuer: /CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Certificate serial: 019D27DF599DDCB2183BCB6DC612651967F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
Manifest number: 0BCA
Signing time: Thu 26 Mar 2026 02:00:41 +0000
Manifest this update: Thu 26 Mar 2026 02:00:41 +0000
Manifest next update: Fri 27 Mar 2026 02:00:41 +0000
Files and hashes: 1: 4lgY0W_OGeoIOrzJmbXnEdo5-pc.roa (hash: l5wy/qIfUulCmH/VGEZK2Kox3s/Htye0nx0GKzhDkHw=)
2: HCQvLpRcanLuKPjIDoDUiEM-N6M.crl (hash: P0jIumwVZ6Ngu60MurMjdnFCNyz9sL58h1oJpLAZvi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:59:9d:dc:b2:18:3b:cb:6d:c6:12:65:19:67:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Validity
Not Before: Mar 26 02:00:41 2026 GMT
Not After : Mar 27 02:00:41 2026 GMT
Subject: CN=476f282497f2c73f30be31dea075f84fe8639427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:06:ce:ea:1e:cf:75:59:96:fd:3a:db:28:7f:
e2:44:33:53:78:21:7d:a8:46:35:3d:71:23:34:23:
6c:b6:41:ed:e7:36:35:61:5e:af:3c:ca:71:db:1c:
93:22:ad:ad:15:52:fd:ab:39:7c:5e:b1:ed:f9:a0:
86:b4:44:59:61:43:a9:d5:b4:e7:a7:bc:46:f8:b9:
cb:93:3a:cc:e7:f0:09:a5:5f:33:d2:2e:46:3c:22:
fe:8f:b6:9d:94:62:ff:50:8d:f2:1d:74:86:2f:e4:
4d:8b:72:9c:0a:d5:92:d4:2f:f1:60:9f:3f:af:58:
09:12:b4:44:94:87:d2:f0:76:6b:42:01:83:20:e9:
59:60:51:91:3e:5d:0c:1b:de:45:12:f0:c1:f2:e2:
b9:60:d6:74:a4:45:a5:d9:2d:58:b0:5b:d4:2f:32:
9a:1d:57:e4:8e:8c:1e:b0:9a:b8:78:b5:b4:74:d8:
e6:1b:92:7a:b6:62:f7:3b:3b:11:50:0e:ec:f1:8e:
fb:5c:de:91:68:59:ef:d8:8f:3d:5c:98:66:93:1c:
b4:b1:8e:a0:63:00:e4:9d:16:83:26:0a:03:aa:01:
09:6a:b8:38:d2:8c:3f:7d:2a:a2:13:0f:65:77:ec:
3b:05:be:06:52:ff:25:76:be:1a:98:e3:08:fc:1a:
11:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6F:28:24:97:F2:C7:3F:30:BE:31:DE:A0:75:F8:4F:E8:63:94:27
X509v3 Authority Key Identifier:
keyid:1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6c:39:ce:ab:04:07:56:e9:83:bd:df:de:fd:d9:0e:eb:f6:
e3:b4:e9:45:59:1e:ff:10:53:73:b9:82:d7:55:e0:a8:58:5f:
78:36:38:23:00:85:89:af:d2:bf:46:be:75:6a:40:99:66:fd:
c4:95:b6:71:e6:02:76:b7:f8:f3:be:69:89:1b:55:d9:6a:54:
ff:c4:fd:cf:8c:81:61:78:78:ca:b1:16:bc:2f:a2:ee:75:3c:
18:67:ec:6b:53:c5:6a:ad:1e:dd:20:61:f1:7c:86:8f:47:83:
b5:64:df:b7:b3:6b:34:a1:aa:9c:15:39:ca:7d:3c:3c:f0:d6:
29:76:8f:5d:08:85:a2:59:ac:29:8f:9b:d7:39:40:69:7a:c0:
68:6c:31:7c:78:73:3c:02:e7:40:61:a5:79:d4:d7:1d:a5:ae:
73:cf:99:7f:7b:12:00:e1:3d:71:29:90:f5:8e:53:b4:39:2a:
6b:40:c0:46:2f:79:51:22:06:d0:2f:dc:6c:38:6b:cb:ee:ba:
2e:04:56:46:51:4f:e6:3f:32:29:49:86:f2:ab:c6:6a:dd:fc:
6d:c7:1c:1b:0c:28:21:69:22:17:ee:2c:5f:50:d4:a6:88:f8:
9c:f9:a7:5e:c2:4c:66:83:13:83:61:1a:ca:cf:c6:b9:96:d2:
a2:58:16:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:37 2026 by rpki-client