Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
File: HC03VaNQG5yw1euqSZ5eoUm88Is.mft (raw, json)
Hash identifier: HVnVKymrZ2nemfHszlLtl0fxuwXHWY8mLQSEklsIHMg=
Subject key identifier: 19:3B:3A:0B:A1:E7:CC:51:C3:96:34:B3:75:1A:E5:A3:99:FF:4F:78
Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
Certificate issuer: /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Certificate serial: 019F965C42531E7983B6ACD9A070D6B11C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
Manifest number: 0AA7
Signing time: Fri 24 Jul 2026 23:00:56 +0000
Manifest this update: Fri 24 Jul 2026 23:00:56 +0000
Manifest next update: Sat 25 Jul 2026 23:00:56 +0000
Files and hashes: 1: HC03VaNQG5yw1euqSZ5eoUm88Is.crl (hash: vUw+jqH8ahmjL/xpVhMmGMob7wIEKCxrQxP37twyRiw=)
2: Lp1vmXiAHAmwk2iCgx7RB0tjwmg.roa (hash: SGv7A6ro4T2ZdRrPed862yoKpwBaCmoUOMJ9b5UxA+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:5c:42:53:1e:79:83:b6:ac:d9:a0:70:d6:b1:1c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Validity
Not Before: Jul 24 23:00:56 2026 GMT
Not After : Jul 25 23:00:56 2026 GMT
Subject: CN=193b3a0ba1e7cc51c39634b3751ae5a399ff4f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:81:da:d7:ac:42:20:ac:77:c0:ea:07:16:50:
75:5a:f8:35:b0:0d:87:41:8e:af:69:2b:a3:fd:ab:
39:b9:90:47:98:ec:80:9c:aa:95:9b:54:65:46:e7:
9c:94:85:5d:55:ce:f1:20:40:ca:80:ca:ef:ac:b7:
6f:58:06:3c:d1:05:2c:49:d1:90:8f:ff:f3:a5:c3:
44:60:ec:af:88:2a:38:dc:a0:8b:53:2e:db:87:eb:
31:18:ef:31:0a:73:5e:6f:a4:91:7a:d0:c5:2a:94:
fa:32:f3:fc:c4:a5:2a:01:84:eb:20:9c:a9:c5:fe:
ab:29:e7:b4:49:46:c8:1a:72:07:22:c7:01:54:03:
9d:3a:53:cf:75:8b:df:b9:f3:ff:56:8c:79:26:6b:
fc:9b:44:36:d6:0b:64:2f:00:1b:d0:92:55:5b:e7:
43:d9:34:b3:28:e2:f6:51:c7:60:3b:a5:d5:d9:14:
ef:ba:a3:e2:d5:73:01:43:87:b5:e2:8d:72:72:1f:
82:44:f1:33:03:75:29:93:e4:5e:c4:ae:71:3e:81:
85:c4:d6:28:95:71:26:42:4a:75:d7:d0:c0:0b:a9:
01:da:66:d0:42:54:77:81:8a:e4:83:26:00:a8:68:
93:3c:58:2c:3f:93:8f:a3:ed:e0:14:ce:8d:01:53:
09:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3B:3A:0B:A1:E7:CC:51:C3:96:34:B3:75:1A:E5:A3:99:FF:4F:78
X509v3 Authority Key Identifier:
keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b5:3f:d3:6b:0d:d2:c2:bd:f2:34:82:99:d4:6c:2a:12:c9:
fd:29:61:4a:17:5b:29:34:c9:c8:d0:80:c9:82:a5:46:ec:cc:
59:dc:74:fc:3b:83:e9:b3:8e:28:fb:e2:06:80:d7:86:ec:5e:
5a:28:62:c6:b4:f5:9b:a6:8e:1a:5c:59:b8:5d:35:05:3b:0b:
8f:ca:65:6c:7b:8d:dd:54:87:3c:62:dc:37:75:2c:67:db:99:
7a:a4:14:98:42:f4:8d:1d:64:fe:ac:86:7d:b6:2e:60:b0:e4:
09:95:af:19:25:ee:bd:ef:d5:e2:20:db:d4:5d:10:d9:e2:e8:
28:59:a4:7e:75:25:4f:9e:e3:93:53:f0:9c:c3:82:e7:ed:f8:
9e:be:25:62:58:5f:8e:12:6e:cd:7c:d2:a3:42:8f:fa:38:2c:
30:19:cb:21:a6:93:0c:8c:90:76:fb:7c:98:59:f2:92:80:f2:
d6:7c:4c:00:5c:9e:31:c3:25:9d:b1:5b:1b:fd:ed:57:c0:79:
e2:b5:0c:38:d6:cc:ce:d0:70:80:98:cd:20:38:62:92:a0:6a:
b1:7a:5f:28:b1:4a:9b:18:08:07:12:9f:6b:6c:e1:d9:89:e5:
6e:23:bb:6a:57:5f:95:c0:b5:d3:cc:2f:76:3e:f4:72:0b:65:
4a:5f:1e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:11:43 2026 by rpki-client