Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
File: HC03VaNQG5yw1euqSZ5eoUm88Is.mft (raw, json)
Hash identifier: ZXp02WAYz8ea5E0OVcZ5j3UMRxVdScrbiTYdSoq0fZw=
Subject key identifier: B2:7A:6B:86:BD:8A:07:27:C7:59:6D:23:1B:B7:A5:5B:19:01:40:C3
Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
Certificate issuer: /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Certificate serial: 019D28844517195998DBC721B457FFCF607B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
Manifest number: 0965
Signing time: Thu 26 Mar 2026 05:00:50 +0000
Manifest this update: Thu 26 Mar 2026 05:00:50 +0000
Manifest next update: Fri 27 Mar 2026 05:00:50 +0000
Files and hashes: 1: HC03VaNQG5yw1euqSZ5eoUm88Is.crl (hash: GAQblL0ggyqvt/MY2k5AaoZIJQLLeVtxaPUQJX9tEpk=)
2: Lp1vmXiAHAmwk2iCgx7RB0tjwmg.roa (hash: SGv7A6ro4T2ZdRrPed862yoKpwBaCmoUOMJ9b5UxA+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:45:17:19:59:98:db:c7:21:b4:57:ff:cf:60:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Validity
Not Before: Mar 26 05:00:50 2026 GMT
Not After : Mar 27 05:00:50 2026 GMT
Subject: CN=b27a6b86bd8a0727c7596d231bb7a55b190140c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:89:ab:73:2a:db:5f:0c:7d:32:32:1b:cb:
89:69:6f:b8:98:b6:e6:e1:11:c9:82:58:67:21:a4:
f5:9d:69:d8:0f:a8:3f:0d:ff:47:38:9b:9c:d9:6b:
34:4f:e3:c4:18:a9:71:22:2c:15:5f:32:d3:c3:c2:
8d:bc:69:71:59:a5:f1:7a:1d:dc:cf:bd:56:a2:35:
58:e2:4a:5e:bb:d3:89:1a:bf:66:6b:e0:1c:dc:16:
e6:ac:79:f9:4f:a5:da:44:3f:db:9b:f8:b6:f2:5c:
23:a6:ce:1c:1b:18:73:4c:37:d5:df:25:50:8d:54:
9e:20:a2:4e:83:91:f4:1e:31:ed:57:72:d8:1c:5b:
8b:79:23:71:e9:e8:c9:ab:05:a3:25:7e:84:c1:8b:
4b:70:dd:ed:36:d6:04:11:c7:18:2c:f9:e7:29:c6:
8a:28:bd:28:5e:06:4f:f8:48:e3:a1:cb:9b:19:84:
5d:49:b7:fb:01:2d:c0:72:95:d4:55:66:2e:55:1f:
ab:c1:3f:c5:65:65:5d:71:ab:c4:f1:b9:d6:4b:8b:
79:1d:ba:b8:92:1a:9f:6f:52:a9:10:f0:07:83:06:
b9:b1:b0:eb:f1:35:73:a1:e1:8b:1c:d9:f7:63:07:
c4:9d:37:d8:9b:6d:10:f3:dd:da:5c:af:91:d9:15:
d0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7A:6B:86:BD:8A:07:27:C7:59:6D:23:1B:B7:A5:5B:19:01:40:C3
X509v3 Authority Key Identifier:
keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:e9:02:4f:3f:61:d9:57:19:8a:07:23:39:39:4e:e2:0a:6e:
07:ab:44:4e:fe:ee:3a:66:25:4b:fb:9c:0b:21:f5:ff:13:51:
9b:ec:08:36:83:1f:20:5d:ac:73:37:47:1a:11:07:0b:62:a0:
9f:e7:ae:6c:40:2e:bd:c6:aa:88:c9:d7:e9:85:34:14:89:84:
d8:94:a9:13:fe:a9:d6:d1:5c:c3:7e:e8:30:60:7e:e9:24:3b:
2b:56:7a:1a:c2:af:48:88:dc:d2:36:77:be:61:96:cc:73:27:
ed:74:07:db:c8:9f:c2:4e:72:05:99:a9:aa:79:f9:f9:5a:0e:
ed:91:eb:1d:76:68:e1:85:c0:70:89:46:f4:0e:b9:dc:74:9e:
68:cc:c5:a3:81:07:c3:a3:8b:1f:6f:a6:0c:2b:db:e2:a9:65:
64:e2:2c:2f:8f:b9:f2:dd:17:0a:a3:e4:d4:3a:00:42:4b:3b:
ea:1e:08:a4:71:c7:88:bf:73:57:32:f1:74:4f:4c:d5:a2:9b:
8d:4c:b8:d3:0b:85:ce:21:13:f8:31:b5:91:94:b2:5f:af:a6:
f3:3a:44:65:b9:bd:f9:9e:19:6f:8b:b0:0d:0d:60:c2:2a:d9:
07:c2:04:a1:4d:dc:39:d0:e3:5a:42:e2:d3:61:8e:ee:5f:72:
4c:2b:d7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:47:50 2026 by rpki-client