Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
File: HC03VaNQG5yw1euqSZ5eoUm88Is.mft (raw, json)
Hash identifier: cyirdhLruEjg89oKsXeUT7xyFKomn+s+amOnYP2Uifw=
Subject key identifier: 6B:F5:94:BE:A6:31:FC:0A:14:8C:64:A1:CB:D7:86:98:06:D5:4A:59
Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
Certificate issuer: /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Certificate serial: 019E1FB5EC60B0E2DFC4C67D26929C3943B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
Manifest number: 09E5
Signing time: Wed 13 May 2026 05:01:16 +0000
Manifest this update: Wed 13 May 2026 05:01:16 +0000
Manifest next update: Thu 14 May 2026 05:01:16 +0000
Files and hashes: 1: HC03VaNQG5yw1euqSZ5eoUm88Is.crl (hash: lV5ifk53ZywsqQcBdTNO0QCoyVNIporvolQ1mQenFKQ=)
2: Lp1vmXiAHAmwk2iCgx7RB0tjwmg.roa (hash: SGv7A6ro4T2ZdRrPed862yoKpwBaCmoUOMJ9b5UxA+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:ec:60:b0:e2:df:c4:c6:7d:26:92:9c:39:43:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Validity
Not Before: May 13 05:01:16 2026 GMT
Not After : May 14 05:01:16 2026 GMT
Subject: CN=6bf594bea631fc0a148c64a1cbd7869806d54a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ee:9c:13:f9:c7:35:71:fe:47:56:ce:16:cc:
59:54:61:12:15:87:0d:b7:47:81:e1:ef:be:96:5c:
d9:1a:d1:5e:90:4e:96:30:d7:ce:8e:3b:3b:15:f1:
8a:06:68:7f:dd:a8:5b:e0:ba:b4:82:12:27:da:3a:
74:72:f2:ff:bf:86:7f:44:ec:01:23:20:ae:cc:0a:
06:7e:b5:71:69:b6:71:84:98:bd:ab:7e:9d:97:9a:
7b:da:3d:db:98:c6:f1:07:83:de:76:75:63:51:ec:
9e:f1:3a:00:46:28:ab:8c:c6:10:82:37:b9:0b:8a:
29:76:1a:f6:ae:81:2f:2c:60:c7:a8:ec:44:d2:3a:
9c:ec:d8:61:81:65:73:44:9c:c2:ea:73:d1:15:df:
93:1f:0e:d4:52:a7:d3:d8:d7:7a:e5:4f:6a:eb:c9:
fd:2c:15:dd:5c:31:34:4f:6e:5e:d2:47:17:b2:d8:
43:cc:4f:bc:27:42:8f:99:ba:0d:05:fe:09:7d:bf:
7b:30:d1:f6:83:32:1d:28:04:a7:b4:af:f0:71:38:
5c:8e:e9:88:9d:87:27:7f:1e:41:71:c3:f9:00:11:
05:ab:ac:70:46:1a:9f:a2:6f:3e:9e:10:8b:51:d9:
2a:02:3c:e0:f9:98:de:0f:dd:07:9b:b9:c4:9c:f7:
7a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F5:94:BE:A6:31:FC:0A:14:8C:64:A1:CB:D7:86:98:06:D5:4A:59
X509v3 Authority Key Identifier:
keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:18:08:b4:3c:7b:ef:4e:9e:c0:bc:6f:06:27:f2:a4:ee:dc:
12:2a:05:6b:9c:68:05:82:eb:92:33:94:f5:4d:06:50:23:37:
df:c4:d9:ee:3f:14:cf:3f:5c:84:01:62:92:2f:e5:8d:59:7a:
e6:46:2f:c3:e7:db:e2:0d:8f:f9:c3:d6:ba:28:8b:10:61:5c:
b5:6e:d3:57:60:05:7a:30:57:f0:b3:5e:b0:b4:ae:28:1f:3d:
11:ee:71:dd:e9:ca:27:88:15:c1:a3:8e:3d:62:d8:52:a3:63:
69:b8:bb:22:4b:66:17:c0:6e:ed:01:77:57:ac:3a:58:17:23:
61:07:a0:83:c2:52:4f:63:2e:3c:84:57:de:60:ea:a7:44:67:
9e:3c:e0:8d:2d:b6:f2:eb:55:c3:6d:ba:02:1c:f9:61:ca:80:
35:b4:48:81:48:47:95:54:f2:4e:71:86:43:fa:47:5e:c0:00:
3c:83:3d:34:18:d7:2b:5a:d8:3b:29:2b:70:4b:c6:91:9c:b4:
74:27:e8:65:00:be:6a:70:c2:be:cb:0f:2c:a5:a6:27:a0:0b:
6d:3a:53:21:c0:76:64:85:bb:b7:4f:62:c4:10:8e:97:c6:5f:
76:20:c1:21:ad:62:88:4b:db:73:51:cd:e4:de:b3:be:ab:ef:
92:0a:a2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:01:04 2026 by rpki-client