Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
File: HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft (raw, json)
Hash identifier: XMl7bi7Yl9KWuyjlO8I5oIO4QNet0RKWS1X4wsBu+tM=
Subject key identifier: 40:85:B0:DF:85:20:D9:FC:DA:55:BB:7D:EF:02:3A:AC:21:C0:55:C9
Authority key identifier: 1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
Certificate issuer: /CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Certificate serial: 019D292964BFBB53B4799FC486B60372E7F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
Manifest number: 17E2
Signing time: Thu 26 Mar 2026 08:01:11 +0000
Manifest this update: Thu 26 Mar 2026 08:01:11 +0000
Manifest next update: Fri 27 Mar 2026 08:01:11 +0000
Files and hashes: 1: 0UjAR0lwkfGnKW_I34st30o5zcY.roa (hash: SaYOr18FPTLyjkppn6MTCghoM1FqQpX991KVnAvsKI4=)
2: HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl (hash: ZjcsTMkMHyOcJBWHYMWTaX4MeXFhWizTaQHCUsBq1gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:64:bf:bb:53:b4:79:9f:c4:86:b6:03:72:e7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Validity
Not Before: Mar 26 08:01:11 2026 GMT
Not After : Mar 27 08:01:11 2026 GMT
Subject: CN=4085b0df8520d9fcda55bb7def023aac21c055c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c1:2e:05:72:bb:62:4b:95:03:dd:4c:59:a9:
33:57:59:b1:e3:b3:9c:97:cd:80:6f:a4:ce:95:87:
e1:f5:6e:76:a5:56:db:84:7a:e5:59:f4:02:97:5a:
60:10:2e:cc:72:43:a9:e0:3f:02:57:f8:36:66:d3:
f4:33:61:e3:dd:8f:8f:3e:4a:47:de:44:67:67:f2:
d3:44:6e:c1:bc:a1:75:44:c0:ff:0a:26:45:78:4f:
56:b1:67:b6:10:07:1c:c5:f9:c6:dd:84:a6:ae:bf:
ed:4f:3d:9c:7d:e5:48:44:52:f1:d7:59:db:66:b9:
65:c8:2a:15:f6:b1:aa:0a:a6:47:10:2b:18:2e:b6:
45:33:18:c6:a0:95:4d:25:7e:ec:82:d6:3b:02:9a:
e3:3b:0d:e0:d6:c2:bb:b5:2e:99:45:d8:a8:ea:24:
7c:d9:a4:4a:37:05:da:56:74:25:5c:88:5b:b5:c2:
08:ea:09:66:cc:15:6e:63:1d:a6:ab:c5:0f:f3:d2:
05:99:1e:a8:b7:2d:18:d1:bf:75:bc:e0:c7:4f:70:
25:7f:70:7c:32:c6:8c:ab:73:21:6d:e8:8d:68:74:
43:47:d2:e1:9e:d8:16:4b:a4:eb:5c:21:4d:5d:9c:
7a:09:91:8b:47:24:a8:12:4e:81:b1:cb:17:50:1d:
d1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:85:B0:DF:85:20:D9:FC:DA:55:BB:7D:EF:02:3A:AC:21:C0:55:C9
X509v3 Authority Key Identifier:
keyid:1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9e:26:9a:bb:e9:b8:5a:78:33:6b:a8:90:00:98:35:7a:3c:
e6:04:ff:ef:f8:51:02:19:78:dc:95:bb:66:95:a9:25:09:0b:
94:9b:49:69:bb:6d:d1:17:db:e3:aa:1e:f9:95:33:49:bc:06:
66:2c:37:8d:1f:50:f4:ac:c9:94:bd:ba:5c:6e:3b:8b:10:3a:
28:a8:85:d3:f8:82:83:77:fb:20:89:29:54:4a:d9:e0:0f:86:
f7:3c:55:43:53:59:9e:85:58:f8:a6:d1:58:51:0b:ac:f9:be:
95:6b:af:d9:d5:e1:38:60:b6:b0:bf:02:27:35:e5:8b:e1:d5:
34:ca:db:a8:8b:68:9b:7e:46:c9:be:47:5b:57:ac:95:50:28:
7d:97:37:74:c9:b9:fe:b7:7e:04:f9:50:1d:93:e7:7c:e5:1a:
6d:dc:53:bf:f0:0d:24:09:c1:35:60:48:39:ab:dd:6e:ef:5b:
ad:5b:58:a7:6a:fa:97:01:8c:02:63:3f:4e:8e:5c:f6:02:54:
d4:65:e3:91:fe:ca:db:75:fa:8c:7a:28:c2:a9:b0:25:a8:ea:
09:cf:a2:21:21:b9:a5:77:bc:53:39:ac:ae:c1:a2:1e:04:41:
60:d7:18:ef:ad:1d:d6:61:65:5f:9e:94:3c:40:82:85:c0:94:
ac:8a:ad:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:32:55 2026 by rpki-client