Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
File: HK37nPzahCYhLdfYhztf5ItBLyo.mft (raw, json)
Hash identifier: 7Rn7WKxUyIm+GMSjVb2tgaoVbVlF6fWDMJ5Ij3LGpqk=
Subject key identifier: 39:CD:7D:BD:B1:D7:11:5A:D7:76:EA:64:AA:AD:B3:56:42:5D:2F:8E
Authority key identifier: 1C:AD:FB:9C:FC:DA:84:26:21:2D:D7:D8:87:3B:5F:E4:8B:41:2F:2A
Certificate issuer: /CN=1cadfb9cfcda8426212dd7d8873b5fe48b412f2a
Certificate serial: 019F92ECD229E83228957828F6C0FB39DD99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
Manifest number: 14C7
Signing time: Fri 24 Jul 2026 07:00:21 +0000
Manifest this update: Fri 24 Jul 2026 07:00:21 +0000
Manifest next update: Sat 25 Jul 2026 07:00:21 +0000
Files and hashes: 1: HK37nPzahCYhLdfYhztf5ItBLyo.crl (hash: BKFSsErpq++60/7/nbkQ/z1fKI7L4vud4ynlwRwgUO0=)
2: XKQN9GdCDnkkYw875rkSfXAvJBg.roa (hash: fV6EdFaVajqg4dj/k6xrLoqomy/vlK7OlhjNnf6pmQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:d2:29:e8:32:28:95:78:28:f6:c0:fb:39:dd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cadfb9cfcda8426212dd7d8873b5fe48b412f2a
Validity
Not Before: Jul 24 07:00:21 2026 GMT
Not After : Jul 25 07:00:21 2026 GMT
Subject: CN=39cd7dbdb1d7115ad776ea64aaadb356425d2f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7f:24:0a:ce:43:85:75:22:61:59:c2:1e:be:
2f:5a:f1:89:e8:f4:43:99:66:6f:f4:56:3c:92:12:
84:d6:dc:22:01:02:41:3f:f6:4a:bd:99:c2:ba:a6:
60:40:f2:d2:29:74:27:df:1d:c2:63:d2:6a:d2:94:
d8:22:e5:09:17:aa:23:aa:e8:7f:6c:22:41:2c:cf:
58:4d:4d:62:b5:9b:52:44:e4:9f:8f:13:67:73:ef:
86:bc:5a:75:09:cc:96:dd:15:c6:47:b4:d1:b3:d5:
6a:88:0a:48:0f:cf:f9:66:49:8b:53:30:13:7f:cd:
f1:de:f5:6b:7c:a7:82:c0:b5:57:a0:f4:c0:58:3d:
92:65:c7:df:f3:20:2b:e8:01:c7:c5:b5:8d:94:07:
c9:33:df:aa:5a:4f:90:1b:95:9a:bf:20:74:13:f1:
f2:4e:c6:c8:a7:dc:97:98:8a:0a:a8:e8:f4:ef:a4:
42:3b:93:a5:cb:07:87:7f:6b:d6:c7:08:02:f7:3d:
65:94:56:14:20:7d:bc:53:4d:f9:9c:44:b3:05:72:
94:11:e5:de:b2:ea:e3:75:ad:b6:01:5b:19:15:7e:
30:f3:4f:7a:bf:8b:38:2a:34:85:b1:6d:ca:81:58:
eb:72:41:ba:95:8b:2f:b8:9a:bf:7b:cf:31:2d:fc:
18:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CD:7D:BD:B1:D7:11:5A:D7:76:EA:64:AA:AD:B3:56:42:5D:2F:8E
X509v3 Authority Key Identifier:
keyid:1C:AD:FB:9C:FC:DA:84:26:21:2D:D7:D8:87:3B:5F:E4:8B:41:2F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2f:41:f8:3d:11:64:07:6d:a0:b4:bc:78:36:cf:5b:aa:35:
37:07:97:9b:f0:4f:d8:2d:6a:96:0d:e8:52:53:40:78:e6:1f:
31:c1:cb:6b:83:9b:e7:51:f0:62:2e:d1:29:d2:88:60:35:89:
c6:3c:c2:48:f4:df:12:4d:b9:0a:e6:d5:ca:d2:b9:d0:45:c7:
29:f7:ed:b3:9a:b0:8e:47:45:4d:2b:bc:bf:9d:1e:ae:a0:3b:
1a:ac:f9:2e:2a:4a:6e:1b:ac:e5:10:1b:31:f7:77:29:f4:56:
a4:c4:04:61:b6:6c:64:1c:bd:b0:40:3e:e1:77:8c:e8:5e:7e:
b0:e1:d4:5c:67:85:d7:0a:88:11:49:16:b0:ee:7b:b4:1b:03:
b3:6e:3f:db:2d:a1:3f:96:93:9f:7f:53:69:51:d3:39:c7:48:
7a:2f:fc:69:78:c9:24:6c:45:2f:8e:eb:fb:d3:1c:52:40:02:
8d:7b:59:29:ed:53:30:c9:6d:e2:5d:b9:3b:ba:3c:f8:86:db:
04:e5:3d:9f:17:37:9d:04:d5:f3:f7:22:73:7f:13:c3:85:ca:
58:74:fe:b9:ab:14:05:be:06:73:de:04:4d:3f:7f:68:fb:8a:
88:ef:8c:3e:79:61:36:37:47:ee:46:fa:da:4a:fd:74:29:f8:
1f:a2:87:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:50:23 2026 by rpki-client