Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
File: HCiwfBV6XcYTySZNr4nnyGDjPmM.mft (raw, json)
Hash identifier: v7kTaeGidnhmjKjHH70Vy6VEzsUgyp7/vAqaXfIUGkQ=
Subject key identifier: AC:47:E9:20:8B:E7:36:6A:46:AA:D5:59:CF:1D:4B:86:F0:38:67:6E
Authority key identifier: 1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
Certificate issuer: /CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Certificate serial: 019D284D47B1DC78F40E6840D7A3CE3A03B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
Manifest number: 1893
Signing time: Thu 26 Mar 2026 04:00:46 +0000
Manifest this update: Thu 26 Mar 2026 04:00:46 +0000
Manifest next update: Fri 27 Mar 2026 04:00:46 +0000
Files and hashes: 1: HCiwfBV6XcYTySZNr4nnyGDjPmM.crl (hash: G3KTc+wPWJ/ssq10yJKU+dU4Gqo6r0zk4pY4hETYDtc=)
2: iRVjihfwRYJETXspv6JRTsIrfXI.roa (hash: 3nsOjJGMe27V8EM8Am0pLzNkNlpRhB+GO1fG/bewBbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:47:b1:dc:78:f4:0e:68:40:d7:a3:ce:3a:03:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Validity
Not Before: Mar 26 04:00:46 2026 GMT
Not After : Mar 27 04:00:46 2026 GMT
Subject: CN=ac47e9208be7366a46aad559cf1d4b86f038676e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:24:19:47:3e:34:7b:05:d5:ff:1a:96:cc:07:
1e:56:9d:be:67:f8:95:ac:ed:40:e4:a4:8d:fa:6a:
27:78:72:2d:7f:2f:4f:af:26:0d:3c:62:60:99:8d:
fc:8b:15:66:9f:3c:a3:13:24:48:f8:10:b7:17:d3:
e7:50:d4:e4:ec:56:8c:d6:e9:24:f0:ed:21:da:9d:
51:67:03:bf:d6:2f:6a:85:47:84:5c:53:7e:15:e4:
97:71:7c:92:ec:72:0f:d9:90:0d:fa:ac:95:4a:bb:
b3:93:6d:4e:d8:33:56:87:6a:b6:bf:31:c8:f0:85:
c8:24:66:d7:3e:82:82:01:22:f9:80:8d:85:4f:02:
51:d1:d1:a3:e8:7e:c4:ce:10:0b:99:5f:13:22:ce:
e6:3e:5d:fc:c2:83:06:5d:d6:78:c9:f2:18:02:7a:
16:85:d4:f2:8d:88:6b:ab:17:29:46:ac:e6:c5:b4:
bd:d8:35:a2:f2:6f:85:98:ec:a5:3b:cf:05:07:5e:
39:4b:6c:f3:d5:68:1c:67:67:28:d4:09:84:47:90:
f2:70:56:36:69:00:70:0b:00:78:d9:3b:af:7f:90:
5b:88:2b:26:1b:d5:34:e5:16:6c:4c:7b:7e:1e:4d:
7e:67:87:d1:ba:59:b3:f7:a2:be:7c:27:21:e9:fc:
37:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:47:E9:20:8B:E7:36:6A:46:AA:D5:59:CF:1D:4B:86:F0:38:67:6E
X509v3 Authority Key Identifier:
keyid:1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:56:e2:d0:a0:17:7d:43:85:e3:ff:51:19:99:34:67:a8:91:
65:b3:d6:22:d0:c7:0e:5a:8c:26:93:f0:24:6c:0b:78:ef:ac:
7c:e5:93:60:ea:c4:b9:90:db:39:02:81:d0:2d:fe:0b:b1:06:
76:7d:50:35:07:b3:91:81:f4:65:ca:03:f3:e5:05:6b:86:3f:
81:64:c5:8b:94:2a:69:74:4a:08:a5:b8:61:8a:bf:8b:c8:da:
05:cb:75:e0:5b:2d:e7:3a:26:ec:0c:7e:c2:07:8d:2c:a8:ee:
f9:62:39:e9:f4:f2:aa:a2:7c:29:21:84:1b:02:22:3f:6c:3a:
6d:a9:40:37:75:a0:28:ed:fa:3c:69:1a:4f:33:ce:99:f2:64:
58:64:ed:1a:28:b6:4a:f4:ce:a9:5e:e6:d0:d0:48:e4:63:fe:
05:a0:12:38:96:91:82:b0:21:08:03:ad:d5:6c:9c:e4:8d:f6:
90:27:d9:bf:e1:2f:fd:8b:8a:b4:b4:f9:57:15:49:4d:11:f0:
47:61:7f:8f:5d:2b:8d:dc:f5:f9:71:09:a3:cc:19:68:7e:6f:
de:03:2f:7c:35:3f:4d:23:cc:60:7e:bd:d3:4f:52:5f:fe:b2:
50:de:7f:bc:f9:97:7a:c8:18:40:c4:33:2f:9f:b4:c7:e2:5c:
df:6b:20:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:27 2026 by rpki-client