Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/909dc1-c048-4fb4-898a-0710747a2e91/1/hkCo0qJ0maklfW7UZjoLMNob_jM.mft
File: hkCo0qJ0maklfW7UZjoLMNob_jM.mft (raw, json)
Hash identifier: YlLNcnILDU8xpnZxIxLfCkXk0f2pFB70rxkBjSzQhPc=
Subject key identifier: 78:05:A8:47:AE:B9:C3:A4:2F:CD:F6:42:B3:22:29:34:30:50:6A:7C
Authority key identifier: 86:40:A8:D2:A2:74:99:A9:25:7D:6E:D4:66:3A:0B:30:DA:1B:FE:33
Certificate issuer: /CN=8640a8d2a27499a9257d6ed4663a0b30da1bfe33
Certificate serial: 019D2771D1E12CB40CE665A3496D75B364AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkCo0qJ0maklfW7UZjoLMNob_jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/909dc1-c048-4fb4-898a-0710747a2e91/1/hkCo0qJ0maklfW7UZjoLMNob_jM.mft
Manifest number: 0C2D
Signing time: Thu 26 Mar 2026 00:01:03 +0000
Manifest this update: Thu 26 Mar 2026 00:01:03 +0000
Manifest next update: Fri 27 Mar 2026 00:01:03 +0000
Files and hashes: 1: hkCo0qJ0maklfW7UZjoLMNob_jM.crl (hash: 2AzX5yvtcpKh0AlNrZu1JmZErxexs6O3K7eI52m/5i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/909dc1-c048-4fb4-898a-0710747a2e91/1/hkCo0qJ0maklfW7UZjoLMNob_jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/909dc1-c048-4fb4-898a-0710747a2e91/1/hkCo0qJ0maklfW7UZjoLMNob_jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hkCo0qJ0maklfW7UZjoLMNob_jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d1:e1:2c:b4:0c:e6:65:a3:49:6d:75:b3:64:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8640a8d2a27499a9257d6ed4663a0b30da1bfe33
Validity
Not Before: Mar 26 00:01:03 2026 GMT
Not After : Mar 27 00:01:03 2026 GMT
Subject: CN=7805a847aeb9c3a42fcdf642b322293430506a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:32:76:6b:aa:0c:ee:1e:e7:b5:d7:46:7a:
ac:53:35:8f:a1:30:4e:d7:be:63:22:56:1f:f9:3f:
8f:42:1e:0a:2a:18:91:b4:24:50:dc:f3:e2:16:0d:
74:b0:4a:50:dc:55:c5:aa:cd:15:ed:35:fb:e7:18:
92:fd:9f:18:d2:f2:09:3b:ea:f3:9f:31:89:a3:17:
28:b4:08:c9:e6:ab:77:f1:c8:6f:39:0a:b7:6a:32:
30:d9:cc:8a:07:48:c2:5d:1d:e7:a9:6b:e7:f5:ce:
ac:1d:2d:c0:06:06:99:3d:91:36:1d:ed:d0:e8:37:
34:bd:65:c5:3a:ca:e3:d2:1c:86:f6:f9:b7:a5:a6:
6f:55:ea:23:14:c1:52:db:ad:b1:16:6c:f8:57:5d:
50:ea:0a:50:6e:fe:75:d4:a3:c6:28:c8:60:a3:ba:
1f:3d:05:bd:ed:c2:23:69:bb:f4:00:5e:ac:da:67:
76:41:ac:ac:57:fd:c7:ae:06:6c:c8:7d:71:32:1b:
9d:a6:01:f7:9c:c3:74:98:6c:59:48:78:1b:ac:8f:
e3:b6:a1:02:50:31:33:6e:1d:99:77:eb:c7:dc:21:
1c:04:17:cc:28:9f:3e:61:4d:4c:60:98:4f:05:8f:
09:05:55:25:32:a3:5d:b3:6c:1e:d9:e4:1c:b3:bb:
30:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:05:A8:47:AE:B9:C3:A4:2F:CD:F6:42:B3:22:29:34:30:50:6A:7C
X509v3 Authority Key Identifier:
keyid:86:40:A8:D2:A2:74:99:A9:25:7D:6E:D4:66:3A:0B:30:DA:1B:FE:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkCo0qJ0maklfW7UZjoLMNob_jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/909dc1-c048-4fb4-898a-0710747a2e91/1/hkCo0qJ0maklfW7UZjoLMNob_jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/909dc1-c048-4fb4-898a-0710747a2e91/1/hkCo0qJ0maklfW7UZjoLMNob_jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:13:1c:0d:63:a5:1b:bf:d8:e9:f8:37:4a:79:7a:a1:49:b9:
82:0f:46:2f:ac:fd:04:64:27:1b:69:a9:ff:24:80:b1:f0:de:
63:18:0d:07:8d:e3:59:2a:cf:3c:c3:7a:07:d3:9c:4e:1a:36:
0a:ee:c7:92:90:79:40:e2:0c:fe:32:0e:2c:45:81:4c:3e:e0:
0a:50:ad:57:08:0b:66:e3:60:2a:82:6e:f0:ff:2b:4b:79:c5:
14:ee:5f:f4:0c:b6:af:f2:13:dd:4b:ea:4c:42:d7:7b:fd:b2:
e4:8d:41:02:3d:f1:da:cf:08:39:17:e5:05:d5:eb:37:51:25:
dd:a6:1d:04:2c:fd:67:04:4d:79:3c:6b:49:cc:76:1f:34:1b:
84:5a:d4:23:8e:10:ec:33:ac:db:e1:11:46:59:25:3a:38:57:
52:b5:55:67:2f:c9:77:9e:90:10:30:ec:18:b5:e9:87:7f:37:
50:35:10:f7:d8:d6:60:04:2b:2c:e9:56:61:77:d8:8c:b3:a9:
6b:f4:05:3c:2e:aa:2a:a9:54:28:8b:51:5d:01:c4:c4:7b:20:
47:d9:e2:6f:fe:73:42:e7:ed:6b:b3:5b:c8:0f:d4:06:d1:fc:
ea:b8:e2:f4:90:40:a0:e1:92:05:3a:22:71:04:6f:ad:51:41:
48:98:f4:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncdHhLLQM5mWjSW11s2StMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NDBhOGQyYTI3NDk5YTkyNTdkNmVkNDY2M2EwYjMwZGEx
YmZlMzMwHhcNMjYwMzI2MDAwMTAzWhcNMjYwMzI3MDAwMTAzWjAzMTEwLwYDVQQD
Eyg3ODA1YTg0N2FlYjljM2E0MmZjZGY2NDJiMzIyMjkzNDMwNTA2YTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBUydmuqDO4e57XXRnqsUzWPoTBO
175jIlYf+T+PQh4KKhiRtCRQ3PPiFg10sEpQ3FXFqs0V7TX75xiS/Z8Y0vIJO+rz
nzGJoxcotAjJ5qt38chvOQq3ajIw2cyKB0jCXR3nqWvn9c6sHS3ABgaZPZE2He3Q
6Dc0vWXFOsrj0hyG9vm3paZvVeojFMFS262xFmz4V11Q6gpQbv511KPGKMhgo7of
PQW97cIjabv0AF6s2md2QaysV/3HrgZsyH1xMhudpgH3nMN0mGxZSHgbrI/jtqEC
UDEzbh2Zd+vH3CEcBBfMKJ8+YU1MYJhPBY8JBVUlMqNds2we2eQcs7swmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgFqEeuucOkL832QrMiKTQwUGp8MB8GA1UdIwQY
MBaAFIZAqNKidJmpJX1u1GY6CzDaG/4zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGtDbzBxSjBtYWtsZlc3VVpqb0xNTm9iX2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC85MDlkYzEtYzA0OC00ZmI0LTg5OGEt
MDcxMDc0N2EyZTkxLzEvaGtDbzBxSjBtYWtsZlc3VVpqb0xNTm9iX2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC85MDlkYzEtYzA0OC00ZmI0LTg5OGEtMDcxMDc0N2EyZTkx
LzEvaGtDbzBxSjBtYWtsZlc3VVpqb0xNTm9iX2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzRMcDWOl
G7/Y6fg3Snl6oUm5gg9GL6z9BGQnG2mp/ySAsfDeYxgNB43jWSrPPMN6B9OcTho2
Cu7HkpB5QOIM/jIOLEWBTD7gClCtVwgLZuNgKoJu8P8rS3nFFO5f9Ay2r/IT3Uvq
TELXe/2y5I1BAj3x2s8IORflBdXrN1El3aYdBCz9ZwRNeTxrScx2HzQbhFrUI44Q
7DOs2+ERRlklOjhXUrVVZy/Jd56QEDDsGLXph383UDUQ99jWYAQrLOlWYXfYjLOp
a/QFPC6qKqlUKItRXQHExHsgR9nib/5zQufta7NbyA/UBtH86rji9JBAoOGSBToi
cQRvrVFBSJj0BQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:32 2026 by rpki-client